Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
File: nw9-mftNZUTyIt84qJjrFiwNgY4.mft (raw, json)
Hash identifier: CON7tN9esLZuUma0XyVTVozh0amzzA5e5OZmSi3G8pU=
Subject key identifier: 08:AE:D0:01:B3:34:27:06:65:F0:00:68:8F:D9:B7:7E:D0:A7:00:BD
Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
Certificate issuer: /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Certificate serial: 0197B70E67E02E129C03641D78B50482110C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
Manifest number: 0AAF
Signing time: Sat 28 Jun 2025 15:01:03 +0000
Manifest this update: Sat 28 Jun 2025 15:01:03 +0000
Manifest next update: Sun 29 Jun 2025 15:01:03 +0000
Files and hashes: 1: 1gkcm_O-6wWeQqVAGZBnyhP54qI.roa (hash: nieo21q7o118HqvWop5XjeCS8y3w5y5mZQj+D431JE0=)
2: nw9-mftNZUTyIt84qJjrFiwNgY4.crl (hash: AK7UEDF4e4T/KkfmJgMe6LKCqxaACGyk1prKLjYA0fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:67:e0:2e:12:9c:03:64:1d:78:b5:04:82:11:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Validity
Not Before: Jun 28 15:01:03 2025 GMT
Not After : Jun 29 15:01:03 2025 GMT
Subject: CN=08aed001b334270665f000688fd9b77ed0a700bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:b0:5f:0f:8d:3b:37:f8:24:9c:8c:03:fd:
d3:76:62:41:74:00:93:6b:35:ca:2f:d1:59:54:39:
a5:bf:20:1c:92:01:61:b5:6e:47:30:a3:97:4b:5e:
79:31:a1:d3:0f:98:7b:4d:a9:d0:e3:c8:1e:fd:85:
e6:01:85:f7:f5:f6:7a:77:a1:29:e7:96:59:42:6d:
74:a7:e2:39:aa:71:f4:c8:21:0b:7e:11:65:31:12:
16:2f:ca:8c:84:a2:d0:3f:92:df:fe:13:55:39:a3:
b7:62:3b:5a:f0:62:ac:16:39:fc:51:2d:dd:b8:45:
1c:bf:de:83:34:0d:20:bc:32:45:b3:5b:fc:2e:46:
09:72:6b:94:7e:df:07:23:30:82:85:cd:22:8c:78:
0f:fb:cb:90:6f:1f:3e:9d:18:ef:d3:e3:dc:23:67:
b3:78:87:07:15:5d:7f:3a:5a:b6:9c:52:36:7b:ee:
c8:03:ca:b6:b0:40:96:70:70:53:e3:3f:f4:35:24:
28:76:ef:fc:43:62:73:ea:fc:e2:97:e6:78:4f:fc:
e9:de:71:42:0b:5c:9e:13:b6:1b:6a:8b:91:b7:d7:
9f:c9:8c:14:16:86:93:7a:bd:32:60:1d:30:af:12:
61:76:ad:51:2d:7c:d2:0b:15:29:c3:cb:78:fc:97:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AE:D0:01:B3:34:27:06:65:F0:00:68:8F:D9:B7:7E:D0:A7:00:BD
X509v3 Authority Key Identifier:
keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f6:3d:d7:27:f2:bb:7d:ea:31:15:cd:f4:0d:0e:e8:b8:3c:
f9:00:9b:2b:5c:00:61:92:e5:eb:dc:09:b6:57:8a:24:7b:a7:
b2:3a:32:18:0d:60:3d:e4:a0:03:80:b6:07:0f:08:f1:07:68:
f4:52:0d:5d:7c:6a:24:99:ac:f4:13:d7:00:0c:7c:7b:b9:49:
ac:1c:96:30:7d:e3:61:3f:5a:ba:10:d9:39:7f:33:c7:45:35:
6e:72:c5:e1:dc:8e:05:de:8d:6e:d2:f3:8b:13:27:90:c9:2a:
dd:47:1b:38:6a:a7:e8:d6:0b:54:36:5b:7f:b9:96:f1:be:10:
26:f9:11:df:0a:43:66:3e:81:f1:4a:e6:9d:f4:b0:70:50:98:
0a:72:b1:64:cb:7f:34:b3:37:b7:f1:03:9b:6f:48:66:37:4e:
2e:77:b8:c6:37:7c:2a:9f:17:30:07:a0:be:10:85:9b:f0:06:
1d:4a:6c:5b:29:c0:92:7d:0f:ac:18:3f:ac:67:2b:01:93:18:
09:18:ba:16:a3:2b:98:0c:b4:a4:64:16:d9:4b:91:2d:a1:37:
39:a3:b5:a6:ce:8d:39:a1:07:a8:74:f0:c8:fd:85:8a:d2:28:
11:6a:6d:4c:75:23:5c:38:fb:b2:98:84:97:ab:27:9c:aa:0a:
53:7f:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:12 2025 by rpki-client