Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
File: nw9-mftNZUTyIt84qJjrFiwNgY4.mft (raw, json)
Hash identifier: Cmk2JfXK87PyrteVD6vgVH3j/mJiiwvUxqGuzt2+0cU=
Subject key identifier: A4:36:4D:89:1B:F1:EF:F7:45:F0:D6:94:6B:D2:92:49:E9:16:9C:AE
Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
Certificate issuer: /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Certificate serial: 0199FC58C7695C2E6B0C691A2B319C5CF9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
Manifest number: 0BDC
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: 1gkcm_O-6wWeQqVAGZBnyhP54qI.roa (hash: nieo21q7o118HqvWop5XjeCS8y3w5y5mZQj+D431JE0=)
2: nw9-mftNZUTyIt84qJjrFiwNgY4.crl (hash: mTw6XOQXObVadMQonxXU9qG/te6HPi9mWzOqAI1HG+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c7:69:5c:2e:6b:0c:69:1a:2b:31:9c:5c:f9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=a4364d891bf1eff745f0d6946bd29249e9169cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:2c:db:e3:96:1e:db:9f:73:7a:bc:11:31:
dd:e6:de:1f:c0:86:d0:82:b9:e1:a0:9c:b0:dc:6a:
59:1c:5e:7e:42:ba:00:ec:8e:10:c8:63:96:44:63:
93:ad:5a:df:d0:18:d2:a0:04:20:c9:3b:97:35:c9:
ae:1e:b1:48:14:a6:b7:aa:bf:04:e7:1b:83:06:4d:
6e:58:ab:43:37:fd:53:d6:1b:2d:bb:2c:ca:ce:1a:
40:d3:f7:43:65:d3:89:b5:1b:a6:5d:0f:11:3e:3a:
80:d8:5a:d7:d1:03:71:16:d1:86:19:2a:21:74:88:
b0:e6:4f:ed:e4:6e:04:a1:91:f7:24:ec:14:d6:b5:
b8:c3:4e:fe:8f:25:44:f4:b5:0b:92:bb:0e:d4:f6:
55:41:b7:c1:31:93:f3:5b:f5:37:c0:55:29:a5:b0:
5e:ed:f6:b2:d1:d5:e7:40:33:50:72:1e:2c:21:c9:
b2:ab:ca:83:ea:4f:27:3f:75:f5:f9:4f:ef:3b:50:
55:be:0f:2d:06:1a:f7:9e:5a:bf:6e:90:cb:8c:cf:
5c:3d:26:ff:80:6f:8e:84:72:c3:51:27:8f:69:9a:
7e:f1:70:1b:9b:5b:38:25:3a:c6:6c:55:0e:61:ab:
b0:90:3c:af:27:42:f7:24:ff:f1:b7:e8:06:36:30:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:36:4D:89:1B:F1:EF:F7:45:F0:D6:94:6B:D2:92:49:E9:16:9C:AE
X509v3 Authority Key Identifier:
keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:02:f1:3f:6e:fe:13:28:f5:9d:54:95:75:81:eb:21:36:dc:
77:91:b3:7c:12:01:9b:33:a3:57:fe:4f:59:de:31:24:c1:06:
af:65:36:20:1b:9d:27:64:6b:2c:a3:89:fc:52:26:ca:d1:98:
c4:a1:e1:3d:38:5f:93:7e:fd:4c:13:5a:4e:78:8a:9b:4a:47:
89:c6:c3:e1:4c:57:07:b7:5b:0e:92:15:85:c4:38:27:76:48:
e0:f5:6d:d1:fb:b0:06:1a:70:1c:e8:a8:b3:57:03:b8:14:8d:
b5:54:4b:c2:5f:4e:4f:2d:14:eb:20:29:d7:96:f8:49:c2:ca:
53:9e:4c:92:4c:91:d9:7a:8b:cb:29:92:75:e3:ae:b0:85:c9:
f7:40:b6:56:72:67:60:16:88:7d:60:72:1a:7c:39:56:e4:ec:
34:d0:6b:d3:c0:01:02:4d:1a:05:5d:78:3a:96:0f:42:ce:3c:
86:00:5d:40:33:da:ca:cb:cb:92:51:cf:87:54:7f:6d:2b:1d:
33:2d:80:15:cf:b8:57:0b:93:d2:bd:a9:ae:1a:4e:d9:4a:69:
dc:6f:f5:8a:a9:ac:44:54:d5:89:98:5a:5e:97:21:5e:0b:b7:
5b:b7:e9:09:ba:49:d8:32:94:3a:f3:ee:dc:cf:9e:c3:b3:1f:
3b:d5:11:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WMdpXC5rDGkaKzGcXPniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMGY3ZTk5ZmI0ZDY1NDRmMjIyZGYzOGE4OThlYjE2MmMw
ZDgxOGUwHhcNMjUxMDE5MTIwMTQwWhcNMjUxMDIwMTIwMTQwWjAzMTEwLwYDVQQD
EyhhNDM2NGQ4OTFiZjFlZmY3NDVmMGQ2OTQ2YmQyOTI0OWU5MTY5Y2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VQs2+OWHtufc3q8ETHd5t4fwIbQ
grnhoJyw3GpZHF5+QroA7I4QyGOWRGOTrVrf0BjSoAQgyTuXNcmuHrFIFKa3qr8E
5xuDBk1uWKtDN/1T1hstuyzKzhpA0/dDZdOJtRumXQ8RPjqA2FrX0QNxFtGGGSoh
dIiw5k/t5G4EoZH3JOwU1rW4w07+jyVE9LULkrsO1PZVQbfBMZPzW/U3wFUppbBe
7fay0dXnQDNQch4sIcmyq8qD6k8nP3X1+U/vO1BVvg8tBhr3nlq/bpDLjM9cPSb/
gG+OhHLDUSePaZp+8XAbm1s4JTrGbFUOYauwkDyvJ0L3JP/xt+gGNjBJ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQ2TYkb8e/3RfDWlGvSkknpFpyuMB8GA1UdIwQY
MBaAFJ8Pfpn7TWVE8iLfOKiY6xYsDYGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85NjJlYzUtMzhjNy00NzkwLTg5NjIt
MGRmNTY2ZWE2NGRkLzEvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85NjJlYzUtMzhjNy00NzkwLTg5NjItMGRmNTY2ZWE2NGRk
LzEvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQALxP27+
Eyj1nVSVdYHrITbcd5GzfBIBmzOjV/5PWd4xJMEGr2U2IBudJ2RrLKOJ/FImytGY
xKHhPThfk379TBNaTniKm0pHicbD4UxXB7dbDpIVhcQ4J3ZI4PVt0fuwBhpwHOio
s1cDuBSNtVRLwl9OTy0U6yAp15b4ScLKU55MkkyR2XqLyymSdeOusIXJ90C2VnJn
YBaIfWByGnw5VuTsNNBr08ABAk0aBV14OpYPQs48hgBdQDPaysvLklHPh1R/bSsd
My2AFc+4VwuT0r2prhpO2Upp3G/1iqmsRFTViZhaXpchXgu3W7fpCbpJ2DKUOvPu
3M+ew7MfO9URFg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:04 2025 by rpki-client