Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: A+VOlzkiYWM6n78U/q5aiWXf8oiDMpD0uy9qdTRWxTQ=
Subject key identifier: FD:8A:90:3E:04:38:D6:6A:EF:1B:A3:3E:AE:9F:EE:98:8F:06:7E:2C
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 019896008ADDCA3736F004A6306A3818106F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 22:01:14 +0000
Manifest this update: Sun 10 Aug 2025 22:01:14 +0000
Manifest next update: Mon 11 Aug 2025 22:01:14 +0000
Files and hashes: 1: n4pnMVZxlX9TG0NR081RempX3Jo.roa (hash: 8S5TjyfptYQw+P8e6JYICrqdcf6QlYccxjHA7efduik=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: ZMMi6OtF0D365ZkEvusyMs51bxmr5Cyr38c6xKxpDQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:8a:dd:ca:37:36:f0:04:a6:30:6a:38:18:10:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: Aug 10 22:01:14 2025 GMT
Not After : Aug 11 22:01:14 2025 GMT
Subject: CN=fd8a903e0438d66aef1ba33eae9fee988f067e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:4f:6f:fb:cf:8e:9f:67:3e:7e:86:20:ba:
41:78:84:90:25:e4:19:76:55:76:18:fd:ef:7b:b7:
7f:8a:7e:60:b3:7b:63:ae:81:ff:09:7d:63:9c:94:
94:f9:3b:30:d7:a8:99:83:0f:52:8f:71:d8:6d:07:
d5:ca:8f:35:b5:bc:63:e2:25:bb:a0:0e:5f:ac:e6:
e6:04:e1:74:50:5c:c1:4d:51:6a:89:b1:2c:95:d3:
b7:62:aa:c3:6c:d7:5b:35:8a:bb:7a:51:b2:43:32:
2f:75:5d:b3:d7:4f:0f:7b:07:3c:cd:24:69:11:f4:
6a:e3:2c:49:26:fc:c1:bc:36:ad:c5:88:ee:db:d7:
91:38:9c:f1:14:f6:52:65:7b:71:c2:7a:ad:12:4b:
2d:de:8d:55:e3:de:83:15:53:be:0c:68:b3:c2:3a:
03:66:ff:8c:94:7d:a8:c7:f7:22:a1:d5:78:41:6e:
74:a1:ee:d7:68:28:27:c2:af:45:14:37:69:65:0b:
d0:d5:dd:d7:62:e6:e3:41:80:49:04:ac:e2:72:a8:
f7:94:5c:3d:4d:47:17:29:d8:12:aa:16:44:75:57:
02:ad:c5:cf:69:de:d9:0d:a2:83:f6:e8:25:68:f2:
03:13:34:7d:29:2b:40:20:ab:21:85:e9:b9:e3:00:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8A:90:3E:04:38:D6:6A:EF:1B:A3:3E:AE:9F:EE:98:8F:06:7E:2C
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4a:66:98:23:81:77:ee:f8:56:94:f3:40:06:58:18:2f:68:
f4:91:8f:ee:a5:25:64:f0:0b:7a:95:af:f0:7e:f8:0a:42:b5:
8f:70:cc:60:c6:db:4b:56:1a:66:00:60:cc:02:d8:cb:e4:7b:
eb:c4:19:2f:54:75:7d:5b:0d:c8:94:b7:45:54:ef:95:da:83:
21:d7:a4:2d:59:f4:14:a5:21:e2:3b:13:4d:4d:c1:57:b0:29:
b0:57:3f:a9:dd:6a:73:c0:f4:c1:0f:ad:04:e3:15:d6:fb:52:
1a:9a:04:df:5f:47:7a:e1:d3:49:3c:cf:04:91:86:f5:08:da:
ce:51:41:1d:ec:8b:2b:58:10:d0:a4:c7:4e:c4:d1:63:57:b0:
93:a9:5e:be:23:c0:7b:c2:54:63:24:ef:9b:26:37:4e:ed:6a:
41:4e:53:81:11:63:e8:f7:e7:42:ff:f5:7c:de:89:69:c7:51:
c1:52:86:a0:5b:bd:81:5a:ca:98:ac:c9:1a:c6:fe:35:ba:2f:
a9:bb:2e:97:6d:41:17:d5:af:02:3b:4e:39:12:be:f2:57:34:
eb:5b:e4:b5:a3:44:29:49:38:9e:a2:53:e6:8c:b4:76:44:2b:
e6:09:7f:7f:76:a8:a7:e7:27:bf:26:50:e3:3a:c3:27:28:d4:
a7:9d:7f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:48 2025 by rpki-client