Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: P8aZzff4c9Ll3kSOX3W1DdZiuZz1MHsuZJqwjpCJ0l4=
Subject key identifier: 8E:66:5D:BC:84:32:04:BC:48:AF:3D:18:28:8E:0C:74:1E:4C:FD:5C
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 0198D5BC28A254DA3F791D47CA44C802F701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:14 +0000
Manifest this update: Sat 23 Aug 2025 07:02:14 +0000
Manifest next update: Sun 24 Aug 2025 07:02:14 +0000
Files and hashes: 1: n4pnMVZxlX9TG0NR081RempX3Jo.roa (hash: 8S5TjyfptYQw+P8e6JYICrqdcf6QlYccxjHA7efduik=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: LMoFuhAGr8F1oo2HC2RzNWtKbrH85rT/4M2aYAc15T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:28:a2:54:da:3f:79:1d:47:ca:44:c8:02:f7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: Aug 23 07:02:14 2025 GMT
Not After : Aug 24 07:02:14 2025 GMT
Subject: CN=8e665dbc843204bc48af3d18288e0c741e4cfd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:18:c4:d0:28:56:5a:f1:c1:1a:9c:80:6c:
d9:03:41:cc:22:4d:22:b2:1d:f8:f1:a1:76:9e:5e:
f5:65:29:fa:9d:a9:58:19:24:65:0c:21:69:65:45:
48:43:dc:a0:1c:12:d6:2f:ec:69:27:9e:66:83:06:
54:24:2b:d8:57:26:78:ed:19:c2:0b:14:ce:32:5b:
67:87:db:c2:46:08:9f:d3:9b:9b:19:1e:f9:ab:de:
1a:e5:f4:02:f5:56:4a:43:6f:e4:d8:33:5f:53:0d:
7e:47:29:d8:72:d1:89:fe:ab:a4:e5:7d:bd:e8:97:
1b:58:b6:39:9e:35:15:0e:36:0d:db:1c:50:52:b3:
ea:01:f1:c0:1f:20:cc:55:b5:f7:ab:9d:f4:4c:5b:
53:f7:25:f7:64:80:48:9a:3f:68:8b:b0:41:e1:b4:
59:c0:22:e5:9a:6e:20:60:c4:c4:cb:80:9d:e0:43:
a0:22:5e:41:44:1c:f3:3b:e4:e0:5c:46:a7:80:0f:
28:9e:05:10:5d:a4:79:15:8e:a5:0e:83:c0:8c:9f:
a6:41:bf:b9:5f:2e:fb:78:b2:ac:30:ba:5c:9c:1a:
b1:46:48:5b:ee:78:00:7f:30:4c:9f:c8:be:87:8c:
ee:b0:b7:4a:7e:f7:58:1b:99:4e:06:5f:aa:fa:18:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:66:5D:BC:84:32:04:BC:48:AF:3D:18:28:8E:0C:74:1E:4C:FD:5C
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5a:b4:c1:a1:f3:d5:2d:05:a8:29:a0:3f:c1:ee:4e:0e:4a:
4d:25:26:7a:d5:74:41:21:44:3c:16:22:60:d2:ea:cf:a4:7e:
b5:b4:03:e1:87:a8:15:72:6b:65:34:03:98:03:12:23:8d:64:
b4:30:40:3e:22:50:7d:b7:7f:a6:78:d2:e6:65:ed:8c:a3:18:
ec:9f:98:c9:7a:32:5e:e1:70:37:42:61:af:a2:64:d2:5d:99:
6f:2c:78:66:79:25:36:0f:6b:af:f1:7c:f9:7f:b7:9a:5e:06:
28:77:8b:a5:1c:d0:04:44:7e:0d:b4:21:19:ee:a2:95:91:73:
82:e0:66:a1:7f:7f:13:f1:ac:f8:9e:8f:41:62:09:e8:38:97:
d7:1b:8e:d1:78:12:48:93:a5:9e:42:88:4b:f6:6b:44:d9:49:
71:ae:8f:f7:c0:84:c5:43:31:a5:31:e5:00:82:2c:db:70:11:
8f:29:ea:43:ae:02:b8:2e:71:b9:fb:89:62:bf:52:65:10:f9:
5f:4a:ea:7f:36:dc:a2:9e:d9:36:15:e6:55:8b:e4:35:0e:11:
4c:50:16:b9:65:13:92:a8:f8:9a:f7:85:c4:a2:b4:d9:22:67:
eb:cd:97:49:a2:6f:8a:fe:76:91:d0:00:05:77:46:5d:9c:a6:
d7:a2:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:02 2025 by rpki-client