Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: dBmr1MWbWFxQMY20HisviDBcHi+PGADAP91PXda74NI=
Subject key identifier: FF:31:B9:E2:36:25:41:6A:86:6D:44:B9:92:8E:AA:2C:2E:25:90:86
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 0196C87262A7519F8E67D136C86CFAC7290A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 07:00:59 +0000
Manifest this update: Tue 13 May 2025 07:00:59 +0000
Manifest next update: Wed 14 May 2025 07:00:59 +0000
Files and hashes: 1: n4pnMVZxlX9TG0NR081RempX3Jo.roa (hash: 8S5TjyfptYQw+P8e6JYICrqdcf6QlYccxjHA7efduik=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: TSY0Q91cwJ1wkacGpe2hx0CACpJkekXtozAy2WxCoi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:62:a7:51:9f:8e:67:d1:36:c8:6c:fa:c7:29:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: May 13 07:00:59 2025 GMT
Not After : May 14 07:00:59 2025 GMT
Subject: CN=ff31b9e23625416a866d44b9928eaa2c2e259086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:04:41:96:1b:55:35:3d:f1:25:e3:ca:df:
7f:3d:40:ef:6c:56:2b:de:e5:7b:72:2a:b5:ba:26:
40:93:b8:83:fb:ec:ca:b5:8c:aa:f2:85:66:7f:13:
0d:bf:29:97:58:d5:52:3c:b5:dd:ff:67:6e:c0:b3:
27:6e:d4:95:dc:c6:18:06:13:63:36:0f:0c:29:f8:
43:9f:83:01:e5:2b:8b:e8:f0:11:45:db:92:59:65:
a3:bb:b4:b8:09:82:44:ff:e4:8f:5f:8b:80:63:ee:
98:44:58:72:05:0f:7b:6b:9a:a1:c6:5d:6a:72:96:
b0:cf:25:50:9c:94:e7:d6:8a:d8:87:7c:97:f9:50:
3a:85:a6:3e:5f:e1:2f:29:04:15:c4:4a:c6:f1:31:
dd:1f:e6:b0:6d:92:8b:97:d2:ef:c5:bf:03:b1:83:
fb:a0:4f:19:ee:fa:0f:19:97:a4:b9:64:a4:e2:2e:
ac:2e:12:04:14:c7:59:80:4b:96:fa:5a:7a:21:b9:
a9:c0:d6:a0:43:46:56:21:74:aa:1d:61:51:12:be:
35:97:54:7b:32:25:c0:99:80:76:19:df:a3:8c:3d:
d7:2e:d0:27:ad:d3:61:d6:1a:7f:e9:0d:9d:5b:50:
43:be:b5:62:49:af:98:93:6d:0c:18:36:f8:68:e9:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:31:B9:E2:36:25:41:6A:86:6D:44:B9:92:8E:AA:2C:2E:25:90:86
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:dd:42:92:a7:ff:ef:a2:36:c5:ea:e9:45:e2:8c:e1:65:a2:
5f:a8:11:c3:30:38:7b:9a:8d:4a:1b:cd:7d:77:92:e7:8d:f2:
ec:4a:ed:ca:d0:ad:f7:38:1a:0a:5c:98:59:1e:9b:9f:0b:0f:
d9:98:17:61:e6:f1:39:a1:a9:98:9b:b7:a5:40:52:d8:09:5c:
05:71:6b:ce:5c:32:03:02:34:26:87:f2:49:39:0d:c4:45:77:
bb:b5:75:5a:0c:b4:88:c5:fd:31:73:1b:bd:1c:28:bc:be:70:
87:5e:af:8b:d6:21:10:79:4b:92:db:05:3d:01:d0:c8:f1:02:
82:d0:10:8a:d3:e6:a2:97:e6:1c:6b:12:f1:1b:39:b5:81:9e:
4b:d7:91:53:71:d0:a2:d2:cd:00:bf:1c:91:85:1d:09:4c:05:
64:a1:df:a6:e5:65:6b:a7:6b:73:db:c3:f9:13:58:cc:9a:00:
76:d8:ac:5c:5a:b1:83:02:68:be:32:f9:dd:e3:5f:db:ca:80:
37:7e:9a:af:2b:bd:15:a2:a8:85:4b:f7:2d:20:6d:11:03:93:
a9:23:01:60:12:8c:c6:7a:ee:26:c9:3c:d2:4d:3b:bd:6b:34:
0e:97:81:e7:24:6c:35:74:26:b9:5e:53:80:8c:bc:3b:e2:3e:
04:8b:20:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIcmKnUZ+OZ9E2yGz6xykKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNjMzMwZWJlODUzZTEyNWIwYzFhZDJiMTZkNzlkMjVl
NGYzZjgwHhcNMjUwNTEzMDcwMDU5WhcNMjUwNTE0MDcwMDU5WjAzMTEwLwYDVQQD
EyhmZjMxYjllMjM2MjU0MTZhODY2ZDQ0Yjk5MjhlYWEyYzJlMjU5MDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlgEQZYbVTU98SXjyt9/PUDvbFYr
3uV7ciq1uiZAk7iD++zKtYyq8oVmfxMNvymXWNVSPLXd/2duwLMnbtSV3MYYBhNj
Ng8MKfhDn4MB5SuL6PARRduSWWWju7S4CYJE/+SPX4uAY+6YRFhyBQ97a5qhxl1q
cpawzyVQnJTn1orYh3yX+VA6haY+X+EvKQQVxErG8THdH+awbZKLl9Lvxb8DsYP7
oE8Z7voPGZekuWSk4i6sLhIEFMdZgEuW+lp6IbmpwNagQ0ZWIXSqHWFREr41l1R7
MiXAmYB2Gd+jjD3XLtAnrdNh1hp/6Q2dW1BDvrViSa+Yk20MGDb4aOkKnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8xueI2JUFqhm1EuZKOqiwuJZCGMB8GA1UdIwQY
MBaAFJ0jwzDr6FPhJbDBrSsW150l5PP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTkt
NDdhNDEyODE1ZmI0LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTktNDdhNDEyODE1ZmI0
LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJN1Ckqf/
76I2xerpReKM4WWiX6gRwzA4e5qNShvNfXeS543y7ErtytCt9zgaClyYWR6bnwsP
2ZgXYebxOaGpmJu3pUBS2AlcBXFrzlwyAwI0JofySTkNxEV3u7V1Wgy0iMX9MXMb
vRwovL5wh16vi9YhEHlLktsFPQHQyPECgtAQitPmopfmHGsS8Rs5tYGeS9eRU3HQ
otLNAL8ckYUdCUwFZKHfpuVla6drc9vD+RNYzJoAdtisXFqxgwJovjL53eNf28qA
N36aryu9FaKohUv3LSBtEQOTqSMBYBKMxnruJsk80k07vWs0DpeB5yRsNXQmuV5T
gIy8O+I+BIsgFg==
-----END CERTIFICATE-----
Generated at Tue May 13 16:38:42 2025 by rpki-client