Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: UaD+HfCjnwahrQG0iKkTgMJssJRaJCggjnC8laD/22g=
Subject key identifier: F7:72:B6:D1:0D:85:BA:69:30:45:FB:96:B1:F6:DD:C0:74:55:61:B4
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 01993612ABB8D83EA17B6E92C1537021D447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 0EAF
Signing time: Thu 11 Sep 2025 00:00:17 +0000
Manifest this update: Thu 11 Sep 2025 00:00:17 +0000
Manifest next update: Fri 12 Sep 2025 00:00:17 +0000
Files and hashes: 1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=)
2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: 2pX9Yz4jWT4ZzK+3xGuUGcGwbvJq1rV4VBXeUU4d3vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:12:ab:b8:d8:3e:a1:7b:6e:92:c1:53:70:21:d4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Sep 11 00:00:17 2025 GMT
Not After : Sep 12 00:00:17 2025 GMT
Subject: CN=f772b6d10d85ba693045fb96b1f6ddc0745561b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:f8:e0:0e:9e:f5:c4:d1:c4:49:99:d2:6f:
4b:e1:48:89:f2:89:da:a9:21:23:91:d0:53:95:8a:
37:d5:16:7f:1a:aa:ee:1f:87:7d:22:93:0b:f2:06:
ca:e1:0b:6b:5f:65:61:8c:95:80:d6:20:81:21:e8:
32:d7:7b:2f:ae:62:24:bf:6d:3f:fe:12:a0:b4:0c:
ba:a3:4b:e7:76:10:de:26:1a:a5:26:3e:e0:9c:dd:
1f:00:64:73:a5:02:d9:2f:86:c4:ab:cb:24:f9:f9:
75:d5:c0:d2:93:c1:d3:d0:e7:4c:9e:1a:fd:9f:79:
39:b9:09:d9:dc:9f:59:2d:63:0e:03:91:4d:1e:85:
5e:4d:f1:aa:de:a4:d5:01:cb:b3:b8:b1:f9:67:2f:
8a:d8:80:c0:cf:b0:ec:e1:c7:e1:da:73:25:71:f1:
88:a4:59:bf:5e:f9:cb:bd:ec:d2:60:5b:91:88:c5:
6b:14:f6:ab:96:85:1c:ac:2b:ed:ee:72:42:23:c0:
c0:fe:f6:7a:bf:34:88:c1:5a:48:21:6d:86:d6:4f:
5a:ef:7f:8d:a5:b2:83:ed:fd:f5:89:38:ca:90:08:
47:a0:ba:06:de:76:24:52:ca:98:e3:a8:5d:04:b9:
91:12:ea:23:0f:b6:6f:68:26:3d:88:44:f4:b6:67:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:72:B6:D1:0D:85:BA:69:30:45:FB:96:B1:F6:DD:C0:74:55:61:B4
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:13:b3:d2:46:a7:05:16:3d:2d:d5:55:44:b5:86:cc:19:a3:
bc:a1:ec:ab:68:43:40:0c:0b:ef:c0:d2:47:92:28:63:b8:eb:
05:1f:ae:31:2d:ef:8a:26:69:2c:d3:fa:eb:e4:1b:1f:2f:62:
4d:f5:d2:d8:24:d1:fb:28:10:fe:81:c6:6d:89:a4:24:93:41:
b6:2e:7f:0d:21:da:be:e1:b9:1a:33:c3:6f:c0:5b:58:49:90:
49:44:51:1b:66:15:ec:d0:3a:c2:72:11:af:b9:ac:7b:7a:fc:
c2:4d:b8:c8:b5:0f:37:c1:f3:12:02:b1:51:06:8c:ff:c9:30:
8d:8d:0a:fb:5a:a2:bb:a1:c5:40:46:74:e5:10:56:dc:70:32:
d7:57:15:0f:9d:23:77:8e:8e:cd:89:46:f2:6f:8d:f6:8e:a7:
92:b5:b5:5c:f3:e5:4d:a5:5c:58:65:2b:4c:a7:3e:9b:5a:02:
9b:16:59:5d:9d:49:eb:d5:62:82:8f:d3:d5:a5:e5:dc:e1:3c:
2a:f8:b9:ef:3c:4e:79:bc:68:c8:50:83:42:d3:55:ce:17:82:
c8:08:b6:bc:f8:90:74:b8:ef:ec:df:d6:9d:8d:28:c9:97:50:
6a:0a:68:14:d2:92:dc:4d:66:f5:a7:51:a8:d3:a9:33:b4:a4:
a4:ff:0d:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2Equ42D6he26SwVNwIdRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZmM5ODQyOGMyNDUxYzFhZWRmOGFmZmMwNzJhOTU4Njhl
Y2VlOGIwHhcNMjUwOTExMDAwMDE3WhcNMjUwOTEyMDAwMDE3WjAzMTEwLwYDVQQD
EyhmNzcyYjZkMTBkODViYTY5MzA0NWZiOTZiMWY2ZGRjMDc0NTU2MWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6n44A6e9cTRxEmZ0m9L4UiJ8ona
qSEjkdBTlYo31RZ/GqruH4d9IpML8gbK4QtrX2VhjJWA1iCBIegy13svrmIkv20/
/hKgtAy6o0vndhDeJhqlJj7gnN0fAGRzpQLZL4bEq8sk+fl11cDSk8HT0OdMnhr9
n3k5uQnZ3J9ZLWMOA5FNHoVeTfGq3qTVAcuzuLH5Zy+K2IDAz7Ds4cfh2nMlcfGI
pFm/XvnLvezSYFuRiMVrFParloUcrCvt7nJCI8DA/vZ6vzSIwVpIIW2G1k9a73+N
pbKD7f31iTjKkAhHoLoG3nYkUsqY46hdBLmREuojD7ZvaCY9iET0tmfIEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdyttENhbppMEX7lrH23cB0VWG0MB8GA1UdIwQY
MBaAFJ/8mEKMJFHBrt+K/8ByqVho7O6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQt
Yjk2ZDJmYmVmZWJkLzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQtYjk2ZDJmYmVmZWJk
LzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBOz0kan
BRY9LdVVRLWGzBmjvKHsq2hDQAwL78DSR5IoY7jrBR+uMS3viiZpLNP66+QbHy9i
TfXS2CTR+ygQ/oHGbYmkJJNBti5/DSHavuG5GjPDb8BbWEmQSURRG2YV7NA6wnIR
r7mse3r8wk24yLUPN8HzEgKxUQaM/8kwjY0K+1qiu6HFQEZ05RBW3HAy11cVD50j
d46OzYlG8m+N9o6nkrW1XPPlTaVcWGUrTKc+m1oCmxZZXZ1J69Vigo/T1aXl3OE8
Kvi57zxOebxoyFCDQtNVzheCyAi2vPiQdLjv7N/WnY0oyZdQagpoFNKS3E1m9adR
qNOpM7SkpP8NtQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 06:13:04 2025 by rpki-client