Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: Nce5zL4KrtvycGKDRM0vFwTXT1kL92YqlT+kJsirN54=
Subject key identifier: 08:46:F8:11:8C:37:C0:49:66:1E:02:D2:F4:7D:90:08:CE:90:A6:21
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 0197B9D8A0E1172610906600E627A7150FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 04:01:11 +0000
Manifest this update: Sun 29 Jun 2025 04:01:11 +0000
Manifest next update: Mon 30 Jun 2025 04:01:11 +0000
Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=)
2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: E0rk2hzlZghNpbrbmEuuG/zCn+mIYZnsRU23S105XXw=)
3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:a0:e1:17:26:10:90:66:00:e6:27:a7:15:0f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Jun 29 04:01:11 2025 GMT
Not After : Jun 30 04:01:11 2025 GMT
Subject: CN=0846f8118c37c049661e02d2f47d9008ce90a621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:50:1e:73:5a:bd:ff:9b:38:e0:ba:c3:e6:
87:d0:ce:da:58:47:2c:ea:4f:68:9c:5b:69:e7:45:
b5:53:d7:b1:12:f7:3a:0d:9d:36:cb:63:c9:98:54:
15:1f:25:eb:3d:e8:27:39:9d:1a:de:2f:1b:ab:b2:
43:66:9c:46:d4:d3:bb:93:c9:04:0b:c2:d1:f8:40:
d7:f0:74:ee:ee:00:d6:4e:b3:a4:ac:fc:c1:09:4d:
59:d3:f8:50:12:4d:53:c2:cd:80:ff:01:63:34:94:
3d:31:a6:4b:6c:16:39:75:30:cd:f5:08:47:1d:03:
93:0e:28:72:4c:50:91:c6:77:83:11:ec:a8:40:70:
f4:f9:6c:7c:de:1d:1c:6f:be:27:98:ce:65:77:d1:
29:24:d6:b2:2e:d0:2f:5f:c9:9b:fb:7d:9b:35:85:
ec:d1:7a:24:e6:35:6b:68:df:60:6a:b5:51:50:5a:
ad:3c:29:52:96:35:bd:6e:df:c8:a4:67:36:94:72:
c6:d4:75:32:63:9d:e5:1a:bf:ee:b0:f6:25:0b:f2:
8c:9c:87:e5:b7:b1:5c:59:b4:8c:49:36:6a:db:b3:
f7:87:8d:0d:e2:f0:09:84:e6:47:33:b6:21:49:f2:
f0:67:39:2f:07:f2:89:76:eb:34:3c:1d:d0:50:8e:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:46:F8:11:8C:37:C0:49:66:1E:02:D2:F4:7D:90:08:CE:90:A6:21
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:38:0a:e9:85:56:67:15:63:9d:0f:4d:73:7c:c7:81:d6:02:
1f:f2:19:87:d4:02:b1:1b:ae:89:28:70:ab:f9:21:53:ac:8e:
fb:61:d2:cf:d7:d5:60:54:62:26:88:82:0e:74:6e:82:e9:04:
39:c7:53:49:3e:46:c4:63:14:53:f8:f9:88:97:90:8e:b8:78:
40:ff:be:43:83:bd:05:b1:b8:04:53:b2:94:7d:15:7e:47:b9:
5e:1a:c3:1f:97:01:e6:6b:05:36:97:55:1d:76:fb:77:5d:cf:
81:0e:0e:3c:cb:6c:b7:d4:8c:72:9a:68:50:f6:09:63:e5:f8:
da:a4:2b:a4:3f:02:35:cf:51:e2:2b:02:c5:8f:6e:97:c5:fd:
9f:6d:15:75:59:32:a1:9d:97:34:0c:4a:e8:83:e9:0c:80:38:
80:c0:8d:f5:6f:29:5f:2a:b1:76:90:42:61:2f:aa:10:5b:33:
a2:fb:c2:fa:9b:eb:42:fd:6b:69:8c:f4:4c:e8:2e:b3:b8:71:
6b:28:b4:9a:73:ef:43:8c:6a:6c:01:a9:72:48:5b:55:28:e9:
47:d0:69:fd:4f:cc:b9:59:d5:86:1e:3e:19:be:2a:c9:df:82:
6d:87:18:40:85:10:80:a9:f3:e4:45:ac:eb:51:6b:e4:a2:c5:
2d:7f:a7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:28:30 2025 by rpki-client