Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
File: nw9-mftNZUTyIt84qJjrFiwNgY4.mft (raw, json)
Hash identifier: y9Jf85Ce1AMuxQtIjvHpx2hWQDlR8Lwbz6RsU2Y9GUw=
Subject key identifier: A8:2A:B9:8D:2E:50:67:A2:69:8A:DF:71:1C:E8:4C:1E:9C:61:11:1D
Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
Certificate issuer: /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Certificate serial: 019A4F6202BEFEFFEB743CF84ADB5FE159CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
Manifest number: 0C07
Signing time: Tue 04 Nov 2025 15:00:14 +0000
Manifest this update: Tue 04 Nov 2025 15:00:14 +0000
Manifest next update: Wed 05 Nov 2025 15:00:14 +0000
Files and hashes: 1: 1gkcm_O-6wWeQqVAGZBnyhP54qI.roa (hash: nieo21q7o118HqvWop5XjeCS8y3w5y5mZQj+D431JE0=)
2: nw9-mftNZUTyIt84qJjrFiwNgY4.crl (hash: Kg7rZdS4Jt0f1l1HYkDSixD1a/GZNF9R28Oj2nDj7Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:02:be:fe:ff:eb:74:3c:f8:4a:db:5f:e1:59:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Validity
Not Before: Nov 4 15:00:14 2025 GMT
Not After : Nov 5 15:00:14 2025 GMT
Subject: CN=a82ab98d2e5067a2698adf711ce84c1e9c61111d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:37:22:42:b0:a6:e5:7e:e4:b1:ba:62:e3:
25:0e:1f:00:c6:1e:73:23:af:ff:fe:b6:e5:b9:29:
9f:5c:63:01:f5:de:1d:5f:d3:78:84:68:17:c0:59:
18:7c:c7:45:6d:ed:ac:19:54:2d:d2:cc:55:81:c8:
f0:2a:5b:3d:93:b1:f6:6f:80:f1:e1:ac:f0:cf:78:
06:38:d0:4e:73:f8:25:84:b2:c3:d1:76:81:55:da:
52:60:64:e1:91:03:b6:f1:98:39:61:22:e8:9b:fe:
53:01:ae:a1:b5:2f:22:8a:04:ea:d9:08:02:47:8e:
85:bc:43:4b:75:09:16:43:c1:19:4f:f6:ec:2e:88:
4e:ce:56:31:75:63:df:15:be:33:9e:d1:e7:ab:81:
a8:88:f4:bc:f0:98:8f:00:48:ba:75:ca:d2:22:64:
9e:b7:33:d2:0c:c3:11:1d:97:a1:03:3f:d7:16:9f:
b6:76:3a:c8:45:58:8b:4b:db:ef:23:ef:0d:9b:3b:
7b:4d:91:af:97:54:02:c4:49:ba:c0:07:fa:84:33:
ed:07:52:51:7d:de:0f:3d:3e:aa:de:67:67:18:de:
df:35:08:dc:4e:16:ac:da:8b:69:28:6d:bb:be:46:
91:4a:eb:36:97:6e:63:d2:99:6d:c0:6c:8a:ac:d7:
6c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2A:B9:8D:2E:50:67:A2:69:8A:DF:71:1C:E8:4C:1E:9C:61:11:1D
X509v3 Authority Key Identifier:
keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d2:8b:c9:31:0e:38:fe:1d:18:fa:aa:91:b2:17:47:e6:ea:
41:62:8a:ce:f8:c2:7a:a7:81:5c:d0:f2:10:f4:6b:ed:da:ba:
e0:e5:81:c5:96:66:7c:f3:51:60:8b:40:f4:f9:5f:2c:a7:5c:
07:85:f6:6f:0a:3a:a2:8f:54:76:6a:a2:02:b4:29:6d:5c:92:
a8:70:40:c9:4d:10:7e:11:2a:25:3b:ce:4b:7e:21:05:89:bb:
ef:5f:20:4d:38:6f:bc:c1:19:26:d6:48:4f:b2:f5:b3:07:58:
27:a1:00:ed:de:41:70:25:e4:dd:ef:70:9b:79:6f:c7:31:3f:
8e:77:22:5b:d7:e9:af:a7:44:92:1e:b7:b9:cf:e4:62:7e:60:
f3:70:0f:3b:53:57:7b:91:48:8a:0d:e8:a6:8e:bb:ca:94:af:
89:ee:2c:6e:f2:21:82:7b:70:5a:f6:8b:d6:a2:fd:2b:57:97:
0e:7c:71:61:07:eb:b7:63:69:57:20:9b:0b:9a:bb:27:d0:7e:
91:62:18:eb:70:fa:16:48:fa:59:a9:c0:1b:e8:41:03:9c:5a:
0b:8d:e8:2d:93:83:e4:d7:1d:b2:06:cd:33:56:3b:2f:3e:79:
42:5f:d3:a9:1d:06:bd:62:db:67:d1:ad:21:07:c4:d0:54:d9:
79:8f:72:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:02 2025 by rpki-client