Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: dFuxuKB9ap4yYCWmACC2rPh7+l1bkTTnfXSamaEuVXc=
Subject key identifier: 10:53:51:A4:45:5D:62:6D:B2:6B:85:53:CF:E6:6C:F4:3E:93:D8:07
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019A522C83A230ADDEEA296141F8C4BAD9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 04:00:40 +0000
Manifest this update: Wed 05 Nov 2025 04:00:40 +0000
Manifest next update: Thu 06 Nov 2025 04:00:40 +0000
Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=)
2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: H57f5E5R0IvTdTZ7YEmhoM9MRdzGXmw0UWhMcIomThE=)
3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:83:a2:30:ad:de:ea:29:61:41:f8:c4:ba:d9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Nov 5 04:00:40 2025 GMT
Not After : Nov 6 04:00:40 2025 GMT
Subject: CN=105351a4455d626db26b8553cfe66cf43e93d807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d0:24:59:c5:c1:98:0d:3b:70:74:c9:e5:b0:
56:f6:36:02:b7:c0:cf:b7:b2:f6:1c:9c:19:80:71:
27:c4:8b:ad:70:d3:e4:0e:24:6a:76:5f:3d:78:93:
cc:27:76:3c:ae:82:96:41:9a:84:6f:3c:53:86:fc:
76:39:80:4f:4c:08:3e:a9:ce:80:0b:e7:d4:8f:88:
c6:67:7e:bf:3e:2c:97:6c:b6:14:91:a9:bd:f1:e0:
9b:e3:57:77:72:35:1c:16:41:8d:c1:54:6e:b8:e9:
13:d4:01:1d:b9:08:d5:58:3b:85:8a:2b:f2:dc:da:
2a:78:08:02:ef:fa:a6:7d:80:49:6c:86:ee:3c:96:
7f:4d:69:e0:b7:91:b2:a2:a8:66:a9:c7:12:1a:58:
7f:7c:df:e0:6b:af:a3:01:1d:61:bc:7a:b2:d8:3e:
51:07:f0:05:fc:31:b0:af:04:6d:3d:37:e1:4e:31:
df:27:8c:e5:f6:d0:8c:3a:00:47:f6:b6:fa:5d:3a:
ed:ed:33:09:f3:e2:7e:d4:11:e6:87:a1:4b:a0:39:
11:3d:51:6e:e0:ad:38:22:2e:2a:c8:70:87:31:cf:
45:ad:17:74:7d:ec:0b:18:a7:9c:71:69:88:3f:82:
61:ab:8d:48:fe:e2:c6:1b:0a:21:2b:bf:a1:40:25:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:53:51:A4:45:5D:62:6D:B2:6B:85:53:CF:E6:6C:F4:3E:93:D8:07
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7c:d9:bd:0c:44:c8:a6:ea:d6:b8:85:7c:6f:1f:7d:1a:89:
a8:ea:69:14:fb:50:7b:07:e9:77:f3:2e:83:8a:07:52:ed:0e:
2e:70:18:65:7e:ca:fe:25:2d:d4:0a:d0:84:7b:77:d8:15:53:
de:2a:b4:83:16:c1:eb:33:d8:05:07:c4:af:97:dd:b2:99:61:
66:ca:36:05:48:f4:8b:a7:85:a5:53:69:e7:b8:11:07:58:10:
72:c4:a2:c4:1f:ad:21:98:fd:32:fc:52:06:ee:b8:96:f2:d0:
47:98:cf:3d:64:f3:f4:bd:37:12:e7:ef:f5:2b:0c:03:09:bc:
ef:ec:a5:a6:42:4c:53:93:c8:d3:a0:82:5c:8b:ff:99:f2:80:
dc:8c:2e:33:d9:7f:b8:e3:30:77:d4:21:26:bb:e9:db:ff:bd:
5b:39:9f:c1:19:77:6b:22:a4:1b:eb:f2:59:c0:8b:03:fa:60:
df:97:55:71:36:df:ae:74:bc:9b:9c:e6:02:23:ad:d0:d1:dd:
00:14:3b:65:76:6a:ee:62:99:ac:3c:8a:52:ee:0b:11:74:38:
2e:de:db:4a:7f:67:93:07:1f:c5:34:fb:b3:4e:3c:72:5b:41:
21:25:99:74:22:59:16:26:15:1c:82:bc:31:e0:0d:12:7c:e1:
6d:ce:bb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:54:25 2025 by rpki-client