Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
File: nw9-mftNZUTyIt84qJjrFiwNgY4.mft (raw, json)
Hash identifier: Hv9NDQH7tpsimdU3Xtr/KewHjcc47zY5hLfiJ7UYeqc=
Subject key identifier: 83:86:99:FA:AF:A8:FC:B3:30:CA:84:33:41:03:BA:A0:AA:66:EA:59
Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
Certificate issuer: /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Certificate serial: 0198D4E07BBE125D0807CDCECCA8048AE036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
Manifest number: 0B43
Signing time: Sat 23 Aug 2025 03:02:18 +0000
Manifest this update: Sat 23 Aug 2025 03:02:18 +0000
Manifest next update: Sun 24 Aug 2025 03:02:18 +0000
Files and hashes: 1: 1gkcm_O-6wWeQqVAGZBnyhP54qI.roa (hash: nieo21q7o118HqvWop5XjeCS8y3w5y5mZQj+D431JE0=)
2: nw9-mftNZUTyIt84qJjrFiwNgY4.crl (hash: cLZMJdMi0Li1auwEJtojIGPbyBcknHz7wf33jtAXauk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7b:be:12:5d:08:07:cd:ce:cc:a8:04:8a:e0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Validity
Not Before: Aug 23 03:02:18 2025 GMT
Not After : Aug 24 03:02:18 2025 GMT
Subject: CN=838699faafa8fcb330ca84334103baa0aa66ea59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:eb:7b:eb:75:f9:56:77:2f:a0:12:77:33:
04:36:dd:43:b9:17:7a:fd:c4:1a:b5:92:de:67:ee:
ce:9f:be:25:04:8a:dd:fb:3b:b4:7e:c4:82:e2:91:
ab:f1:56:32:74:56:1c:f5:fd:b5:d9:9f:62:df:3f:
dc:3f:36:d5:ba:6c:9a:f7:cf:69:4a:c6:c9:44:f9:
43:9c:dd:d9:c5:a8:80:34:53:0f:52:49:ea:71:68:
5f:cf:d2:d1:f4:34:e6:76:11:88:de:64:98:3d:db:
f5:e7:f2:a3:4c:f3:15:4f:db:8a:6e:db:0f:d3:13:
d0:d9:14:fb:54:7b:a4:13:f9:f0:12:31:1e:62:bd:
4e:13:fb:7f:68:2a:33:96:ab:3a:26:b7:bc:1d:60:
47:bf:22:fe:80:86:ac:cd:f9:6c:2c:2e:cb:38:ce:
4c:a5:3d:91:02:67:a2:92:31:e4:85:9c:f1:2b:96:
d1:eb:d1:a9:04:f8:23:58:b2:f0:49:32:e9:21:39:
39:c4:24:b0:50:92:92:4a:a3:12:95:b3:3d:4b:59:
c9:ad:ac:32:b2:f5:a6:42:62:59:25:90:48:c4:41:
9e:dc:21:8d:66:f2:45:d3:e7:ea:f9:20:e1:48:2e:
eb:63:a4:46:9e:93:9c:7d:40:c4:d3:c8:8b:9e:4b:
5c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:86:99:FA:AF:A8:FC:B3:30:CA:84:33:41:03:BA:A0:AA:66:EA:59
X509v3 Authority Key Identifier:
keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:88:02:b2:6b:e1:54:d8:7d:b5:dd:7d:fb:4a:0e:f3:d2:9d:
d1:97:d2:24:cd:1e:ab:08:ab:cb:4a:5d:20:9b:05:e8:df:93:
26:ab:4e:46:46:11:2c:51:d5:dc:f7:a8:9d:2a:1d:a6:ae:7c:
fa:18:fa:bd:2e:eb:0a:a1:79:1c:9a:b0:8f:eb:52:7c:9a:cf:
82:c0:eb:3e:74:e8:48:6f:12:f2:e2:40:2c:61:13:4d:92:47:
89:de:6e:24:44:5d:ca:bb:90:b3:ef:8a:28:a7:7a:83:88:9f:
e7:61:d3:bb:16:0c:92:c3:e4:e6:3d:a1:1e:5b:07:1b:cb:8b:
24:b5:98:42:11:2d:72:6b:70:00:fd:c0:6f:8f:40:59:26:f0:
a3:6a:20:8d:02:f2:b6:96:3d:46:bb:2c:d1:6c:14:ca:b9:a1:
40:36:c1:23:61:7f:29:6b:c1:a3:8e:55:31:57:31:02:97:80:
dd:a3:d0:4b:9e:39:a6:2b:fd:0d:dd:15:74:cf:44:56:79:ec:
76:5c:e2:72:8f:43:e1:a5:e0:40:3f:ed:f2:54:cb:be:12:30:
08:2b:18:45:f4:4d:01:73:8f:0d:35:14:8a:fa:98:2c:b5:d2:
e9:5f:76:8f:fd:d4:03:0d:3f:5d:ab:42:31:d5:cd:4a:ae:e9:
25:22:83:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:36 2025 by rpki-client