Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: 3RrYWoM5hTSSTAkrUR6OOznRgiCeJA2Ue8voTjZMnBE=
Subject key identifier: 67:84:A9:A9:DC:DB:5E:F1:10:B7:F8:0C:D4:72:EB:93:4C:D3:0C:7A
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019749D5F81A53CA1A2A023C7EAC5901C75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 10:00:48 +0000
Manifest this update: Sat 07 Jun 2025 10:00:48 +0000
Manifest next update: Sun 08 Jun 2025 10:00:48 +0000
Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=)
2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: g93hRh8wEOokrFnuC66ED70YkW/2W23LLyEoPQn3F40=)
3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f8:1a:53:ca:1a:2a:02:3c:7e:ac:59:01:c7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Jun 7 10:00:48 2025 GMT
Not After : Jun 8 10:00:48 2025 GMT
Subject: CN=6784a9a9dcdb5ef110b7f80cd472eb934cd30c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:0e:66:3b:71:73:06:37:59:6e:99:70:8a:
0b:1a:9c:96:5f:74:b6:26:ae:3d:1c:bc:52:41:24:
f1:9a:52:bb:1f:31:cb:d1:0b:54:7a:71:cb:3c:d6:
69:55:19:b9:41:16:28:24:cb:08:84:c3:b3:6f:f7:
c9:48:3f:97:6b:ce:e9:58:40:17:47:6f:0c:c8:79:
70:26:18:06:52:6e:5d:d4:19:ef:83:74:d2:26:13:
67:1c:08:65:3c:4b:24:69:a4:c3:f4:81:5f:ea:a0:
81:9a:1c:49:59:c4:26:70:a6:ef:d6:3c:05:b4:45:
7b:6e:c2:62:19:13:37:e7:e2:8a:db:6a:bc:03:32:
f5:85:eb:6e:b1:1d:75:41:75:a2:5e:fe:92:e8:13:
f9:3d:60:f8:2e:a2:ea:98:b1:0b:7d:62:17:3c:74:
72:dd:6c:7f:20:00:35:73:3a:d3:e4:0c:88:7e:f2:
96:ea:19:5b:a6:70:77:2f:70:0a:da:23:1b:9c:d6:
94:be:17:bc:99:bf:09:fb:47:9f:3a:d8:b5:49:4f:
fc:e3:a1:12:5b:7f:80:1f:61:fb:b1:0c:00:9a:f0:
96:76:ca:0e:0e:90:8d:2c:03:5a:44:d2:6c:02:fa:
6e:7b:a9:ef:6c:65:0c:11:e6:af:98:84:49:f5:f6:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:84:A9:A9:DC:DB:5E:F1:10:B7:F8:0C:D4:72:EB:93:4C:D3:0C:7A
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:66:65:fd:e2:58:6b:8d:64:90:6f:96:96:e1:77:0c:ab:cb:
88:9b:39:65:93:e9:6e:9f:a7:07:2b:eb:66:99:d1:e2:89:99:
13:5a:d4:96:b1:fa:41:6b:72:72:26:71:14:f9:1b:3e:a5:8a:
fe:ac:d4:34:0c:6c:ba:ac:e0:4d:89:a4:a9:27:ba:38:b5:d9:
c6:9d:4d:3e:57:3e:6c:19:76:44:a0:39:57:9c:85:9e:7f:e0:
61:24:ac:12:ef:c2:e3:cc:4f:36:d8:62:19:4f:94:d2:4f:6b:
d4:c6:46:4c:2b:6e:db:53:ef:a7:ad:30:f0:0b:46:1d:96:d4:
e6:71:b8:03:b3:9d:66:c4:22:dd:1d:c7:2b:c6:97:ee:2f:14:
59:39:e5:4d:2e:91:92:50:c3:49:5e:2c:5f:c0:a5:a9:88:02:
ec:5b:e6:ba:9e:9d:d4:ca:42:f0:ab:9f:16:31:61:a7:30:81:
36:0a:29:fa:71:99:37:ea:8a:c1:d6:80:7d:a2:1c:bf:3f:cc:
2a:6a:35:71:fd:d1:69:a5:88:44:4b:0e:7f:05:2f:0f:c4:cd:
b5:d5:c2:87:25:3d:22:62:d8:c4:35:08:90:1e:ad:b0:51:57:
cf:99:03:c4:7e:3e:17:b5:06:6d:52:b2:94:9e:16:52:95:9f:
4c:b6:a0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:33:22 2025 by rpki-client