Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: HeSrxgIgsLZ/fVgAU4RksJYewxXuvU+xZomMuWZuZyU=
Subject key identifier: 50:58:E1:5A:A3:C6:C1:3D:5D:63:17:4B:07:1C:8F:46:55:5B:28:C8
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 019922FAA9B431512F6E4836C153B78BDF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:01:16 +0000
Manifest this update: Sun 07 Sep 2025 07:01:16 +0000
Manifest next update: Mon 08 Sep 2025 07:01:16 +0000
Files and hashes: 1: n4pnMVZxlX9TG0NR081RempX3Jo.roa (hash: 8S5TjyfptYQw+P8e6JYICrqdcf6QlYccxjHA7efduik=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: wEAKAtMATSM42dH5gXne/kC77sfgeOX9XJrchuFIugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:a9:b4:31:51:2f:6e:48:36:c1:53:b7:8b:df:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: Sep 7 07:01:16 2025 GMT
Not After : Sep 8 07:01:16 2025 GMT
Subject: CN=5058e15aa3c6c13d5d63174b071c8f46555b28c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:0a:85:14:c0:93:19:b6:89:cb:51:9f:a0:
18:20:b8:65:80:f7:b6:3b:e7:24:88:37:fb:c2:9f:
a4:37:26:c3:b3:7b:6f:50:41:72:46:2f:43:23:a4:
0d:f7:de:19:0f:f2:9e:b5:88:5e:c4:c9:29:87:ef:
5a:ad:40:31:7f:7c:b1:2a:20:01:e1:7e:66:f2:94:
7b:1a:0b:cb:a3:9f:e5:ce:98:10:b9:82:54:37:b5:
84:d5:01:c2:ce:2e:41:f3:24:84:bb:30:1b:b5:94:
b7:36:1f:31:18:f4:c9:4c:9b:85:56:de:25:a4:ad:
e0:4b:bb:33:b4:66:99:cd:eb:7a:ef:3e:98:99:c1:
16:55:0c:2b:ec:fb:80:35:4a:a4:7d:c7:3a:74:38:
00:d6:cf:d8:b0:0d:e3:a2:c6:99:fd:ae:07:24:54:
ea:af:3d:98:f1:bd:75:41:ab:ab:09:f7:08:6a:4f:
f5:d7:b0:51:8e:44:58:19:cf:98:b2:16:4e:a7:9a:
d4:3b:b6:58:59:8d:d9:cc:60:4b:96:4a:2d:7b:e2:
9a:cf:d6:da:7d:73:25:84:eb:eb:7b:b4:59:05:6e:
01:65:71:b3:bd:29:b9:0e:9e:b1:62:bd:a3:81:59:
2a:83:07:70:0e:6c:8b:4b:4c:dd:c3:3d:53:df:35:
f1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:58:E1:5A:A3:C6:C1:3D:5D:63:17:4B:07:1C:8F:46:55:5B:28:C8
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a4:52:33:5c:88:af:bd:4f:e0:5d:93:75:50:d1:0f:51:6e:
70:e8:cb:c4:71:3c:28:5a:0f:e4:89:fe:a8:c9:8b:48:79:69:
0c:49:0c:f6:cf:c0:7b:ba:4a:c4:4e:54:13:6c:75:bd:1d:de:
fe:21:2f:92:35:56:ae:fe:38:c6:84:e4:fe:3e:86:1e:4c:96:
a6:6c:45:30:bf:8c:ac:9a:aa:65:17:15:53:c2:52:a6:17:4b:
6a:11:34:b3:0f:81:8e:fc:23:64:65:36:33:cd:8d:c2:37:3b:
7d:20:d3:af:26:d9:29:5b:e9:d4:13:5e:a6:f3:33:39:9a:41:
9c:d6:53:bb:6a:43:97:50:2e:e5:97:b7:6b:73:a3:80:fc:f6:
1d:20:b4:50:12:e0:65:70:35:bf:01:5a:8c:c6:b8:26:21:2a:
99:93:9f:d2:65:6e:ab:20:85:09:ee:e9:73:39:7a:79:7a:e0:
65:0d:01:c7:39:ae:96:5b:73:ed:d7:ff:a9:32:de:18:2f:6a:
eb:f6:28:d1:ad:51:3e:96:09:94:72:08:98:4c:82:3d:c8:92:
50:74:4e:88:93:7b:86:2d:64:12:f5:02:87:b6:54:ee:39:19:
2e:8a:be:af:f4:ed:36:9a:c4:34:b6:e7:8f:b2:65:58:7f:fc:
f7:02:3c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:39 2025 by rpki-client