Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: a6CKCCfkmL4V6D50jnXFMwCRbbU2N7ZOhCeoTI3Lpo8=
Subject key identifier: 4A:AD:4F:55:78:D6:79:96:23:82:71:15:78:4A:41:E0:36:E5:21:56
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 019A7301BBA22CA15185C43505461C21ADC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 13:01:24 +0000
Manifest this update: Tue 11 Nov 2025 13:01:24 +0000
Manifest next update: Wed 12 Nov 2025 13:01:24 +0000
Files and hashes: 1: n4pnMVZxlX9TG0NR081RempX3Jo.roa (hash: 8S5TjyfptYQw+P8e6JYICrqdcf6QlYccxjHA7efduik=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: 3Xqr4QnUXwEqAAo3758ixNyV7WENLwW922ppK2sfBk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:bb:a2:2c:a1:51:85:c4:35:05:46:1c:21:ad:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: Nov 11 13:01:24 2025 GMT
Not After : Nov 12 13:01:24 2025 GMT
Subject: CN=4aad4f5578d6799623827115784a41e036e52156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:4e:8f:3a:59:0a:bc:8e:74:fb:be:e6:59:
73:bf:a2:b4:07:1b:92:2c:69:b2:63:28:f1:85:13:
bb:e4:0a:6c:61:51:6b:f8:77:81:1f:f3:b3:f4:46:
e0:b0:ce:d5:c7:b6:7d:72:30:ca:d7:b4:14:de:85:
8a:18:3e:f0:ee:2e:75:22:bd:fe:04:d4:de:6d:23:
09:2e:89:a1:3a:53:f8:75:b5:ed:03:4b:65:5c:42:
2e:05:69:3a:7b:0e:b8:ba:89:76:72:3a:42:0b:f3:
3e:93:52:55:7b:a6:4e:19:6c:e4:f6:64:18:93:be:
59:ce:e7:96:8c:f9:a5:43:d2:0a:3f:7a:3d:4e:89:
28:fe:dd:cc:de:80:1c:b3:84:33:0d:eb:8e:5b:8d:
e7:50:a8:3f:34:a6:5c:2b:b3:5e:cc:20:b0:53:c7:
0a:f5:d0:3a:5f:5e:a5:cb:ae:99:3a:e1:7d:65:41:
28:0b:ea:a9:b4:c3:5a:36:88:d9:66:4c:75:22:4c:
1d:ff:af:7d:fc:04:f0:f3:b3:65:a2:7f:72:17:5b:
1f:72:c6:ea:d2:08:06:e0:34:be:52:26:6a:90:b5:
76:8b:69:83:58:e8:03:4d:31:aa:ca:58:ad:97:79:
bc:b1:48:0a:a3:8a:64:dc:81:bd:cd:b0:50:6d:63:
27:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AD:4F:55:78:D6:79:96:23:82:71:15:78:4A:41:E0:36:E5:21:56
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:75:84:94:57:c3:71:3f:87:d6:b7:5c:7f:36:bb:1b:6f:7c:
4a:1d:ca:96:f6:02:67:44:e7:91:2a:42:fe:24:66:0b:32:9d:
f8:e5:a1:bb:22:62:4c:1b:9a:69:ab:52:0f:71:92:c8:2a:67:
6b:2e:99:96:b6:cf:f4:9e:8d:34:57:b4:33:4a:28:66:90:1b:
a1:82:2d:f6:e1:16:5b:2b:3b:eb:5e:01:29:3d:df:d2:08:e4:
8b:70:a0:e9:3f:41:45:0d:70:32:b7:8b:03:bb:a0:e7:88:ed:
98:af:9d:9e:d0:64:11:32:9c:d6:15:fe:e1:81:f7:52:bf:4e:
44:31:80:9a:ca:78:8f:a1:16:7c:97:96:68:20:66:dd:f3:2e:
91:e8:94:e2:1c:0c:a7:8d:e4:bc:77:c1:ab:c6:ff:33:1e:6b:
e0:67:ed:94:a5:65:53:48:a4:b7:51:63:5e:be:64:37:df:5c:
2a:57:40:48:6c:8e:fa:71:fe:7b:be:08:d8:23:cd:d5:b0:e2:
5a:6c:56:96:75:a2:9e:61:cd:cb:5d:d7:54:69:8e:1f:40:b8:
b9:42:9d:1b:54:98:6e:a7:d5:45:86:1d:a4:cd:05:bc:fe:6d:
e5:61:91:a1:63:6a:49:c3:e1:4f:47:83:f9:01:06:8a:cb:1b:
58:5e:94:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:49 2025 by rpki-client