Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: 7JEJO5MRZYIbhYvt2xr/joAj0wbcd+cc/JZRzs3DbrQ=
Subject key identifier: 08:58:1C:88:D8:73:C0:69:16:BE:2B:75:2F:4F:B5:D6:79:F9:00:49
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019A23D389DB3CA140110603BD2701840F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 04:00:57 +0000
Manifest this update: Mon 27 Oct 2025 04:00:57 +0000
Manifest next update: Tue 28 Oct 2025 04:00:57 +0000
Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=)
2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: kPyX2b13uafjWOvtqzqMjgMdJraN3ZhiQNss63LTdus=)
3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:89:db:3c:a1:40:11:06:03:bd:27:01:84:0f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Oct 27 04:00:57 2025 GMT
Not After : Oct 28 04:00:57 2025 GMT
Subject: CN=08581c88d873c06916be2b752f4fb5d679f90049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b0:c2:0e:ef:a2:f9:69:33:3e:2e:b1:b0:45:
16:a5:37:ce:98:59:c7:b0:f2:a2:e5:9e:8b:dc:19:
28:5e:f9:38:7c:4d:2c:58:13:79:d7:77:7b:5d:7b:
8a:e6:11:d1:d0:ae:cb:ed:4e:3c:9f:c7:53:d9:b6:
a1:6d:38:2b:64:71:9f:b3:7f:51:9e:c5:69:ac:87:
83:41:aa:6d:bc:50:5f:29:9d:b5:42:67:2e:99:66:
41:66:5b:ab:03:f4:61:a0:f8:c2:25:ce:0e:0d:f7:
1d:d9:7c:b3:e0:d0:8b:d4:ba:78:82:c2:8b:19:3a:
03:69:86:f3:6d:7e:b6:71:34:8f:29:85:5a:13:af:
40:cc:07:62:4c:58:b8:94:8d:46:c7:9a:3b:ab:9f:
74:40:87:2c:98:fe:93:b8:5b:e2:b6:ed:e1:4d:78:
13:bf:84:f6:d3:ee:4f:da:d8:57:d5:b1:18:63:0f:
6d:76:72:ca:ef:de:a9:bd:44:5c:94:b5:e6:e5:b9:
57:26:ec:6a:9b:79:e9:fe:c1:21:7e:44:d3:06:4a:
8b:3e:c4:ff:12:69:d0:dd:70:1a:a5:3f:d3:2d:12:
72:31:dd:cb:2d:71:a6:11:17:7f:2a:9d:f5:8a:d3:
b0:a8:ce:8d:e7:d8:5e:25:39:75:9c:b9:32:de:ab:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:58:1C:88:D8:73:C0:69:16:BE:2B:75:2F:4F:B5:D6:79:F9:00:49
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:92:11:ad:ec:97:d8:4d:22:1e:d2:64:3d:02:1e:95:03:d8:
52:e3:10:76:84:c7:a5:7e:ec:46:19:30:e7:20:bc:27:12:ea:
aa:49:61:7b:f9:c9:bd:00:b6:f7:67:19:1a:b1:27:08:df:46:
3e:0a:ba:3f:ae:ba:b9:61:82:42:ee:53:1e:96:43:ef:53:c8:
54:13:1f:09:30:c7:cc:f2:8d:de:e5:ab:dc:6d:fd:88:de:41:
4c:ee:ae:1b:9d:d3:74:63:d3:ce:2d:9c:0d:cd:1a:95:ff:47:
ce:fd:55:fe:d8:21:d0:8a:d5:91:1c:5d:80:18:2c:c7:ea:60:
22:b1:a4:52:00:da:70:db:c1:27:6c:1c:88:1a:95:c4:32:9f:
87:cf:0b:64:d5:c9:33:f3:98:34:36:2f:68:e9:a9:c9:0d:8d:
05:87:d8:52:a1:8b:e0:ee:f9:a1:85:e9:a1:82:96:15:94:f9:
20:a2:d5:17:d9:db:b6:d1:ad:c4:7a:04:53:f4:6f:d4:6c:5b:
74:7d:23:1e:0b:a0:35:a9:9a:e2:e6:38:24:4d:5b:ee:90:70:
d0:45:8a:47:f8:8a:20:64:40:87:4d:8e:5c:b9:4a:44:0b:92:
89:32:bd:2d:9f:20:4e:a7:15:f1:81:2f:cc:b8:aa:9b:cc:73:
35:77:ec:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:57 2025 by rpki-client