Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: hwoTFuIjDyQAM6hKHurioCEXp3eJPake0k1WlAX1rdw=
Subject key identifier: 6C:3B:3D:60:AB:91:1A:C4:19:16:D0:4F:42:3A:38:B2:CE:5E:C3:E4
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019882B08F95EC22FB2980D9E842140C2C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 04:01:05 +0000
Manifest this update: Thu 07 Aug 2025 04:01:05 +0000
Manifest next update: Fri 08 Aug 2025 04:01:05 +0000
Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=)
2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: gWrf2GEr4fkoY+8/AU9e4PPG3tBnW2F/V4Vyfl3jccU=)
3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:8f:95:ec:22:fb:29:80:d9:e8:42:14:0c:2c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Aug 7 04:01:05 2025 GMT
Not After : Aug 8 04:01:05 2025 GMT
Subject: CN=6c3b3d60ab911ac41916d04f423a38b2ce5ec3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:5d:19:1b:f5:71:57:46:a7:a7:96:62:64:
c5:35:1b:0f:03:e4:72:61:f7:88:0b:09:b4:62:65:
8a:76:d2:13:fb:fe:2c:74:c7:d9:5f:5a:5c:20:c3:
74:e4:d5:a7:59:f2:ee:3e:95:e3:d2:f9:cb:1f:4e:
4c:8b:bd:17:78:da:22:e4:27:3b:c7:68:8b:ae:68:
58:d0:0b:e1:86:d2:5c:2d:51:33:86:c9:bd:3b:08:
ab:6b:d6:6e:d2:74:fa:e1:d0:10:0e:17:f7:00:5a:
05:4a:f5:13:0c:dd:dc:0a:e6:67:bb:56:13:86:93:
ce:86:0d:fa:0d:60:65:b3:90:d4:97:30:ef:53:b3:
12:16:47:9d:0c:13:97:a6:5a:b0:6c:1f:5d:01:d3:
88:22:be:8c:5d:99:bb:d3:14:b7:27:eb:61:0b:3c:
ff:98:73:c5:5a:db:f4:b1:59:94:45:a6:85:76:a8:
94:06:b5:b7:e7:ce:6f:eb:17:4e:77:44:7f:e9:7e:
37:cd:8e:db:31:28:fd:58:a8:79:45:df:3c:6a:38:
fe:59:ce:1c:8c:57:f3:7d:6b:48:ec:fc:87:88:e0:
93:61:53:15:6f:61:72:92:53:ba:c5:a2:48:b6:49:
28:54:e2:ca:bb:73:71:52:8c:79:cf:ae:59:c4:e3:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3B:3D:60:AB:91:1A:C4:19:16:D0:4F:42:3A:38:B2:CE:5E:C3:E4
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:78:1e:88:87:88:59:e8:3a:95:b0:aa:53:03:96:ce:45:2e:
e0:21:bb:2e:58:fe:8a:3f:3b:66:9e:94:aa:0c:f7:bd:e0:11:
02:71:e2:66:27:60:06:fd:9e:a3:c1:4d:a8:32:b6:95:71:53:
24:51:14:2b:8d:50:5a:b9:30:21:da:e2:39:18:d4:21:a1:a2:
92:37:82:59:b0:f3:5c:3c:de:89:29:f7:de:ac:c8:ff:2e:06:
3d:b9:e1:69:4c:e5:6d:90:f6:30:73:8e:ae:61:fe:7b:b4:53:
b0:fb:0b:d3:37:20:6c:98:35:41:93:d8:71:72:0c:bf:b1:78:
90:6a:0d:23:8d:46:9d:5a:43:84:77:3b:a9:a3:9a:db:92:5a:
ed:14:f1:11:36:f9:74:a6:1d:11:1c:c4:2b:ce:33:96:fb:6b:
73:61:da:fa:53:2f:ae:c4:86:ff:f0:27:c5:0f:12:b2:ab:ae:
90:b4:28:7f:27:b2:d3:7a:d7:b6:e7:d1:dd:a3:31:d5:60:1c:
b4:3d:9c:5a:0a:81:ec:bc:c2:70:76:d5:75:56:49:a6:b1:fc:
36:5f:ce:c2:7e:24:60:66:e7:7a:eb:94:a7:cf:c3:18:73:c8:
af:52:65:30:04:69:73:44:05:14:10:a0:34:33:88:ca:89:05:
f2:7c:71:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:15:31 2025 by rpki-client