Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: k+tcY1XXbPBQEDxbcekzpp4xl5iTbYA0CEMFeSLIVs4=
Subject key identifier: 2D:D4:8A:9D:22:12:1F:E5:D7:71:77:95:85:24:32:42:F1:4C:6B:D6
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 0198D5BBFFDECBB6DA652738FABC8A9945FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:02:04 +0000
Manifest this update: Sat 23 Aug 2025 07:02:04 +0000
Manifest next update: Sun 24 Aug 2025 07:02:04 +0000
Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=)
2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: QOLUVX75d4oEYt2x7QtaKp0245LCCsbODJqUF1YFHsM=)
3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ff:de:cb:b6:da:65:27:38:fa:bc:8a:99:45:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Aug 23 07:02:04 2025 GMT
Not After : Aug 24 07:02:04 2025 GMT
Subject: CN=2dd48a9d22121fe5d771779585243242f14c6bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:c7:8a:a2:2c:42:e4:03:1c:ad:05:84:26:
9c:51:25:59:1a:3f:5e:c2:23:e4:6e:e3:7d:89:c5:
39:b8:d5:11:f5:a4:58:86:88:6e:c2:6e:11:a8:a3:
78:4d:b0:ca:f3:8d:64:3f:76:90:dc:d8:ee:e1:27:
24:f0:ef:70:01:be:4a:03:b3:e4:04:6b:09:63:a8:
ea:de:33:96:65:ee:f3:a6:fd:a1:0c:5b:98:e4:b8:
63:ac:b3:6a:a3:49:af:19:1c:95:d1:90:e4:65:1c:
f1:e9:c7:13:80:7b:08:70:d7:05:16:d0:0b:09:06:
1a:2a:df:91:b9:5c:dd:55:9e:a4:8c:32:7c:de:cb:
0f:54:51:c7:48:b1:5d:8b:b9:e7:59:71:65:78:47:
1d:94:c1:eb:76:a5:35:17:fb:31:4e:12:1f:cb:55:
36:66:86:cb:2a:50:a8:10:58:9b:c9:d7:56:4c:b0:
e4:49:af:f0:9f:6d:54:c3:69:6a:a8:11:55:f6:a6:
17:77:52:a3:dd:a0:49:05:86:0e:84:3f:da:fd:99:
5a:ad:e8:c2:83:a8:18:1d:d9:d9:9b:0d:a7:54:ff:
5c:63:83:af:9e:8a:25:d3:e0:41:24:09:df:cd:c5:
2d:fc:f2:81:8f:86:3e:ba:93:33:9e:04:af:e8:8d:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D4:8A:9D:22:12:1F:E5:D7:71:77:95:85:24:32:42:F1:4C:6B:D6
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a3:e2:9c:b7:93:b7:a5:83:55:ee:33:3e:86:19:dc:ca:d0:
1b:72:36:05:35:97:6f:3e:27:a1:dd:03:56:71:44:f9:57:f1:
b6:5b:26:53:3c:0e:10:e9:7b:67:9c:3a:d9:ab:4e:75:fc:bd:
59:40:ac:21:1f:44:be:9b:45:98:bf:5a:57:89:c8:f9:ee:da:
6a:7b:c0:5a:ed:29:ce:66:eb:14:21:27:96:64:96:96:9a:82:
44:10:f8:fe:0c:ca:69:5b:82:c3:4f:1f:e7:71:9d:1b:c9:43:
ec:37:70:c7:da:f9:cd:9a:4a:43:ba:57:50:bf:00:8f:21:95:
e8:f7:23:94:5c:6b:51:8d:85:6a:67:67:e9:34:90:b7:85:e2:
67:d9:41:78:ed:92:11:b4:08:d8:b6:3e:5e:81:cb:8d:c1:cd:
4c:9c:ab:00:8d:ef:92:96:01:e8:19:ed:ff:6c:31:b9:90:33:
08:37:e9:0c:a5:ef:fc:4b:f7:98:19:9e:3a:49:40:c4:3d:52:
fc:cf:54:d2:84:6f:eb:2f:a9:f1:a2:3b:e5:ae:50:a4:7d:c1:
29:db:50:5a:3d:56:df:29:79:5e:a0:bb:2b:ae:a5:0a:99:64:
36:5c:38:8a:95:60:61:c5:49:d3:d0:84:17:78:0b:0d:71:59:
2c:fd:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:03 2025 by rpki-client