Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: lGYgkftGxLKKtuWEpnsmpvO9EJkatkOhaVQTfZIKAaA=
Subject key identifier: 4C:2B:B6:3D:AB:1F:1A:BF:8E:06:5C:7F:E1:B1:45:65:EA:F3:68:DB
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 0199326D97CA923F20415831AC8D3B6E605E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 07:01:07 +0000
Manifest this update: Wed 10 Sep 2025 07:01:07 +0000
Manifest next update: Thu 11 Sep 2025 07:01:07 +0000
Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=)
2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: CRgYEHfuII5g0LGN0KTBpICvUcyzIVXVP9W9gTAj3VA=)
3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:97:ca:92:3f:20:41:58:31:ac:8d:3b:6e:60:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Sep 10 07:01:07 2025 GMT
Not After : Sep 11 07:01:07 2025 GMT
Subject: CN=4c2bb63dab1f1abf8e065c7fe1b14565eaf368db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:c5:fa:fd:f8:c0:44:fd:43:61:10:92:b5:
31:fc:9e:04:46:58:57:3f:b8:f2:2c:ea:44:27:bf:
ae:68:5a:8b:8b:43:50:e7:b8:d2:6f:53:eb:3c:e6:
7a:6f:86:89:07:7c:92:c1:ea:cd:7a:07:f7:b2:f0:
e4:36:41:7d:a5:e1:24:54:77:7b:f5:f2:b7:ad:e4:
47:04:30:b8:bc:0e:16:06:c4:14:2a:52:53:1d:56:
8d:d4:2a:8e:07:4e:66:92:4d:b5:4e:41:b8:8a:44:
0e:4c:d8:a8:c2:1d:c1:85:8e:ba:b8:68:d5:16:64:
1b:ec:9c:40:5c:60:c8:02:5f:1b:b1:22:ce:d1:53:
4a:39:18:a6:ef:be:d4:a5:a1:43:b3:77:33:2a:3b:
36:19:f3:bf:6d:55:fc:92:59:3f:e3:9c:41:ba:70:
cc:8b:c2:a8:77:f8:28:e0:7b:f7:a6:62:04:1b:e9:
46:e8:23:4e:70:47:1b:a3:1a:10:d7:a9:e2:c2:34:
fa:24:06:f2:5b:d1:dd:a4:38:25:8a:57:49:9c:f2:
c1:0f:83:4c:49:31:b6:ae:af:0c:17:fc:5f:ed:5b:
fe:6b:d4:1a:07:8c:0f:c2:5e:b5:90:69:b8:22:70:
7f:83:07:ae:a5:f1:1b:d7:09:10:72:bc:6b:fd:e8:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2B:B6:3D:AB:1F:1A:BF:8E:06:5C:7F:E1:B1:45:65:EA:F3:68:DB
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ad:a8:f2:c7:a3:ce:e2:0b:8f:51:4a:93:cc:5f:61:d6:51:
33:b4:6e:d4:36:1e:32:c2:d5:1d:b4:13:02:c9:32:56:0e:c9:
d5:1b:59:1d:bd:4d:5f:9c:dd:78:02:77:04:c6:da:5e:73:46:
b8:d6:44:88:a2:65:64:62:e1:ab:39:2c:81:db:3c:3e:5f:32:
e6:c5:21:81:c3:85:a7:7b:70:ca:fc:54:f0:b8:01:87:24:a3:
4e:a9:29:bc:73:02:86:4d:53:e5:bf:a3:a8:7c:40:d4:45:3e:
0f:63:22:7b:cf:88:7c:49:b3:f9:a1:82:75:8c:73:ca:6a:31:
36:96:a8:c6:5f:fa:48:e9:d7:24:0d:60:5e:44:20:7f:dc:a8:
b1:cb:ec:43:18:c9:24:21:b6:22:ab:fc:85:5f:a6:cc:ec:8a:
35:ae:64:f9:54:56:89:dd:91:3e:e1:5a:a8:33:17:fd:d0:ac:
3f:25:4f:74:6c:c2:55:d9:cf:67:7d:5d:19:70:ee:28:19:da:
c6:d1:24:90:d8:92:73:79:72:8d:79:d5:4c:94:b2:63:29:cc:
22:9d:cc:b8:fe:58:cb:ad:f9:69:85:9e:17:e4:86:35:75:94:
fd:bd:56:70:7e:c0:f6:e9:28:0e:79:52:2a:58:d0:4f:10:ac:
48:b9:39:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkybZfKkj8gQVgxrI07bmBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYmNiZmViOGZhODk3Mzc0NzE4YTkxMDJhNGE3MDY3MWUy
YWFiZjkwHhcNMjUwOTEwMDcwMTA3WhcNMjUwOTExMDcwMTA3WjAzMTEwLwYDVQQD
Eyg0YzJiYjYzZGFiMWYxYWJmOGUwNjVjN2ZlMWIxNDU2NWVhZjM2OGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0zF+v34wET9Q2EQkrUx/J4ERlhX
P7jyLOpEJ7+uaFqLi0NQ57jSb1PrPOZ6b4aJB3ySwerNegf3svDkNkF9peEkVHd7
9fK3reRHBDC4vA4WBsQUKlJTHVaN1CqOB05mkk21TkG4ikQOTNiowh3BhY66uGjV
FmQb7JxAXGDIAl8bsSLO0VNKORim777UpaFDs3czKjs2GfO/bVX8klk/45xBunDM
i8Kod/go4Hv3pmIEG+lG6CNOcEcboxoQ16niwjT6JAbyW9HdpDglildJnPLBD4NM
STG2rq8MF/xf7Vv+a9QaB4wPwl61kGm4InB/gweupfEb1wkQcrxr/eh4rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwrtj2rHxq/jgZcf+GxRWXq82jbMB8GA1UdIwQY
MBaAFJ68v+uPqJc3RxipECpKcGceKqv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzkt
OWNkMGNhZTA2MjkyLzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzktOWNkMGNhZTA2Mjky
LzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcK2o8sej
zuILj1FKk8xfYdZRM7Ru1DYeMsLVHbQTAskyVg7J1RtZHb1NX5zdeAJ3BMbaXnNG
uNZEiKJlZGLhqzksgds8Pl8y5sUhgcOFp3twyvxU8LgBhySjTqkpvHMChk1T5b+j
qHxA1EU+D2Mie8+IfEmz+aGCdYxzymoxNpaoxl/6SOnXJA1gXkQgf9yoscvsQxjJ
JCG2Iqv8hV+mzOyKNa5k+VRWid2RPuFaqDMX/dCsPyVPdGzCVdnPZ31dGXDuKBna
xtEkkNiSc3lyjXnVTJSyYynMIp3MuP5Yy635aYWeF+SGNXWU/b1WcH7A9ukoDnlS
KljQTxCsSLk5Mw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 12:06:42 2025 by rpki-client