Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: acpwqU+JBXVCtk2zBe54n7L2scwCrsts50VRSS4rlLY=
Subject key identifier: B7:90:E1:E0:D9:D7:81:53:4F:8F:8B:DB:ED:7F:3B:F6:2B:18:34:C6
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 0199FB45A1151DFD62708E577F490430CE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:08 +0000
Manifest this update: Sun 19 Oct 2025 07:01:08 +0000
Manifest next update: Mon 20 Oct 2025 07:01:08 +0000
Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=)
2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: LrSOwCy43PJT5RKOQhpShCyxZNMbGB/kuUMvojkys0o=)
3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a1:15:1d:fd:62:70:8e:57:7f:49:04:30:ce:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Oct 19 07:01:08 2025 GMT
Not After : Oct 20 07:01:08 2025 GMT
Subject: CN=b790e1e0d9d781534f8f8bdbed7f3bf62b1834c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1a:d9:cf:71:88:6c:60:b0:bf:43:69:e9:b7:
91:aa:ad:43:9b:54:62:73:b4:55:14:0c:f7:e5:b2:
0d:72:89:22:a7:23:2c:af:68:b0:5a:17:a7:04:90:
e2:64:71:73:1a:c5:e7:a9:7c:83:0b:5c:49:13:a5:
49:b4:97:79:c4:48:14:e7:99:da:ee:ab:1d:14:53:
9e:ba:e0:39:07:e6:fe:b1:2a:9b:92:28:05:1b:4e:
ec:6f:6b:a3:76:15:82:ca:ac:2b:6f:ff:96:51:06:
c1:3c:8d:a2:87:95:4c:19:70:f4:28:ca:e3:1d:e3:
c6:4f:5e:c6:30:0f:d3:75:69:a3:34:39:d8:f5:74:
f8:86:7c:68:09:a2:51:5b:e8:a8:a3:41:5e:55:4e:
40:06:e6:1a:45:3d:ac:aa:90:1e:2d:4a:2a:98:57:
0c:f4:28:5c:71:a8:b9:e9:82:d7:e6:14:e3:a1:63:
a5:0f:26:8b:42:1f:9c:2a:04:38:5a:47:ba:26:cf:
fb:2c:c4:e2:cf:5c:93:55:64:e3:bc:d9:5d:4b:fb:
e2:43:8a:cc:25:ff:f5:8b:3f:8f:55:bf:5a:87:01:
c7:41:46:d2:60:bf:f4:a6:64:93:f2:6c:97:f7:fb:
62:4b:e5:84:7d:a5:e7:68:b1:64:68:82:0a:5c:6b:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:90:E1:E0:D9:D7:81:53:4F:8F:8B:DB:ED:7F:3B:F6:2B:18:34:C6
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:60:54:4f:8a:86:44:77:f5:9a:b2:b9:80:44:cc:19:30:a2:
cd:f9:1b:2e:ed:81:b8:02:9d:60:0f:6c:b6:00:59:c1:27:e5:
b1:0c:a0:89:dd:2e:af:b4:85:a2:61:a4:82:37:49:c8:9c:a9:
17:be:f5:38:f6:71:b2:f4:83:84:23:1a:da:ce:62:f8:76:e0:
30:a9:36:7b:59:57:53:cf:4d:ad:12:a5:7a:14:3b:de:14:c3:
ec:6c:55:67:dc:d5:42:75:80:c5:74:81:72:fc:cd:f3:56:35:
30:50:52:87:d8:b5:57:19:0a:59:bd:6f:94:f4:e6:6f:8b:a1:
64:72:ab:4f:05:64:fb:3a:d0:01:45:4b:69:f5:9d:20:74:f2:
b7:dc:1a:d9:14:42:c8:ab:16:35:63:60:ac:2d:a1:af:ab:b9:
ca:26:97:a3:5d:17:0b:05:6a:29:44:d9:e4:0b:ac:7f:54:34:
da:bb:a3:95:82:3f:67:13:f9:4d:03:06:dd:84:f0:2d:6f:06:
4f:81:01:54:89:80:7f:2a:2c:de:e5:95:1e:11:aa:47:a2:4b:
14:64:8e:d1:c1:85:8b:64:fd:f3:58:17:1c:ef:35:d3:c0:6b:
d2:f5:7f:a0:9b:7f:b2:94:fc:cd:40:6a:b0:89:1c:c8:58:40:
74:a7:a8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:03 2025 by rpki-client