Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: yAEppfJQ1msoCCFXf2M/fJ8GGhkozCWLEuU8xcoYmTs=
Subject key identifier: 34:6A:78:AA:40:BA:63:8C:95:1B:C5:62:68:91:69:18:93:B5:92:DA
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019A70DC11EFD92E47C6F22C3DBB0B2A0E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 0F52
Signing time: Tue 11 Nov 2025 03:01:01 +0000
Manifest this update: Tue 11 Nov 2025 03:01:01 +0000
Manifest next update: Wed 12 Nov 2025 03:01:01 +0000
Files and hashes: 1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=)
2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: 4SFb2p3ySPznfabKmQZdoP2Rd5HStR7daG2vEla6sCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:11:ef:d9:2e:47:c6:f2:2c:3d:bb:0b:2a:0e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Nov 11 03:01:01 2025 GMT
Not After : Nov 12 03:01:01 2025 GMT
Subject: CN=346a78aa40ba638c951bc5626891691893b592da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:e8:a2:66:a8:77:42:5e:75:ce:4e:39:ca:
41:e8:3a:00:53:3c:ef:79:79:3f:6a:0c:60:73:72:
d3:d1:31:7b:66:45:10:80:86:e1:68:9a:36:9d:45:
fc:25:c9:51:2f:fb:b5:ac:97:bd:1a:0b:f3:c5:72:
39:8e:3d:3d:30:20:68:04:5d:95:71:47:40:f5:f1:
92:61:29:76:f3:cc:70:30:a9:d5:37:fc:5b:c7:49:
13:89:12:30:57:a0:2b:c1:1d:76:7b:bf:ba:3f:6d:
ff:8d:9e:53:39:b7:61:a0:82:18:79:44:cd:30:b5:
f2:b7:fe:4f:88:c8:e3:1b:c9:e3:b3:85:3f:2d:06:
29:2e:5e:8d:d3:99:c0:b9:9a:d6:ed:57:be:f3:2c:
44:3f:2e:4b:08:94:2d:cc:c6:5a:df:37:bc:bd:d1:
e3:f1:53:46:56:45:ff:f6:93:fa:1e:f4:bd:ab:22:
a0:32:4b:29:fe:e4:4e:86:00:18:70:1a:c5:74:5d:
18:7c:1e:9f:cd:0b:da:5a:c8:b3:e1:1e:82:93:a7:
be:76:20:a2:59:ab:36:7a:99:40:de:54:91:0f:ca:
e3:5c:db:aa:05:84:03:02:ab:45:7b:db:5e:27:bc:
ef:be:5e:42:a1:a3:35:a2:2e:40:ca:83:be:94:2e:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6A:78:AA:40:BA:63:8C:95:1B:C5:62:68:91:69:18:93:B5:92:DA
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:02:0f:07:5e:5b:28:6b:fc:00:d8:29:7b:65:d8:fb:ee:ad:
20:94:0c:c5:7b:23:b6:1f:59:e8:7d:87:ec:42:db:0b:a2:52:
c5:92:f0:54:de:95:d2:3c:75:f4:b4:7b:3f:12:54:b1:4f:86:
d9:9b:24:57:d9:de:d4:a3:44:45:96:fa:b9:9f:a2:8d:2e:d7:
c7:20:1c:7b:77:1b:a3:4a:d1:a8:3e:9e:5d:29:2e:67:89:61:
73:6c:b1:fd:10:32:10:b2:42:95:e8:87:09:76:c9:47:62:51:
17:0d:e3:f9:df:3a:40:43:af:a6:67:ac:82:7d:95:6a:ed:5f:
dd:1e:c7:5b:aa:a4:e8:5c:0d:ca:0f:31:be:15:db:8f:ae:19:
00:81:06:40:cb:40:15:ac:88:c5:5a:ab:8a:dc:47:39:16:9e:
94:03:8e:17:36:bb:e5:49:e2:ff:52:78:ea:f7:02:b9:20:62:
23:d3:4e:d8:4d:db:1f:9f:6e:b8:6e:55:ae:ae:35:11:0f:b8:
12:1d:d9:a3:a6:a3:97:40:f4:3d:87:d8:3d:9e:1a:4d:f0:1b:
f7:ac:af:63:7f:f2:29:85:ea:91:80:5e:7c:55:78:01:98:8f:
a1:83:ef:80:e3:d0:dd:81:22:d7:b6:1f:50:5d:72:2d:12:53:
7e:af:47:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:14 2025 by rpki-client