Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: u5/KyC2whjRiuDZHKHYSs20LkeRUFVlz6aH01Xc3b+E=
Subject key identifier: 45:95:EB:FE:A7:FF:EF:BB:D3:AB:C8:88:A7:10:DC:48:10:56:15:91
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 01965E3A80EE12F668C68EE982319546EBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 16:00:14 +0000
Manifest this update: Tue 22 Apr 2025 16:00:14 +0000
Manifest next update: Wed 23 Apr 2025 16:00:14 +0000
Files and hashes: 1: n4pnMVZxlX9TG0NR081RempX3Jo.roa (hash: 8S5TjyfptYQw+P8e6JYICrqdcf6QlYccxjHA7efduik=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: /W4oJk9FvJFUPAbrABJREhTunUO2j9DzXQqVRpO6bPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:80:ee:12:f6:68:c6:8e:e9:82:31:95:46:eb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: Apr 22 16:00:14 2025 GMT
Not After : Apr 23 16:00:14 2025 GMT
Subject: CN=4595ebfea7ffefbbd3abc888a710dc4810561591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:a1:d9:b3:ef:fd:24:c0:71:8d:69:8c:ea:
6d:f9:d0:78:c1:4c:4a:bd:de:0d:9d:04:e3:8b:a9:
31:bc:44:ff:37:bd:25:96:dc:90:2f:92:35:79:aa:
f2:91:a5:16:9b:09:76:7f:a2:cb:d4:22:e8:8d:a8:
d4:35:f7:c7:e8:e8:be:1d:61:73:6a:98:e4:b4:58:
0e:50:28:9c:c9:11:92:8d:39:33:d8:21:e4:09:88:
6f:f3:97:38:8e:20:b5:31:e0:86:36:ca:6c:fb:1d:
78:d4:20:18:6a:c9:dc:05:66:17:f7:71:1a:32:0c:
59:1c:4a:68:2a:d2:38:9a:ed:e4:3d:e4:8f:d9:4d:
dd:d9:6b:56:ae:87:3b:28:ac:48:c4:93:1e:1a:15:
43:15:a4:98:28:0d:44:08:4d:94:7f:ff:b3:df:d8:
10:b5:98:72:4b:f5:4c:c6:11:f9:8c:fb:dd:2a:9a:
2b:c9:64:5f:56:26:69:cc:37:33:89:30:5a:bc:27:
17:12:04:3c:37:ff:cd:f3:12:14:a9:6f:d7:c8:3b:
55:9a:53:fd:ac:ea:ab:3c:1d:86:3f:e0:d0:0e:11:
7d:e8:dd:ff:1f:8f:67:6c:0f:ee:d6:14:14:3c:09:
c5:c9:9c:a9:20:45:4c:b5:b8:5d:dc:2d:46:aa:72:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:95:EB:FE:A7:FF:EF:BB:D3:AB:C8:88:A7:10:DC:48:10:56:15:91
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:7d:e9:f8:71:68:e1:bd:ff:08:33:d7:9b:81:01:f3:a8:9d:
80:05:99:2f:69:c6:38:38:95:1d:03:42:25:0a:2d:d2:e0:79:
e4:9b:7d:42:cd:d7:ea:f3:cd:03:9d:f1:c4:59:27:81:c3:16:
9e:28:9c:9e:db:50:95:96:11:42:fc:34:91:2b:fc:7a:97:2a:
c0:77:ba:2c:fe:3e:4c:0d:23:ae:f9:8f:5c:3d:b2:d3:50:50:
1e:e5:b4:3e:5e:8d:f9:14:6e:52:45:5e:42:ed:d5:54:f8:18:
37:41:09:30:db:0f:49:c3:4d:a2:ed:d6:8b:9b:d5:c6:7d:fa:
c2:78:62:6c:f0:5b:88:bd:94:3a:4b:07:cd:4d:72:3c:79:15:
40:2f:db:a7:14:c9:14:f7:e2:49:41:9b:fa:1d:e5:61:60:81:
0f:67:cf:e7:c9:3b:ab:0f:d6:78:b8:8b:76:b5:60:fa:e5:53:
45:61:d8:9f:ed:44:e5:64:36:cb:f9:04:10:3d:67:ba:84:30:
94:bd:c4:e2:cd:de:21:c0:25:eb:24:6a:2a:c4:af:9b:8d:66:
fd:87:0e:47:4c:ae:67:87:24:9f:02:07:73:90:61:d2:37:c3:
83:fc:86:2d:ca:d6:21:00:68:bd:b8:8c:f8:e4:a9:7d:8f:64:
c0:b1:85:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZeOoDuEvZoxo7pgjGVRuv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNjMzMwZWJlODUzZTEyNWIwYzFhZDJiMTZkNzlkMjVl
NGYzZjgwHhcNMjUwNDIyMTYwMDE0WhcNMjUwNDIzMTYwMDE0WjAzMTEwLwYDVQQD
Eyg0NTk1ZWJmZWE3ZmZlZmJiZDNhYmM4ODhhNzEwZGM0ODEwNTYxNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMih2bPv/STAcY1pjOpt+dB4wUxK
vd4NnQTji6kxvET/N70lltyQL5I1earykaUWmwl2f6LL1CLojajUNffH6Oi+HWFz
apjktFgOUCicyRGSjTkz2CHkCYhv85c4jiC1MeCGNsps+x141CAYasncBWYX93Ea
MgxZHEpoKtI4mu3kPeSP2U3d2WtWroc7KKxIxJMeGhVDFaSYKA1ECE2Uf/+z39gQ
tZhyS/VMxhH5jPvdKporyWRfViZpzDcziTBavCcXEgQ8N//N8xIUqW/XyDtVmlP9
rOqrPB2GP+DQDhF96N3/H49nbA/u1hQUPAnFyZypIEVMtbhd3C1GqnI6yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWV6/6n/++706vIiKcQ3EgQVhWRMB8GA1UdIwQY
MBaAFJ0jwzDr6FPhJbDBrSsW150l5PP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTkt
NDdhNDEyODE1ZmI0LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTktNDdhNDEyODE1ZmI0
LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxH3p+HFo
4b3/CDPXm4EB86idgAWZL2nGODiVHQNCJQot0uB55Jt9Qs3X6vPNA53xxFkngcMW
niicnttQlZYRQvw0kSv8epcqwHe6LP4+TA0jrvmPXD2y01BQHuW0Pl6N+RRuUkVe
Qu3VVPgYN0EJMNsPScNNou3Wi5vVxn36wnhibPBbiL2UOksHzU1yPHkVQC/bpxTJ
FPfiSUGb+h3lYWCBD2fP58k7qw/WeLiLdrVg+uVTRWHYn+1E5WQ2y/kEED1nuoQw
lL3E4s3eIcAl6yRqKsSvm41m/YcOR0yuZ4cknwIHc5Bh0jfDg/yGLcrWIQBovbiM
+OSpfY9kwLGFWg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:43:25 2025 by rpki-client