Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: m7337ZQmxcVyyZmnNBzHBYg9dG3rqCymF0pDJr66x74=
Subject key identifier: 47:48:2A:E1:21:A3:28:61:4D:E1:83:DB:25:F9:25:03:7B:23:EB:AF
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 0197CB02FAB1E668B4E63DBF5F031C363E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 0DF3
Signing time: Wed 02 Jul 2025 12:00:59 +0000
Manifest this update: Wed 02 Jul 2025 12:00:59 +0000
Manifest next update: Thu 03 Jul 2025 12:00:59 +0000
Files and hashes: 1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=)
2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: TuIBr2r9HUf3hVkwn5n+uzLo9wKtgux5bOweO4eCUB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:02:fa:b1:e6:68:b4:e6:3d:bf:5f:03:1c:36:3e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Jul 2 12:00:59 2025 GMT
Not After : Jul 3 12:00:59 2025 GMT
Subject: CN=47482ae121a328614de183db25f925037b23ebaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:42:11:5f:56:2c:45:47:40:19:b4:42:a2:
0d:f4:bb:eb:51:0c:3a:d4:60:05:6f:b3:c8:a5:d5:
24:7e:e8:0f:6b:bc:d9:6f:6b:a9:4b:04:65:87:49:
ff:ee:a7:15:b2:41:d0:83:ec:b1:cb:6e:90:51:81:
d0:27:ef:44:81:06:50:d3:3e:31:62:3b:4d:97:ce:
c3:01:46:fc:2a:45:21:b6:5b:d5:35:c6:26:48:5a:
ed:f6:0b:23:68:96:51:e8:08:f6:22:71:45:c4:93:
75:fc:00:38:3d:d3:a7:ef:7f:9a:0b:8f:73:4d:3d:
1f:7c:52:e7:53:03:7a:19:d9:32:2d:7b:3b:bc:ad:
b8:01:18:ec:1c:c4:d6:3a:ef:a1:de:0c:f6:d6:0d:
5f:f8:15:af:ba:49:92:9c:9c:8e:f0:df:94:46:15:
95:79:b8:44:6c:89:04:36:e0:c2:16:d8:8e:0a:e6:
08:6e:ca:55:98:93:24:bf:70:8d:59:db:1b:fa:13:
21:85:6d:22:b9:b3:7b:eb:9b:ef:da:1c:fe:e4:30:
b0:5b:07:af:59:7b:86:d2:c1:da:b3:01:df:c6:95:
49:aa:90:81:fb:b3:5c:6b:02:74:24:97:1c:a1:28:
bb:fd:13:1f:8a:1a:df:6f:8c:e9:bb:62:d9:cb:e5:
97:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:48:2A:E1:21:A3:28:61:4D:E1:83:DB:25:F9:25:03:7B:23:EB:AF
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c8:e6:7e:94:f3:85:ed:04:74:79:a6:76:f3:41:92:9d:8c:
6c:33:7b:a9:f8:06:ee:42:0a:1a:9f:f8:a3:bb:68:c8:51:2b:
34:60:31:f8:75:41:02:f0:ce:b1:61:29:4e:68:79:12:f7:83:
d5:27:46:1d:2e:b2:1f:3b:96:a7:db:42:6c:e5:9a:c9:8a:5f:
f5:b2:67:29:df:7c:c0:89:e2:70:0f:95:3f:1a:96:0c:16:4a:
6f:a1:24:21:d3:cf:1d:65:3c:07:fe:e2:21:e2:f9:1c:3c:52:
4a:cd:fb:ea:4e:07:04:07:86:be:b5:b2:52:3c:93:77:6c:2e:
1c:ea:10:56:7d:3f:2d:a2:df:6f:39:35:91:b2:e2:80:51:08:
64:a2:38:77:30:38:a5:13:0e:6e:8f:9b:be:9b:8e:92:3f:5d:
58:b8:d4:7c:11:d3:3b:2c:62:cf:76:7a:61:a3:aa:b4:6a:57:
1d:a3:17:5a:0a:5f:92:b1:a3:ac:67:2a:c7:0d:db:28:f5:6b:
12:03:38:53:b9:f2:89:57:69:93:ed:a0:1d:d2:1d:71:80:83:
80:67:69:01:b1:d6:b2:c5:30:1d:ba:ce:8a:06:26:13:38:6b:
26:e0:ef:70:00:18:09:d1:fb:5c:c6:33:71:38:bb:20:37:fa:
a5:10:ef:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:15:42 2025 by rpki-client