Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
File: nw9-mftNZUTyIt84qJjrFiwNgY4.mft (raw, json)
Hash identifier: hCCpbzr+Y1/DPohoAlpeXcl+fRymprL/VnpAJzZivZQ=
Subject key identifier: D2:B0:23:70:3B:B4:99:B4:55:2E:0D:61:47:5B:E7:CB:6B:4B:76:19
Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
Certificate issuer: /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Certificate serial: 0196802242D59633F3D05F594358C63A6CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
Manifest number: 0A0E
Signing time: Tue 29 Apr 2025 06:00:51 +0000
Manifest this update: Tue 29 Apr 2025 06:00:51 +0000
Manifest next update: Wed 30 Apr 2025 06:00:51 +0000
Files and hashes: 1: 1gkcm_O-6wWeQqVAGZBnyhP54qI.roa (hash: nieo21q7o118HqvWop5XjeCS8y3w5y5mZQj+D431JE0=)
2: nw9-mftNZUTyIt84qJjrFiwNgY4.crl (hash: 9Icq32/X7xCn4/GKtu6KhcjAxLxFeImb+0pd4yT45OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:42:d5:96:33:f3:d0:5f:59:43:58:c6:3a:6c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Validity
Not Before: Apr 29 06:00:51 2025 GMT
Not After : Apr 30 06:00:51 2025 GMT
Subject: CN=d2b023703bb499b4552e0d61475be7cb6b4b7619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:8a:45:db:2f:7c:d9:bc:a1:f5:f6:9a:a7:
0c:5b:b3:7b:59:35:d0:c7:a1:8f:0c:7c:7c:99:71:
70:8a:bf:b9:fb:3a:87:cf:b2:ed:a1:49:b9:92:53:
8b:c3:c4:69:1d:cd:48:a4:b7:96:c1:34:36:59:51:
35:4c:21:82:54:f4:dc:52:8d:f8:22:ec:73:c5:3e:
dd:53:c6:b1:2c:78:4f:6f:ec:de:fd:63:fc:03:bf:
47:c2:17:62:ad:6a:16:7d:a8:36:bf:fd:e1:eb:8b:
8b:ec:2a:46:f7:f4:a0:ee:be:a7:0c:71:1a:64:6d:
98:f3:48:3b:d0:8c:f0:bc:de:aa:1f:56:94:19:ee:
40:0c:4a:e1:24:d1:72:a5:05:85:7f:1e:41:22:ff:
80:12:7d:25:a9:83:a9:e7:c7:29:b4:e8:20:31:62:
ec:fa:b5:42:1e:84:a2:bb:5b:1b:c9:c1:71:41:2c:
d8:39:8c:2d:a5:44:70:ef:56:6b:3b:34:d1:74:a1:
47:26:4a:19:29:93:12:13:20:31:f5:0d:d2:81:46:
a3:be:e4:fa:1c:32:95:a1:20:79:91:5d:3b:51:c3:
a9:6d:ff:ab:73:c3:c0:f1:0c:06:a9:38:9a:4a:f5:
80:27:4e:57:28:7f:1c:4f:a8:34:58:9b:40:dd:6c:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B0:23:70:3B:B4:99:B4:55:2E:0D:61:47:5B:E7:CB:6B:4B:76:19
X509v3 Authority Key Identifier:
keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:88:bd:d7:e4:8b:8d:29:6e:1b:92:40:b2:b7:08:91:17:20:
ed:67:c8:6e:a7:5e:6a:9f:fa:0f:77:33:2e:2f:a0:b6:63:c1:
f4:2d:d7:9a:8e:ff:05:96:c5:19:52:10:09:94:f4:ab:2d:da:
9f:dc:0b:ab:9b:ab:55:81:90:1f:00:2e:88:5a:71:dd:98:a9:
d0:a3:65:20:1c:0c:e3:09:27:de:15:de:c6:96:69:10:93:b0:
b8:c2:7d:31:aa:43:67:75:5d:b6:e0:43:57:17:b3:15:9c:ed:
18:7e:77:5f:70:40:77:b9:13:15:de:2d:c1:75:b6:4c:bf:9b:
55:e0:26:3d:ea:1c:06:dc:57:3c:fd:6f:c1:e0:e5:01:a6:d1:
8e:31:9c:c1:7b:c1:97:62:dd:06:13:63:bd:86:1d:d1:5c:76:
88:15:39:aa:da:17:05:44:d8:5b:13:94:38:35:0d:7a:b0:0b:
71:ac:3b:57:c0:83:2d:f1:ed:1b:ce:f7:7c:8b:56:a4:e3:54:
22:13:25:0c:16:41:24:ed:7a:95:56:c1:28:84:89:f4:83:e3:
71:4d:fd:be:42:d8:6a:60:61:70:3e:24:91:23:56:67:9b:35:
38:91:6c:56:11:ae:ae:af:74:3c:ad:61:a7:57:4b:0a:11:e5:
07:af:b9:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAIkLVljPz0F9ZQ1jGOmyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMGY3ZTk5ZmI0ZDY1NDRmMjIyZGYzOGE4OThlYjE2MmMw
ZDgxOGUwHhcNMjUwNDI5MDYwMDUxWhcNMjUwNDMwMDYwMDUxWjAzMTEwLwYDVQQD
EyhkMmIwMjM3MDNiYjQ5OWI0NTUyZTBkNjE0NzViZTdjYjZiNGI3NjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPWKRdsvfNm8ofX2mqcMW7N7WTXQ
x6GPDHx8mXFwir+5+zqHz7LtoUm5klOLw8RpHc1IpLeWwTQ2WVE1TCGCVPTcUo34
IuxzxT7dU8axLHhPb+ze/WP8A79HwhdirWoWfag2v/3h64uL7CpG9/Sg7r6nDHEa
ZG2Y80g70IzwvN6qH1aUGe5ADErhJNFypQWFfx5BIv+AEn0lqYOp58cptOggMWLs
+rVCHoSiu1sbycFxQSzYOYwtpURw71ZrOzTRdKFHJkoZKZMSEyAx9Q3SgUajvuT6
HDKVoSB5kV07UcOpbf+rc8PA8QwGqTiaSvWAJ05XKH8cT6g0WJtA3WzvGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKwI3A7tJm0VS4NYUdb58trS3YZMB8GA1UdIwQY
MBaAFJ8Pfpn7TWVE8iLfOKiY6xYsDYGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85NjJlYzUtMzhjNy00NzkwLTg5NjIt
MGRmNTY2ZWE2NGRkLzEvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85NjJlYzUtMzhjNy00NzkwLTg5NjItMGRmNTY2ZWE2NGRk
LzEvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4i91+SL
jSluG5JAsrcIkRcg7WfIbqdeap/6D3czLi+gtmPB9C3Xmo7/BZbFGVIQCZT0qy3a
n9wLq5urVYGQHwAuiFpx3Zip0KNlIBwM4wkn3hXexpZpEJOwuMJ9MapDZ3VdtuBD
VxezFZztGH53X3BAd7kTFd4twXW2TL+bVeAmPeocBtxXPP1vweDlAabRjjGcwXvB
l2LdBhNjvYYd0Vx2iBU5qtoXBUTYWxOUODUNerALcaw7V8CDLfHtG873fItWpONU
IhMlDBZBJO16lVbBKISJ9IPjcU39vkLYamBhcD4kkSNWZ5s1OJFsVhGurq90PK1h
p1dLChHlB6+5Jg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:00:14 2025 by rpki-client