Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: HxvNdK35LdR3Ti6xTtcQbVr2pIHqXn/tCNzdgQrB9wU=
Subject key identifier: FE:86:50:F5:22:1C:5F:2F:BF:4D:B2:F7:E9:6D:E9:57:B0:C8:E9:B0
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 01974F6A61F8F553EE6F8A5D59219CC7A5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 0DB3
Signing time: Sun 08 Jun 2025 12:01:01 +0000
Manifest this update: Sun 08 Jun 2025 12:01:01 +0000
Manifest next update: Mon 09 Jun 2025 12:01:01 +0000
Files and hashes: 1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=)
2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: pm2H2Z4QV5g9g6d+1BWWWFCQpMAttXakMDROJGXpdao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:61:f8:f5:53:ee:6f:8a:5d:59:21:9c:c7:a5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Jun 8 12:01:01 2025 GMT
Not After : Jun 9 12:01:01 2025 GMT
Subject: CN=fe8650f5221c5f2fbf4db2f7e96de957b0c8e9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:9f:08:a2:25:15:12:9b:8a:a3:50:ee:33:
ad:27:ce:08:e8:67:fe:39:e5:79:14:35:a5:b1:c7:
32:36:d2:f5:6c:43:ac:1c:68:be:5b:76:f0:33:f9:
c0:4c:8e:0e:ff:38:9c:d8:37:c7:a7:00:7e:93:eb:
ba:96:45:39:f1:57:2b:b1:5a:61:10:6b:f5:8b:2f:
44:33:61:83:38:0c:3b:98:7a:b0:1b:c7:e4:34:ac:
86:d7:ef:a1:72:4f:14:30:1c:6e:be:e1:c4:73:61:
0f:47:93:04:02:56:dc:1c:ea:b7:c4:74:19:2b:2e:
8e:8b:e0:fe:39:32:7f:fd:1f:4a:33:0f:56:38:72:
4e:b6:f3:3a:d6:fc:42:94:a7:f8:67:15:9d:44:4b:
47:49:bb:6e:5b:05:0a:a7:cb:e8:02:70:61:d0:8b:
30:a0:97:10:0e:14:ec:65:61:84:5c:17:4d:c9:05:
3d:fb:a8:b0:e2:a5:de:f5:f6:86:33:4b:aa:1f:4c:
10:4b:8d:d9:af:53:8a:4b:4e:8e:78:e0:39:55:97:
13:b2:b5:ba:c0:3d:20:79:10:22:b8:19:08:99:d9:
ae:23:82:e4:c3:c3:01:cb:0c:ed:0d:62:53:3d:4e:
4f:3b:41:7d:54:fd:e1:55:95:e0:aa:b3:73:92:e4:
50:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:86:50:F5:22:1C:5F:2F:BF:4D:B2:F7:E9:6D:E9:57:B0:C8:E9:B0
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e3:b5:b9:9c:95:ef:0e:b2:a2:ca:0d:01:c1:2f:30:e5:3d:
ca:27:bf:b5:b6:4a:88:3b:83:ae:32:29:66:89:34:a1:5d:d1:
3b:80:c6:e9:8c:f9:6d:d9:45:59:8b:74:63:dc:ad:75:91:5c:
26:06:39:68:14:0d:1d:bc:03:aa:f9:d3:a0:e0:73:04:7a:dd:
e7:8d:64:f4:81:51:6a:bb:8f:13:ba:d7:3c:41:86:02:a5:f0:
20:0c:34:17:20:68:0b:89:41:9d:16:5b:4b:be:ce:d4:2b:7f:
27:b4:cf:4c:04:03:9b:cc:5d:5c:60:e9:3f:29:fd:4a:04:44:
c7:79:5f:63:73:55:53:0e:17:27:28:41:50:16:67:a3:87:13:
07:5b:c9:7b:b7:5c:3a:77:c2:d0:03:49:d1:30:7c:47:a6:ed:
6d:46:d4:cc:ff:1d:34:34:51:d6:c3:d8:5b:fb:81:34:a9:74:
b8:59:d1:42:4d:61:ac:ec:4e:85:c8:e0:95:b1:e2:40:90:d4:
a3:0b:bc:f8:77:ca:9b:a6:cc:56:2a:0a:66:8f:c2:4a:bc:41:
ba:a6:8a:82:f1:59:16:63:58:ad:2d:9c:a5:9c:4a:8f:62:09:
d7:9a:6f:6b:38:9c:16:3c:03:79:47:c8:7a:d5:0a:b6:91:a4:
05:32:db:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPamH49VPub4pdWSGcx6XGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZmM5ODQyOGMyNDUxYzFhZWRmOGFmZmMwNzJhOTU4Njhl
Y2VlOGIwHhcNMjUwNjA4MTIwMTAxWhcNMjUwNjA5MTIwMTAxWjAzMTEwLwYDVQQD
EyhmZTg2NTBmNTIyMWM1ZjJmYmY0ZGIyZjdlOTZkZTk1N2IwYzhlOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu2fCKIlFRKbiqNQ7jOtJ84I6Gf+
OeV5FDWlsccyNtL1bEOsHGi+W3bwM/nATI4O/zic2DfHpwB+k+u6lkU58VcrsVph
EGv1iy9EM2GDOAw7mHqwG8fkNKyG1++hck8UMBxuvuHEc2EPR5MEAlbcHOq3xHQZ
Ky6Oi+D+OTJ//R9KMw9WOHJOtvM61vxClKf4ZxWdREtHSbtuWwUKp8voAnBh0Isw
oJcQDhTsZWGEXBdNyQU9+6iw4qXe9faGM0uqH0wQS43Zr1OKS06OeOA5VZcTsrW6
wD0geRAiuBkImdmuI4Lkw8MBywztDWJTPU5PO0F9VP3hVZXgqrNzkuRQSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6GUPUiHF8vv02y9+lt6VewyOmwMB8GA1UdIwQY
MBaAFJ/8mEKMJFHBrt+K/8ByqVho7O6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQt
Yjk2ZDJmYmVmZWJkLzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQtYjk2ZDJmYmVmZWJk
LzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeO1uZyV
7w6yosoNAcEvMOU9yie/tbZKiDuDrjIpZok0oV3RO4DG6Yz5bdlFWYt0Y9ytdZFc
JgY5aBQNHbwDqvnToOBzBHrd541k9IFRaruPE7rXPEGGAqXwIAw0FyBoC4lBnRZb
S77O1Ct/J7TPTAQDm8xdXGDpPyn9SgREx3lfY3NVUw4XJyhBUBZno4cTB1vJe7dc
OnfC0ANJ0TB8R6btbUbUzP8dNDRR1sPYW/uBNKl0uFnRQk1hrOxOhcjglbHiQJDU
owu8+HfKm6bMVioKZo/CSrxBuqaKgvFZFmNYrS2cpZxKj2IJ15pvazicFjwDeUfI
etUKtpGkBTLb4g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:15:29 2025 by rpki-client