Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: oXL49Y1GJHAN3Czu7zgniX08NCwSUB/3xiz033E3eDU=
Subject key identifier: 11:02:17:7A:B3:44:7C:50:CE:C9:69:A2:01:6C:9B:8A:50:08:69:1A
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019686C943E23A014F7485A8227AD9F40805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 13:00:59 +0000
Manifest this update: Wed 30 Apr 2025 13:00:59 +0000
Manifest next update: Thu 01 May 2025 13:00:59 +0000
Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=)
2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: 2R9F7BN09lemtovn50NahJxIo1jgOqfdWYaRpInk9ZI=)
3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c9:43:e2:3a:01:4f:74:85:a8:22:7a:d9:f4:08:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Apr 30 13:00:59 2025 GMT
Not After : May 1 13:00:59 2025 GMT
Subject: CN=1102177ab3447c50cec969a2016c9b8a5008691a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:fe:05:86:76:99:b9:9d:ce:b0:57:d2:5d:
a9:0d:0b:67:7c:31:29:39:de:fd:10:35:c7:41:bd:
93:a0:18:15:9d:8c:bf:0c:9f:27:b3:c5:e0:6c:68:
40:a4:bc:55:4d:88:14:4e:86:34:56:22:93:c6:8a:
da:3d:cc:cd:f4:b6:64:5f:53:13:07:94:98:d3:c7:
60:86:a2:4e:91:69:4a:49:06:ff:4b:ff:f9:bb:f7:
ba:03:07:9e:83:93:2f:12:92:2f:e6:50:78:a3:6f:
8a:ed:7d:ed:f8:1c:4f:dc:4f:23:f8:e1:69:c8:de:
1d:c6:5f:c6:bb:36:64:5e:db:51:c6:aa:ed:fd:c4:
1a:c2:4e:b3:b1:d2:a1:89:17:9e:8a:b7:e1:f1:83:
f7:54:1c:bc:48:64:64:31:0e:c2:b6:fa:7a:23:0d:
58:75:cc:be:34:8e:99:3f:e5:3b:86:dc:d6:cb:89:
f7:a0:70:0a:79:fe:4d:f6:51:73:52:0c:a6:cd:90:
e3:0f:cb:60:6f:fc:b7:aa:d9:91:51:2d:43:51:4b:
70:df:6b:2b:51:18:71:8e:4b:c5:37:37:0f:3d:01:
ea:9d:6a:52:2f:30:3f:91:6d:95:7b:1a:ba:86:e0:
06:0d:06:fe:8a:a6:82:31:0e:96:4f:a0:f1:ff:80:
c3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:02:17:7A:B3:44:7C:50:CE:C9:69:A2:01:6C:9B:8A:50:08:69:1A
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:64:f8:59:eb:3b:61:57:43:29:2f:85:dc:6b:2a:59:33:b5:
ee:a5:58:bb:01:b0:29:e9:ff:1e:d6:a5:4f:3a:41:b5:b5:1e:
b4:19:a1:e6:a2:3f:ae:5b:e2:fc:39:a9:c1:80:f7:2b:91:e5:
98:a4:68:59:95:46:f9:85:9a:98:5d:e4:2c:ec:7b:5a:86:e6:
cd:49:92:67:61:46:b4:c5:0c:2b:28:2c:90:e0:4d:75:bb:6f:
aa:c4:c8:5a:64:5b:54:20:14:08:b4:e8:54:a0:57:17:1e:c6:
f1:95:95:89:b9:e9:5a:32:18:18:60:34:ea:b2:30:6d:0b:99:
6e:47:ee:0f:a7:54:26:c3:81:a5:36:36:aa:06:99:08:f1:56:
e4:e0:05:f2:90:77:f8:0e:3c:db:3f:07:e4:9c:e5:03:80:c0:
d2:55:c3:87:ea:7d:d4:08:77:e3:5f:d6:9d:54:13:75:da:08:
11:9a:55:9d:81:16:56:3f:88:92:4a:f0:9a:80:8c:07:4a:a5:
c4:f3:ef:8a:59:3a:70:c7:4d:f5:41:d5:13:d1:5a:d7:65:b2:
af:ae:7c:1a:13:e4:1d:3f:41:70:d0:4f:53:cd:30:4c:94:ae:
dc:21:3f:d4:f7:ee:02:d6:53:ad:ec:d8:5a:af:a1:fc:bd:ba:
35:cf:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:43 2025 by rpki-client