Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: 5n4Wf4U4T8oLVdP0AOODvD3kBHEvEjz82F0zmwlfGks=
Subject key identifier: 93:B7:7C:40:13:88:FB:68:14:AF:8A:3A:C1:23:01:ED:4D:58:2C:D2
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 0197745273F62A06C98651796501EDA8C279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 16:00:49 +0000
Manifest this update: Sun 15 Jun 2025 16:00:49 +0000
Manifest next update: Mon 16 Jun 2025 16:00:49 +0000
Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=)
2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: KisJf7ukRwq2dvx9wZ7HM3XdGUSKMpDcECTuJz3P4xk=)
3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:52:73:f6:2a:06:c9:86:51:79:65:01:ed:a8:c2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Jun 15 16:00:49 2025 GMT
Not After : Jun 16 16:00:49 2025 GMT
Subject: CN=93b77c401388fb6814af8a3ac12301ed4d582cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9a:7a:7f:9d:8d:6d:b3:52:be:b3:7d:ec:8d:
40:2c:c8:83:95:ac:13:51:27:df:ad:f4:19:c8:ee:
7c:27:c6:de:71:60:f6:2f:b5:ba:8d:40:84:0f:06:
ed:83:51:3e:2d:20:91:14:ce:c7:ae:11:76:ec:99:
9d:43:e6:5a:20:f0:88:0f:b3:d1:9f:e7:87:95:54:
2c:2e:45:19:4b:82:c9:57:3a:0e:42:2d:1f:f5:fe:
fd:1f:91:b6:38:20:78:b7:b8:a9:e9:aa:12:fa:32:
f0:39:c8:ae:2d:f6:a6:e4:c9:04:c9:66:64:54:fd:
97:de:0a:8d:3a:f0:2c:d0:c6:a5:6a:9e:5f:e3:dc:
bb:e2:28:21:bd:89:1e:c5:a5:f5:d1:33:f4:5d:2e:
31:8f:bd:23:bc:e5:68:2c:97:b9:42:67:6e:ce:8c:
28:93:70:b7:44:c8:be:21:64:4c:7b:30:85:b6:be:
ec:f5:90:25:a9:30:c3:d5:ad:f8:88:4a:87:1b:7e:
86:0a:2d:16:f3:e5:dd:84:ba:90:28:05:a8:d1:1d:
4f:45:90:64:4c:46:26:68:63:43:89:c3:bc:bc:24:
8d:8b:8f:56:10:f8:cc:77:92:dd:23:27:a1:af:ea:
80:9e:ac:b5:69:c4:5b:fa:27:f4:a4:92:3c:96:67:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B7:7C:40:13:88:FB:68:14:AF:8A:3A:C1:23:01:ED:4D:58:2C:D2
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e3:4e:a5:02:58:76:1b:d5:25:07:61:c2:7e:f1:77:b9:b0:
4b:bf:9f:c0:78:48:a8:09:0d:45:9e:34:b1:81:d2:92:54:43:
0d:d1:d9:ec:91:c3:f7:b8:8a:d3:1e:9c:7a:ea:e9:cc:69:43:
a9:56:86:d6:ed:ad:e8:73:13:b4:0a:08:3d:d0:a7:0d:5d:3a:
11:7c:d5:ba:ba:e4:3b:45:28:77:9e:ef:ad:f7:a1:19:c4:23:
7d:ff:68:a4:54:75:4c:e7:ae:43:73:46:a4:ef:a4:88:ad:83:
d1:9e:db:f2:af:c6:09:19:84:8c:d2:e6:85:a8:b2:6b:79:ab:
e8:d9:4f:1f:53:47:76:0d:c5:25:8b:9f:de:60:6b:b3:a5:4f:
69:f2:50:d2:28:9a:b5:d5:05:d1:de:42:9c:56:b6:79:d3:2c:
d2:2f:17:7b:55:3a:7b:81:ce:68:1c:fa:6d:a6:89:7d:2e:9e:
94:c9:4a:87:ee:05:23:26:a0:f2:e7:7f:4c:21:a2:11:71:b9:
a0:51:8d:d8:dd:51:c8:b3:80:d3:98:9f:70:3b:c5:8d:b1:99:
14:1e:4f:63:5b:fd:8a:43:e3:2f:f9:f4:17:61:36:3a:a1:e9:
37:9d:b1:c7:16:77:f8:b8:64:da:93:2b:a5:02:bc:ff:10:35:
e0:b6:cd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:11:33 2025 by rpki-client