Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: jXXfHQ2a1pPZqyl9CvEbXSb+9rmaVfqQ0X48fK3s4NI=
Subject key identifier: 1E:8F:35:CB:5E:E3:6C:0D:26:9D:27:0A:A0:0D:7F:A8:EE:35:DC:EA
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 01968E82520FE8D21755623383341990C824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 151B
Signing time: Fri 02 May 2025 01:00:27 +0000
Manifest this update: Fri 02 May 2025 01:00:27 +0000
Manifest next update: Sat 03 May 2025 01:00:27 +0000
Files and hashes: 1: n4pnMVZxlX9TG0NR081RempX3Jo.roa (hash: 8S5TjyfptYQw+P8e6JYICrqdcf6QlYccxjHA7efduik=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: wTm2DKTOqkZg6T/SerF57sv0JmIq8lfjUt0DmQpaVXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:52:0f:e8:d2:17:55:62:33:83:34:19:90:c8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: May 2 01:00:27 2025 GMT
Not After : May 3 01:00:27 2025 GMT
Subject: CN=1e8f35cb5ee36c0d269d270aa00d7fa8ee35dcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:27:da:ba:bf:db:5e:5b:d4:f0:3b:da:e1:
87:15:1a:f4:4a:45:91:00:74:7b:78:b8:2b:39:9b:
55:a5:3c:4f:c0:b4:fb:01:a3:dc:1a:64:33:fd:aa:
85:39:b4:ea:1b:32:fd:c0:06:5e:a7:15:c1:d8:17:
b6:82:33:96:a9:f7:eb:8a:ac:24:29:2e:14:78:fe:
57:88:9e:19:a4:91:bf:35:ad:d9:ef:ad:e7:27:4b:
71:53:1c:04:fe:9b:ea:91:af:b4:d5:7a:3c:32:a8:
b3:ba:0d:2f:4a:cb:65:5f:58:27:08:42:00:a5:07:
1d:b5:bc:ff:5c:fc:85:7f:47:c4:60:2c:00:8e:eb:
33:1b:1d:96:88:e9:c8:5b:5d:1b:33:96:36:7c:f7:
fb:37:b5:33:d9:fe:75:47:76:75:23:7f:46:b2:e1:
c6:fe:53:3f:d2:47:44:76:c7:86:56:4d:00:68:a7:
8b:cc:1e:84:01:bd:b6:62:5a:f7:28:74:64:c5:b6:
fc:f8:0b:9e:c0:55:70:a5:79:85:e3:37:f8:a0:b4:
e5:c1:a7:54:a9:b3:0b:9c:b7:5b:fa:b9:73:7b:b1:
92:13:e0:b1:10:a2:f3:fc:4b:48:46:fa:39:55:56:
d6:13:60:45:dd:53:6b:bb:34:31:08:3c:a5:db:13:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:35:CB:5E:E3:6C:0D:26:9D:27:0A:A0:0D:7F:A8:EE:35:DC:EA
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:01:ce:b0:4c:6a:73:96:65:7f:a6:80:64:e5:54:09:e2:ba:
b9:38:b7:b8:2e:7a:60:41:fe:68:fa:93:13:ac:ce:1a:ab:e1:
2c:8f:3b:a7:3f:90:8b:d1:16:03:94:c2:d3:6e:14:54:ff:59:
e5:7e:ad:e7:30:98:4b:25:3f:cb:03:e3:7d:8f:dc:30:9b:d0:
7d:0b:f0:ed:dd:ca:ca:55:3f:2b:79:c3:4e:5e:43:7e:53:6a:
39:2a:31:92:c0:a9:b4:69:68:f3:43:d6:99:a1:3b:93:71:6f:
56:40:f6:0f:27:0c:12:1e:e3:2a:fa:1f:51:50:ca:54:9b:3e:
60:3d:ca:45:d8:1b:a6:e9:d9:8e:d0:ff:71:df:19:04:37:5f:
fd:ce:91:cc:31:f3:4a:62:2f:75:4e:53:5d:d1:4b:81:50:61:
86:78:5a:21:0d:1a:6d:1d:fb:65:8f:db:54:94:8e:78:f0:77:
31:99:28:2e:b6:94:0e:09:78:b7:97:fe:b2:b4:8f:ee:2f:8f:
ea:e5:44:63:03:9f:ee:9f:eb:3b:d0:27:af:76:bb:c6:b8:8a:
2f:65:26:a5:1b:63:db:96:65:1e:40:38:c2:a5:ec:8b:02:60:
cd:f5:fa:b5:20:5d:ea:dd:9c:05:4e:cf:b0:98:9b:71:29:35:
41:fb:e0:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaOglIP6NIXVWIzgzQZkMgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNjMzMwZWJlODUzZTEyNWIwYzFhZDJiMTZkNzlkMjVl
NGYzZjgwHhcNMjUwNTAyMDEwMDI3WhcNMjUwNTAzMDEwMDI3WjAzMTEwLwYDVQQD
EygxZThmMzVjYjVlZTM2YzBkMjY5ZDI3MGFhMDBkN2ZhOGVlMzVkY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFMn2rq/215b1PA72uGHFRr0SkWR
AHR7eLgrOZtVpTxPwLT7AaPcGmQz/aqFObTqGzL9wAZepxXB2Be2gjOWqffriqwk
KS4UeP5XiJ4ZpJG/Na3Z763nJ0txUxwE/pvqka+01Xo8Mqizug0vSstlX1gnCEIA
pQcdtbz/XPyFf0fEYCwAjuszGx2WiOnIW10bM5Y2fPf7N7Uz2f51R3Z1I39GsuHG
/lM/0kdEdseGVk0AaKeLzB6EAb22Ylr3KHRkxbb8+AuewFVwpXmF4zf4oLTlwadU
qbMLnLdb+rlze7GSE+CxEKLz/EtIRvo5VVbWE2BF3VNruzQxCDyl2xPFZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6PNcte42wNJp0nCqANf6juNdzqMB8GA1UdIwQY
MBaAFJ0jwzDr6FPhJbDBrSsW150l5PP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTkt
NDdhNDEyODE1ZmI0LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTktNDdhNDEyODE1ZmI0
LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgHOsExq
c5Zlf6aAZOVUCeK6uTi3uC56YEH+aPqTE6zOGqvhLI87pz+Qi9EWA5TC024UVP9Z
5X6t5zCYSyU/ywPjfY/cMJvQfQvw7d3KylU/K3nDTl5DflNqOSoxksCptGlo80PW
maE7k3FvVkD2DycMEh7jKvofUVDKVJs+YD3KRdgbpunZjtD/cd8ZBDdf/c6RzDHz
SmIvdU5TXdFLgVBhhnhaIQ0abR37ZY/bVJSOePB3MZkoLraUDgl4t5f+srSP7i+P
6uVEYwOf7p/rO9Anr3a7xriKL2UmpRtj25ZlHkA4wqXsiwJgzfX6tSBd6t2cBU7P
sJibcSk1QfvgTw==
-----END CERTIFICATE-----
Generated at Fri May 2 07:54:37 2025 by rpki-client