Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: gxB1gm6gW9X8Vj4EZ/cBnw/Z8MvB7PbezElNrPN50Nw=
Subject key identifier: F4:AB:C7:25:59:D4:B1:32:AF:FC:D8:28:B4:04:F7:5A:B3:C6:B4:30
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 019A72936ED176203B528CFA88B1C5D77691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 11:00:56 +0000
Manifest this update: Tue 11 Nov 2025 11:00:56 +0000
Manifest next update: Wed 12 Nov 2025 11:00:56 +0000
Files and hashes: 1: Pd6y31NGl2E53PuxfNWQ2uuokU4.roa (hash: JFGjsWEPBeCuSIlrpF4Du2GayxrXTaSof5LXDS+PGd4=)
2: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: RWdoTcUUbAkE1JPSHZ2BcB2e0DRQFeId5YZr7CAh4nk=)
3: dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa (hash: 1X+g9lFYFIJoJGwfwGANKciE/PMScLctb1+/RsHdL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:6e:d1:76:20:3b:52:8c:fa:88:b1:c5:d7:76:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Nov 11 11:00:56 2025 GMT
Not After : Nov 12 11:00:56 2025 GMT
Subject: CN=f4abc72559d4b132affcd828b404f75ab3c6b430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:8e:6d:e6:32:55:ea:f2:c5:f2:1b:7b:89:
33:96:60:2d:5d:37:04:d0:a7:d5:3f:05:b9:0f:6e:
ba:1e:e7:4b:ad:06:9c:4a:a1:49:b0:d9:1e:49:41:
d6:9d:18:91:31:65:a4:3d:aa:c5:a4:20:94:d5:9f:
db:49:a4:d0:8e:66:39:4b:d0:fb:6f:56:02:b8:4f:
c3:d0:e8:43:fd:2e:75:d0:c1:76:e7:26:45:4c:4b:
36:ac:9a:32:41:a7:3e:5c:cd:d1:ad:6d:6d:98:c0:
04:53:73:65:a6:b5:ef:72:d6:18:bf:e8:3b:2d:b8:
3d:d4:e6:12:f6:51:59:1d:1e:9c:63:2e:e0:40:9b:
26:2e:83:e3:dd:0e:52:ad:f5:7a:0f:aa:47:d0:ca:
b8:2d:d5:17:75:75:b4:d7:6f:c3:18:04:ae:17:7c:
c9:97:80:5f:8f:1a:0e:36:ff:44:9c:3b:8b:d0:27:
31:74:3d:b3:6f:a2:3e:55:97:8b:2d:33:85:94:93:
6a:d6:bf:ce:3e:03:f2:76:e8:14:06:08:99:69:48:
f6:ee:c6:01:1c:80:ec:54:73:59:0a:23:c8:00:4b:
a0:69:56:08:d7:a9:0e:84:8b:9a:e0:c9:99:63:51:
2a:0b:69:a1:be:09:d3:a1:e8:1b:45:af:35:64:db:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AB:C7:25:59:D4:B1:32:AF:FC:D8:28:B4:04:F7:5A:B3:C6:B4:30
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2c:e9:a1:69:eb:04:b5:6b:83:82:9b:6f:4d:29:f6:76:4c:
85:7e:6d:f0:11:fe:57:a1:ba:15:ac:12:48:e0:b7:db:e3:b5:
b7:32:eb:15:fa:8e:89:81:ac:98:3c:a8:54:d5:39:88:55:98:
cc:f8:2e:cf:9c:56:b4:c3:a5:ca:30:2d:8f:ca:ee:4a:5a:0b:
4a:08:6a:c9:ac:f0:cf:1f:3e:31:1d:a4:03:44:30:e3:0b:6b:
0e:1b:0d:5a:38:fa:78:3f:8f:41:4b:c4:35:69:b7:57:f9:36:
6c:c7:38:51:b2:62:f8:6d:93:da:fe:8e:29:9b:15:ff:85:fa:
7f:e7:4d:d1:8d:9b:c2:8a:06:26:8b:87:1f:e8:7b:27:ae:84:
bd:cc:85:c4:71:76:e3:52:fc:8d:8c:6a:fb:e6:90:6d:5f:69:
d9:fe:8c:e6:f1:af:c2:92:a9:d9:68:66:4c:b7:29:3c:8a:61:
b3:cb:c2:ff:32:23:ec:63:d7:5c:7b:dd:fb:a0:b4:27:10:ef:
6c:38:09:8a:57:4b:94:89:12:ce:05:83:cf:d3:cb:9b:a7:b4:
8e:36:0a:d2:30:c1:03:9c:33:72:a8:2a:95:cd:31:59:be:8d:
85:40:d3:64:98:70:9c:c4:31:f5:d2:09:b0:ca:a1:2e:29:19:
cc:1c:30:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:08 2025 by rpki-client