Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: EDm1tuWqJMCpFvFNxA4U0ET7bQOppTHN9fK9vl6unIE=
Subject key identifier: 1B:2C:3B:B8:17:AD:EF:08:DA:36:17:E6:E7:1D:C3:0E:38:A1:4E:E4
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 0197D8BEBF0342EF779875AD0B4B764BC5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 15C6
Signing time: Sat 05 Jul 2025 04:01:08 +0000
Manifest this update: Sat 05 Jul 2025 04:01:08 +0000
Manifest next update: Sun 06 Jul 2025 04:01:08 +0000
Files and hashes: 1: n4pnMVZxlX9TG0NR081RempX3Jo.roa (hash: 8S5TjyfptYQw+P8e6JYICrqdcf6QlYccxjHA7efduik=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: OyMJxNELiADBX8Cg7U5xNhz7B1Zk1GkgjQY01yKjha8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:be:bf:03:42:ef:77:98:75:ad:0b:4b:76:4b:c5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: Jul 5 04:01:08 2025 GMT
Not After : Jul 6 04:01:08 2025 GMT
Subject: CN=1b2c3bb817adef08da3617e6e71dc30e38a14ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:78:4f:f7:1a:82:dc:91:43:0f:df:d2:d9:
5a:8f:d5:83:55:84:c9:25:e6:66:39:5b:21:17:5b:
0d:d2:f0:0b:f1:a9:48:f4:af:d5:d9:ae:92:57:45:
19:a7:5e:77:61:08:84:11:49:37:65:e7:d8:fd:c3:
c4:ac:db:6c:08:f4:01:36:59:e7:11:c3:37:f6:b6:
ab:ed:35:a8:e5:15:fe:16:c6:1a:d9:c4:3a:11:cc:
29:e4:78:54:9f:a0:b7:1a:38:88:e6:ce:cf:19:01:
f9:93:d3:fa:4f:bf:84:c2:42:57:b4:12:b9:49:fc:
37:e9:53:5b:f5:b0:5a:65:78:00:fa:3c:1a:0c:75:
96:29:83:fc:f4:5b:db:d1:61:4e:cc:ec:02:7d:48:
80:3d:b7:de:05:7f:d3:19:98:20:4c:f7:d1:f5:c8:
28:b6:c6:09:3a:c7:2f:fe:79:16:7c:19:8c:64:97:
85:54:36:e6:f8:4d:4b:0e:27:4f:22:70:b9:3f:56:
95:d7:d2:52:cb:d2:6f:34:d3:ac:62:16:f7:10:40:
ff:2c:af:5a:ec:d0:0e:08:3d:7f:74:8b:b5:47:fd:
26:3c:89:14:fd:06:1c:1d:76:c3:cc:89:42:22:e8:
a1:4e:24:84:20:22:cd:eb:0f:cf:fe:69:fc:2e:68:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2C:3B:B8:17:AD:EF:08:DA:36:17:E6:E7:1D:C3:0E:38:A1:4E:E4
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a9:cd:c5:1b:a7:2a:e7:33:3b:35:c3:8a:f5:d4:91:06:60:
a7:a6:de:e1:e7:fc:5c:93:93:66:d8:50:3c:bb:e4:d9:7e:74:
2c:68:f6:09:88:79:4f:d7:20:06:1c:81:6c:59:4f:2d:a2:dd:
6a:12:62:9f:78:11:65:c0:9e:2e:29:62:a0:0c:0d:7f:30:48:
4a:21:00:ec:d2:00:a8:81:84:46:f2:77:64:dc:f4:61:7f:8d:
07:c6:94:7f:84:29:43:9a:fe:f2:13:c2:8e:74:da:cd:d8:05:
54:95:48:70:68:c8:0c:43:68:0e:67:31:0b:4e:11:c7:58:6b:
46:07:5e:5c:c2:d7:70:c7:cd:6e:84:d3:71:43:6a:54:ce:b5:
0b:d6:79:76:ae:3f:8e:b8:73:99:a5:5a:fc:c0:20:cb:40:cc:
09:99:53:70:a8:fd:e6:d2:55:f7:00:8f:e6:74:e9:16:45:9e:
93:bf:0e:fd:73:ec:90:e2:e9:5b:85:a5:bd:0a:c4:1e:34:2d:
c6:6c:a3:03:eb:74:39:81:29:eb:f0:9c:af:59:40:9e:23:67:
df:56:10:f1:bf:aa:f5:72:0e:03:d9:ef:33:26:1b:4a:65:6e:
1f:ec:f3:11:a8:3f:80:93:48:71:0b:7b:94:e1:8a:05:6e:59:
a4:9c:ea:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfYvr8DQu93mHWtC0t2S8WyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNjMzMwZWJlODUzZTEyNWIwYzFhZDJiMTZkNzlkMjVl
NGYzZjgwHhcNMjUwNzA1MDQwMTA4WhcNMjUwNzA2MDQwMTA4WjAzMTEwLwYDVQQD
EygxYjJjM2JiODE3YWRlZjA4ZGEzNjE3ZTZlNzFkYzMwZTM4YTE0ZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnal4T/cagtyRQw/f0tlaj9WDVYTJ
JeZmOVshF1sN0vAL8alI9K/V2a6SV0UZp153YQiEEUk3ZefY/cPErNtsCPQBNlnn
EcM39rar7TWo5RX+FsYa2cQ6Ecwp5HhUn6C3GjiI5s7PGQH5k9P6T7+EwkJXtBK5
Sfw36VNb9bBaZXgA+jwaDHWWKYP89Fvb0WFOzOwCfUiAPbfeBX/TGZggTPfR9cgo
tsYJOscv/nkWfBmMZJeFVDbm+E1LDidPInC5P1aV19JSy9JvNNOsYhb3EED/LK9a
7NAOCD1/dIu1R/0mPIkU/QYcHXbDzIlCIuihTiSEICLN6w/P/mn8LmjmIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBssO7gXre8I2jYX5ucdww44oU7kMB8GA1UdIwQY
MBaAFJ0jwzDr6FPhJbDBrSsW150l5PP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTkt
NDdhNDEyODE1ZmI0LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTktNDdhNDEyODE1ZmI0
LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6nNxRun
KuczOzXDivXUkQZgp6be4ef8XJOTZthQPLvk2X50LGj2CYh5T9cgBhyBbFlPLaLd
ahJin3gRZcCeLilioAwNfzBISiEA7NIAqIGERvJ3ZNz0YX+NB8aUf4QpQ5r+8hPC
jnTazdgFVJVIcGjIDENoDmcxC04Rx1hrRgdeXMLXcMfNboTTcUNqVM61C9Z5dq4/
jrhzmaVa/MAgy0DMCZlTcKj95tJV9wCP5nTpFkWek78O/XPskOLpW4WlvQrEHjQt
xmyjA+t0OYEp6/Ccr1lAniNn31YQ8b+q9XIOA9nvMyYbSmVuH+zzEag/gJNIcQt7
lOGKBW5ZpJzqFw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 06:14:25 2025 by rpki-client