Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: slfTmJI3iWwO4PmFfnqkMiaUcQgTeyJnbsQyyhDYro4=
Subject key identifier: 72:A9:76:1E:49:24:A8:97:DC:1B:7F:BE:77:44:F5:CB:1E:02:AF:58
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 0197B7EA508466EFBCE260D70609B02E7C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:15 +0000
Manifest this update: Sat 28 Jun 2025 19:01:15 +0000
Manifest next update: Sun 29 Jun 2025 19:01:15 +0000
Files and hashes: 1: n4pnMVZxlX9TG0NR081RempX3Jo.roa (hash: 8S5TjyfptYQw+P8e6JYICrqdcf6QlYccxjHA7efduik=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: KhxXlol7hWspRBZLeiOS8OsavJe17ug8Yc1VQfJ6R0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:50:84:66:ef:bc:e2:60:d7:06:09:b0:2e:7c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: Jun 28 19:01:15 2025 GMT
Not After : Jun 29 19:01:15 2025 GMT
Subject: CN=72a9761e4924a897dc1b7fbe7744f5cb1e02af58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:45:2a:fe:2c:e1:31:ab:67:a5:14:80:1f:3f:
21:94:68:ad:86:28:92:49:65:0f:d4:1e:41:ab:06:
b1:80:ee:fb:c5:1f:a7:51:87:3b:c0:9f:9c:81:87:
35:7d:42:27:33:4f:63:89:04:d5:ba:c4:02:47:72:
80:a2:b2:21:42:65:4a:3c:d8:20:44:90:29:68:a5:
92:2d:c7:1e:ed:c6:6e:6c:8e:cf:39:77:f4:27:a8:
df:56:31:eb:05:5c:5e:e5:bf:4d:c3:40:71:d9:53:
d7:85:53:8d:d6:57:21:06:2b:04:9e:7b:34:c2:8a:
0c:fd:14:25:4e:5a:dd:ff:13:a3:21:46:45:3d:5b:
41:a6:ff:02:54:1b:13:62:d2:2a:e2:df:a5:01:f9:
8d:9e:63:bd:93:ea:07:c7:7e:40:02:17:16:0b:e1:
53:77:7f:36:15:6c:fd:0d:b5:30:22:98:d9:89:70:
53:7f:19:89:08:7c:46:19:b4:8b:e3:95:7b:9d:bd:
9c:24:e6:c9:03:5f:b9:e3:22:54:5b:e0:4b:2d:27:
56:9a:99:d4:28:39:e8:7e:26:ef:01:43:ef:20:26:
76:dd:ea:06:e6:24:89:7e:4c:1b:fe:60:de:fd:bb:
d8:63:52:94:ae:f5:84:f2:d8:6b:eb:0d:87:5c:f0:
c1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A9:76:1E:49:24:A8:97:DC:1B:7F:BE:77:44:F5:CB:1E:02:AF:58
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:67:56:f7:74:24:fa:99:f2:32:c3:4c:8d:65:c4:77:63:06:
b5:aa:74:d9:4b:b1:6d:c5:be:18:e7:36:c4:fb:a0:ff:73:54:
82:24:60:4f:73:92:de:61:c9:87:87:b4:73:08:63:2f:29:99:
bc:1e:8b:a0:7b:a7:8e:58:d6:8d:a2:c4:47:e6:d9:f7:63:c1:
fa:fe:a7:33:d7:49:86:79:0c:c1:86:56:45:b0:1e:db:d0:53:
ed:0a:27:c5:68:96:99:b3:19:0f:de:e6:cd:81:87:d3:85:49:
fc:8d:08:ce:6e:06:22:a3:86:30:d8:24:7e:88:00:c1:34:7f:
12:1b:90:1d:9b:87:be:ad:4d:3d:75:c4:ca:b3:27:42:c2:94:
6e:87:b8:be:40:75:4a:0f:86:90:14:b0:8f:aa:4f:52:a6:f6:
da:d1:c3:ae:6b:19:cf:66:e5:91:74:b4:47:55:b7:b8:61:e3:
07:8f:a8:0d:46:55:f6:9a:eb:ad:c8:3a:3d:f1:46:ad:b5:7a:
30:71:3d:c7:cc:97:f3:cb:ba:89:b6:29:03:dd:50:64:f1:d2:
83:c0:e8:3a:5f:12:95:b4:f4:5a:32:60:08:2f:da:fc:56:ef:
8e:1e:7b:d9:d2:1f:21:8a:cc:21:25:c8:07:15:6f:52:d0:48:
bc:d2:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:54:42 2025 by rpki-client