Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: sedYFh7bnID/8kqDg/LhnroAI2VHh6CpfenE/I59I9c=
Subject key identifier: 72:E1:AE:17:E1:8F:49:A5:AB:E6:AF:DE:97:DA:2E:ED:67:A0:6C:4C
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 0199FB460AE95DBB5D51999D7ED4FB9A792A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 07:01:35 +0000
Manifest this update: Sun 19 Oct 2025 07:01:35 +0000
Manifest next update: Mon 20 Oct 2025 07:01:35 +0000
Files and hashes: 1: n4pnMVZxlX9TG0NR081RempX3Jo.roa (hash: 8S5TjyfptYQw+P8e6JYICrqdcf6QlYccxjHA7efduik=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: luaQRo4h5QsatF/wy0O5+KwdtZXR6LRF8g3CvyBRDUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0a:e9:5d:bb:5d:51:99:9d:7e:d4:fb:9a:79:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: Oct 19 07:01:35 2025 GMT
Not After : Oct 20 07:01:35 2025 GMT
Subject: CN=72e1ae17e18f49a5abe6afde97da2eed67a06c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:02:41:cd:d9:93:be:8e:74:b5:7a:0c:0e:
71:08:d2:24:2b:c4:21:82:eb:ef:a0:c8:d0:a6:46:
06:f9:ce:00:eb:de:bb:ab:5b:56:75:b7:13:47:83:
87:f6:34:1a:91:c2:f7:fc:e0:44:93:bc:57:3c:45:
96:88:d5:36:f0:51:0e:23:c7:ff:7d:92:f2:d3:91:
ce:e1:f5:3c:ce:99:2a:ec:d4:4d:67:69:9a:f4:48:
7a:c2:3d:ba:17:af:a6:bb:0a:19:10:12:c2:96:47:
38:cc:26:e9:d7:d9:4b:fb:fe:b2:a8:ad:2d:cc:48:
e9:82:af:90:9a:c5:82:86:94:2a:e3:87:2c:7c:d3:
b2:91:2c:a5:b5:b1:b4:7c:1c:fa:c3:dc:c3:cb:fb:
90:4b:4f:cb:30:70:8a:63:f3:7a:37:66:9a:34:17:
92:66:de:aa:65:19:f8:59:00:26:15:26:1b:28:f6:
60:c2:55:f7:0c:94:7b:77:ca:69:c9:4e:3d:91:ca:
4a:3d:d6:54:5f:cb:4a:9c:d2:8e:f3:13:f3:e6:62:
51:9b:b5:1f:ec:55:9f:bf:a8:3f:85:e5:d8:ab:3c:
b4:09:19:91:de:6f:2b:aa:ee:44:c0:49:22:58:b7:
5c:08:67:ac:62:a6:fe:52:b1:26:05:11:ad:5f:bf:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E1:AE:17:E1:8F:49:A5:AB:E6:AF:DE:97:DA:2E:ED:67:A0:6C:4C
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2f:f4:a8:d0:88:b9:a4:1b:3d:d6:47:f2:f3:b7:24:e4:ad:
0f:49:98:c2:ad:e4:47:cd:eb:d0:97:cd:81:73:79:5d:d8:8a:
3f:52:6d:3f:ef:d8:ee:36:64:df:04:11:0b:0a:16:5a:6f:a6:
9f:5a:1c:8c:35:45:0f:5a:7c:3a:47:62:1e:ca:b0:d4:85:60:
b6:94:78:de:72:4f:e5:b9:2f:50:f4:8b:82:36:b8:b5:1a:a4:
0c:cf:8f:c5:c8:ea:c2:12:b1:68:6a:95:4f:88:2b:ed:54:a3:
a6:99:6f:a8:17:6d:19:f9:7c:b0:18:9a:89:2a:2e:0b:17:2c:
21:6b:f5:74:37:e3:ff:e5:c6:b6:18:3f:9f:c9:5f:6a:0d:d4:
5c:2c:d1:aa:92:d3:fe:95:43:62:c9:df:be:43:01:27:d7:c1:
4b:e0:60:bc:56:7d:d6:d6:85:a7:78:fc:85:a1:d5:05:55:9b:
8e:b3:19:9a:30:48:f1:71:70:88:08:74:61:41:b1:a3:51:f6:
69:e2:2e:86:12:57:60:12:90:a9:b9:3a:86:9c:82:1c:15:cf:
4b:47:86:ee:ff:a3:a8:52:69:42:14:c8:75:b8:da:8f:c6:47:
64:c0:67:59:3b:f4:df:f8:04:dd:a0:8a:ca:78:3d:88:61:eb:
88:31:cd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:25 2025 by rpki-client