Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
File: nw9-mftNZUTyIt84qJjrFiwNgY4.mft (raw, json)
Hash identifier: jpHfyezBGUxYCyvD1ltQendRkev80V95pQ4UNQlCMi8=
Subject key identifier: F1:DF:5B:D6:F8:AF:5F:8D:F2:11:BE:5A:79:94:DE:18:D1:C2:D4:B1
Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
Certificate issuer: /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Certificate serial: 01974EC53CAD78E49A59AB5CC5B010D3F07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
Manifest number: 0A79
Signing time: Sun 08 Jun 2025 09:00:38 +0000
Manifest this update: Sun 08 Jun 2025 09:00:38 +0000
Manifest next update: Mon 09 Jun 2025 09:00:38 +0000
Files and hashes: 1: 1gkcm_O-6wWeQqVAGZBnyhP54qI.roa (hash: nieo21q7o118HqvWop5XjeCS8y3w5y5mZQj+D431JE0=)
2: nw9-mftNZUTyIt84qJjrFiwNgY4.crl (hash: zGAaA+3pn1KsqBZEwFkmcT8Xs/rpCQ7c9VKHaw137A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:3c:ad:78:e4:9a:59:ab:5c:c5:b0:10:d3:f0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Validity
Not Before: Jun 8 09:00:38 2025 GMT
Not After : Jun 9 09:00:38 2025 GMT
Subject: CN=f1df5bd6f8af5f8df211be5a7994de18d1c2d4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:66:f0:ff:30:4a:27:0e:89:29:bd:af:62:3e:
ad:bb:b4:2b:2f:f6:f7:fd:66:48:bf:77:fa:a7:27:
c1:06:31:1f:d0:6c:73:aa:3a:98:88:73:f5:d2:7c:
0f:a1:8c:58:9e:1a:a7:8a:b0:4b:89:35:39:d1:b9:
0f:0b:17:3e:8b:9b:56:d5:af:c7:43:d0:07:d6:a3:
47:7d:26:01:6d:86:d0:59:2a:ea:12:13:cb:23:bf:
e5:95:8d:24:2a:70:25:df:04:c6:d3:b1:32:80:b2:
d7:c2:bb:0d:9b:73:a5:bf:28:8e:00:d7:2a:0a:8b:
01:61:a2:45:f0:be:60:fb:36:f4:eb:b1:c0:f6:0c:
af:88:ef:c6:35:bf:8d:38:a1:61:58:b3:dd:b2:49:
d6:20:ee:96:f7:ea:d9:06:d2:09:54:c2:54:ce:01:
65:67:36:af:25:30:f8:0f:6a:38:d6:bd:6a:53:57:
db:5b:2e:b3:0b:12:f9:5a:62:0e:6c:17:b7:3c:f4:
8d:d3:3c:97:85:fd:25:24:ae:44:2b:a6:a7:ea:4f:
3c:93:3b:f4:a5:1e:eb:f1:94:c2:bd:a2:ae:7f:a7:
53:ab:e2:84:01:64:96:e0:74:23:3d:61:64:58:17:
54:77:e3:36:33:4f:96:70:a4:4a:30:2c:78:8e:40:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DF:5B:D6:F8:AF:5F:8D:F2:11:BE:5A:79:94:DE:18:D1:C2:D4:B1
X509v3 Authority Key Identifier:
keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:18:cd:4f:76:d3:dd:59:03:28:46:70:f8:10:79:81:d2:26:
7e:29:a9:ea:a6:44:ab:84:ca:02:f9:96:90:c8:89:c1:41:7c:
84:84:9b:d4:b0:bd:62:f6:bb:fc:fe:7b:d2:11:b3:8c:85:77:
5f:5c:04:b5:f8:d5:45:43:54:e8:0b:97:2e:51:6a:d4:c3:82:
64:7b:ac:02:1c:b4:9c:fc:fc:80:3a:7e:10:b5:06:a4:e1:66:
66:14:76:e8:f8:ef:5b:45:95:a4:33:47:ad:65:16:17:14:3a:
f7:95:a4:e0:e3:9e:05:a3:36:28:c4:5c:62:be:7b:0f:da:5a:
37:89:30:cf:0c:9a:04:70:32:59:bc:4b:69:21:6b:dc:84:3e:
87:15:eb:58:83:5a:9b:79:b3:98:53:7c:b8:51:28:eb:98:e6:
96:68:a3:7d:22:4b:3a:d4:09:64:e9:0a:95:50:c4:46:85:f7:
9b:76:fc:7e:39:28:3f:c0:3c:de:8a:6b:c6:00:d6:1d:a4:27:
d8:1e:ed:4e:9f:35:0e:a3:5f:28:48:b4:4a:c6:10:c8:47:b7:
33:1b:11:d5:35:17:51:76:72:69:fc:dc:18:de:8d:09:72:21:
aa:ea:ae:d8:0e:0f:52:d5:37:f8:b2:9d:72:53:79:38:65:e2:
d6:2b:61:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxTyteOSaWatcxbAQ0/B9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMGY3ZTk5ZmI0ZDY1NDRmMjIyZGYzOGE4OThlYjE2MmMw
ZDgxOGUwHhcNMjUwNjA4MDkwMDM4WhcNMjUwNjA5MDkwMDM4WjAzMTEwLwYDVQQD
EyhmMWRmNWJkNmY4YWY1ZjhkZjIxMWJlNWE3OTk0ZGUxOGQxYzJkNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Wbw/zBKJw6JKb2vYj6tu7QrL/b3
/WZIv3f6pyfBBjEf0GxzqjqYiHP10nwPoYxYnhqnirBLiTU50bkPCxc+i5tW1a/H
Q9AH1qNHfSYBbYbQWSrqEhPLI7/llY0kKnAl3wTG07EygLLXwrsNm3OlvyiOANcq
CosBYaJF8L5g+zb067HA9gyviO/GNb+NOKFhWLPdsknWIO6W9+rZBtIJVMJUzgFl
ZzavJTD4D2o41r1qU1fbWy6zCxL5WmIObBe3PPSN0zyXhf0lJK5EK6an6k88kzv0
pR7r8ZTCvaKuf6dTq+KEAWSW4HQjPWFkWBdUd+M2M0+WcKRKMCx4jkAZuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHfW9b4r1+N8hG+WnmU3hjRwtSxMB8GA1UdIwQY
MBaAFJ8Pfpn7TWVE8iLfOKiY6xYsDYGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85NjJlYzUtMzhjNy00NzkwLTg5NjIt
MGRmNTY2ZWE2NGRkLzEvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85NjJlYzUtMzhjNy00NzkwLTg5NjItMGRmNTY2ZWE2NGRk
LzEvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchjNT3bT
3VkDKEZw+BB5gdImfimp6qZEq4TKAvmWkMiJwUF8hISb1LC9Yva7/P570hGzjIV3
X1wEtfjVRUNU6AuXLlFq1MOCZHusAhy0nPz8gDp+ELUGpOFmZhR26PjvW0WVpDNH
rWUWFxQ695Wk4OOeBaM2KMRcYr57D9paN4kwzwyaBHAyWbxLaSFr3IQ+hxXrWINa
m3mzmFN8uFEo65jmlmijfSJLOtQJZOkKlVDERoX3m3b8fjkoP8A83oprxgDWHaQn
2B7tTp81DqNfKEi0SsYQyEe3MxsR1TUXUXZyafzcGN6NCXIhququ2A4PUtU3+LKd
clN5OGXi1ithcQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:50:25 2025 by rpki-client