Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: wom2yWKQ2ABsf9GLrFF4KePL3eKzPaOAU2pdLQPN2vo=
Subject key identifier: C4:57:DE:20:DD:63:57:FD:07:52:B2:1C:C4:44:B4:89:ED:BB:07:F2
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 0198469B289C840472A4E9EEAE4B0155DF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 0E33
Signing time: Sat 26 Jul 2025 12:00:30 +0000
Manifest this update: Sat 26 Jul 2025 12:00:30 +0000
Manifest next update: Sun 27 Jul 2025 12:00:30 +0000
Files and hashes: 1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=)
2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: /50BW8YEA/x5pJDH35m2yfwxV2cEBWuIze3XloXTqNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:28:9c:84:04:72:a4:e9:ee:ae:4b:01:55:df:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Jul 26 12:00:30 2025 GMT
Not After : Jul 27 12:00:30 2025 GMT
Subject: CN=c457de20dd6357fd0752b21cc444b489edbb07f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:f9:7b:52:66:cf:34:98:92:7a:9f:72:a9:
f0:5c:54:ae:e4:38:08:f9:a7:db:74:ac:cd:a0:cb:
5c:3a:3c:4f:3d:99:82:15:fd:10:83:e1:e1:b2:4a:
1e:ec:9f:31:99:25:fe:1d:b5:a2:03:e3:e4:cd:ca:
b9:6a:14:39:a3:e9:20:52:a1:94:00:f1:d4:ae:9a:
5e:e8:a4:11:26:f8:05:17:ed:c2:70:66:42:00:5c:
99:e1:6c:77:44:1c:40:40:80:d8:8c:19:ad:80:24:
3c:51:07:13:40:52:c6:67:56:fb:9b:cb:4c:93:9d:
b2:f6:31:cc:89:32:e7:db:19:74:0b:8a:95:39:2d:
17:16:1f:b5:f5:03:87:b2:e5:d9:28:6f:07:fb:e2:
c8:83:29:cd:6c:49:b1:82:43:9a:f7:32:60:14:0d:
30:12:ae:0d:fd:f0:24:37:ea:54:ce:06:b4:f1:7e:
71:e5:d3:19:bd:54:2c:e3:aa:74:f7:8d:b4:bd:94:
44:e0:bc:50:7d:ed:d2:0f:3a:f7:05:07:d1:e1:f3:
2c:a2:c7:72:e3:c5:d1:d6:46:4c:74:10:da:d5:66:
91:8a:96:29:f9:17:f2:52:15:c2:40:05:0e:66:4e:
62:96:ce:84:fd:74:5c:e5:d9:d5:39:39:91:6f:e4:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:57:DE:20:DD:63:57:FD:07:52:B2:1C:C4:44:B4:89:ED:BB:07:F2
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:53:88:5b:83:5b:43:f6:09:34:e2:3b:42:e6:0e:f7:bc:86:
d6:e9:a6:ba:6d:4d:79:de:cc:44:68:61:91:bd:43:90:30:cf:
da:a4:b9:91:42:31:7e:f8:f2:21:d4:1a:26:19:6c:84:cf:a4:
6f:82:bc:20:66:7e:a1:d0:80:34:6d:1a:64:22:74:a9:3b:0e:
85:69:bc:50:cd:73:64:7d:44:a4:50:71:08:cc:eb:fe:2f:8b:
ab:f3:c1:f8:67:d6:b1:a2:a7:8a:db:8d:e7:98:42:c2:15:36:
7a:ce:55:6c:36:a4:c2:54:36:d1:f3:5d:a1:66:fc:c9:85:fb:
6f:ef:ec:f8:fa:50:61:97:04:c0:52:a0:dd:b3:d0:37:6a:3a:
3f:7f:7a:b5:b0:62:ca:2a:bb:93:25:e0:b0:09:71:b1:55:c2:
b8:bb:5d:f6:74:dc:d4:66:dc:30:ee:69:6b:a7:c1:f5:75:db:
95:77:dd:56:8e:a9:83:86:0c:5a:e1:ea:df:26:0d:c3:70:06:
7a:ae:79:e7:a1:81:c0:3a:19:66:b1:5a:2e:65:9d:83:cd:f2:
fc:74:76:7b:fe:80:8f:16:15:6f:e5:ba:fe:e3:21:c1:7c:95:
61:fd:a1:c2:18:e4:80:73:62:27:c1:23:30:81:35:7d:9d:01:
2d:0e:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:59:47 2025 by rpki-client