Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: K3Y0ZG5CG6S13HI1h8r7jHZoFjUnT5aocO+gkxXRXlA=
Subject key identifier: F6:95:89:B1:22:53:AF:1E:B3:4B:E4:D4:FE:07:AD:ED:B1:F2:63:E0
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 01965A5E3472D11CC8EE3B22FD25FABE96DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 22:00:45 +0000
Manifest this update: Mon 21 Apr 2025 22:00:45 +0000
Manifest next update: Tue 22 Apr 2025 22:00:45 +0000
Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=)
2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: PKzPXLqJMw2n9pO+E5b1BgwOHlL1SrmuWjQ6gp7qv4s=)
3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:34:72:d1:1c:c8:ee:3b:22:fd:25:fa:be:96:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Apr 21 22:00:45 2025 GMT
Not After : Apr 22 22:00:45 2025 GMT
Subject: CN=f69589b12253af1eb34be4d4fe07adedb1f263e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:85:c2:34:4c:9c:bf:a9:2f:3d:49:4f:f5:
0d:4c:d2:0a:e7:9d:b6:55:17:29:d8:67:62:0f:81:
0e:39:33:57:56:5c:c8:c1:e6:ed:54:98:6b:2b:41:
85:30:4e:d5:46:26:65:ee:aa:d6:c7:26:eb:c4:03:
00:f6:db:fc:0f:0c:a4:3a:39:69:41:f5:ba:ea:2e:
54:87:0a:59:08:7f:14:68:11:56:36:b2:62:d4:12:
95:f5:87:87:67:30:1f:f0:dd:8a:1d:67:db:d8:c7:
51:60:d4:02:ac:13:39:97:e4:fe:96:1a:3e:c8:13:
59:99:dd:76:06:be:99:70:ff:6e:41:1a:a4:9c:ca:
e4:85:d2:82:b1:fa:84:d2:cf:65:c8:aa:ee:4f:17:
ea:0d:98:6d:66:56:b4:92:c0:05:c4:4d:e7:29:0b:
66:2d:cc:a5:16:15:0c:89:73:73:44:6c:fc:fd:9f:
74:87:5a:b1:03:f9:79:55:2f:6a:5d:b1:ba:dc:05:
7b:98:0b:33:79:14:5a:27:07:61:fe:42:a0:0e:1b:
5e:cd:4e:25:93:59:a0:df:41:43:ab:81:e3:15:f4:
99:10:31:ad:4d:23:e5:1e:e3:29:e9:c8:fe:ee:5b:
8f:73:00:d9:e2:71:ac:0e:d1:f1:4c:b6:04:68:17:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:95:89:B1:22:53:AF:1E:B3:4B:E4:D4:FE:07:AD:ED:B1:F2:63:E0
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c1:9e:2b:99:bd:cb:96:03:a3:cb:7b:55:40:c5:ed:7e:e2:
81:09:33:ae:11:86:51:5d:5d:32:96:81:45:69:24:37:c5:f5:
21:49:14:a3:9e:4c:f1:20:d8:2d:b6:e7:01:87:31:ba:b4:53:
a3:56:c6:c3:d4:e0:fe:0b:f2:2b:e6:47:fa:33:74:83:02:9a:
bb:19:9e:83:40:65:d0:20:72:f1:13:60:c2:c5:4a:3a:0f:ff:
9a:33:a5:f7:30:bf:a3:a7:30:17:cf:13:a4:41:91:f0:84:5f:
0a:33:1f:bd:1f:6f:ee:89:96:ee:a2:1b:19:59:34:cc:e7:69:
69:22:cf:88:98:ac:90:11:56:f7:f8:b0:37:53:97:9b:5f:50:
0e:f8:c7:c9:4a:14:9d:22:10:78:28:b6:5a:17:3e:61:b4:98:
22:99:42:f1:1f:eb:4a:96:90:95:e5:da:2b:5c:4a:42:44:02:
50:34:5e:4b:55:3d:1d:d4:65:fd:77:79:e9:9c:e2:9a:e4:69:
93:ac:2c:6a:6a:cc:4d:7f:95:ba:9f:25:60:f1:8b:85:98:cb:
e0:13:47:83:86:1b:9c:e1:4b:3c:78:13:5d:a6:0c:23:ef:f3:
01:2f:e2:88:2f:0b:c5:46:49:a4:22:11:48:21:e0:77:10:72:
9a:95:67:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaXjRy0RzI7jsi/SX6vpbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYmNiZmViOGZhODk3Mzc0NzE4YTkxMDJhNGE3MDY3MWUy
YWFiZjkwHhcNMjUwNDIxMjIwMDQ1WhcNMjUwNDIyMjIwMDQ1WjAzMTEwLwYDVQQD
EyhmNjk1ODliMTIyNTNhZjFlYjM0YmU0ZDRmZTA3YWRlZGIxZjI2M2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhOFwjRMnL+pLz1JT/UNTNIK5522
VRcp2GdiD4EOOTNXVlzIwebtVJhrK0GFME7VRiZl7qrWxybrxAMA9tv8DwykOjlp
QfW66i5UhwpZCH8UaBFWNrJi1BKV9YeHZzAf8N2KHWfb2MdRYNQCrBM5l+T+lho+
yBNZmd12Br6ZcP9uQRqknMrkhdKCsfqE0s9lyKruTxfqDZhtZla0ksAFxE3nKQtm
LcylFhUMiXNzRGz8/Z90h1qxA/l5VS9qXbG63AV7mAszeRRaJwdh/kKgDhtezU4l
k1mg30FDq4HjFfSZEDGtTSPlHuMp6cj+7luPcwDZ4nGsDtHxTLYEaBcVsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaVibEiU68es0vk1P4Hre2x8mPgMB8GA1UdIwQY
MBaAFJ68v+uPqJc3RxipECpKcGceKqv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzkt
OWNkMGNhZTA2MjkyLzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzktOWNkMGNhZTA2Mjky
LzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsGeK5m9
y5YDo8t7VUDF7X7igQkzrhGGUV1dMpaBRWkkN8X1IUkUo55M8SDYLbbnAYcxurRT
o1bGw9Tg/gvyK+ZH+jN0gwKauxmeg0Bl0CBy8RNgwsVKOg//mjOl9zC/o6cwF88T
pEGR8IRfCjMfvR9v7omW7qIbGVk0zOdpaSLPiJiskBFW9/iwN1OXm19QDvjHyUoU
nSIQeCi2Whc+YbSYIplC8R/rSpaQleXaK1xKQkQCUDReS1U9HdRl/Xd56ZzimuRp
k6wsamrMTX+Vup8lYPGLhZjL4BNHg4YbnOFLPHgTXaYMI+/zAS/iiC8LxUZJpCIR
SCHgdxBympVnXg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:59 2025 by rpki-client