Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: W0/6a2L21X82978RetSHDmk/Wz4MwyepYqMpbZR2i+g=
Subject key identifier: A1:F7:78:69:BE:75:98:7D:B4:3F:75:91:BF:FC:F8:C5:2C:78:5E:C1
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 019A4DE1B45B44CC11079B8B1F3016D436FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 08:00:28 +0000
Manifest this update: Tue 04 Nov 2025 08:00:28 +0000
Manifest next update: Wed 05 Nov 2025 08:00:28 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: mNSszEmGuEMIbV2bjfDNMe/I/JizgdC4NmEg152RFy0=)
2: gPqZz-ULbWxNpVtGrAcbURafLCM.roa (hash: bhtp8MkxjHqH+uI5CHLafEhg4ALYqQQHfi1+8hAlks8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b4:5b:44:cc:11:07:9b:8b:1f:30:16:d4:36:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Nov 4 08:00:28 2025 GMT
Not After : Nov 5 08:00:28 2025 GMT
Subject: CN=a1f77869be75987db43f7591bffcf8c52c785ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:6a:bb:79:3f:a3:f9:5a:be:ed:8e:37:c9:
95:28:11:94:24:d2:53:b5:cc:4b:2d:49:24:73:65:
a0:d2:81:ef:e5:e8:23:ff:60:4f:09:07:06:01:b1:
37:f6:75:4d:43:05:9b:32:a6:41:8c:8a:7b:14:c7:
e9:87:35:2e:d8:ef:2e:77:c4:aa:50:d9:dd:3c:2e:
58:3c:17:ad:a6:b1:16:84:ee:93:34:e9:12:57:71:
fb:7f:7b:e2:46:5e:45:91:73:d2:1e:7c:c2:f6:2c:
2b:9c:06:2a:c2:cb:de:b1:20:1b:bd:3f:29:54:00:
d1:1e:66:be:c3:c0:63:14:09:07:ae:c4:9d:89:a9:
59:6e:22:32:48:d4:be:0b:20:02:3e:9f:8d:2c:61:
e9:95:1e:e7:45:2e:ab:8f:81:86:68:a7:34:94:69:
77:26:59:a8:9c:0d:d1:a8:74:b1:b2:59:05:c3:2f:
02:ac:6a:73:68:63:e1:00:d6:fc:aa:ee:ca:e2:c0:
a2:27:aa:bd:f6:34:46:b7:a4:b0:9c:85:ca:f6:c8:
86:f4:c3:02:14:6e:08:31:46:10:e3:9a:84:28:6e:
6c:fb:cc:d6:60:36:18:99:8c:e9:28:05:8b:af:08:
af:01:c6:81:0d:7a:65:f9:6a:40:99:1f:66:fd:f3:
b0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F7:78:69:BE:75:98:7D:B4:3F:75:91:BF:FC:F8:C5:2C:78:5E:C1
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:49:6c:bf:cc:29:60:14:e3:e1:7b:aa:91:5b:a8:17:f1:87:
ae:b4:a2:0a:bf:b1:2b:5c:c0:3f:84:57:1b:fb:c0:9e:dc:2b:
cd:12:a4:7e:61:d8:a2:cd:e7:84:e3:9f:70:ab:e2:be:54:fb:
a5:33:ef:d4:39:65:51:4f:bf:34:d4:58:f9:07:6d:04:96:9d:
f8:83:80:4a:3d:62:2e:32:33:f8:38:66:06:58:3b:35:6c:13:
50:58:88:15:38:46:6b:0e:0b:e2:90:12:c0:81:11:5f:e7:95:
11:4a:7e:11:4f:d0:ce:40:46:f4:4c:a4:93:32:55:8d:04:c2:
93:45:73:85:0f:27:e8:8d:83:68:32:b4:26:37:90:7c:de:c2:
1f:45:84:01:f0:74:4a:48:21:c3:1f:06:04:96:ff:47:67:03:
a3:95:0d:a3:39:bb:98:75:5a:ad:97:d6:fe:24:68:72:b5:38:
e2:d4:67:f0:20:85:c1:bb:95:b0:69:3c:6d:cf:26:5f:0c:96:
a5:94:2f:f4:f8:4c:5a:da:9d:26:4f:09:01:7b:34:e8:39:0c:
12:42:44:cc:3b:05:51:45:de:2a:b5:0f:80:19:36:82:7e:98:
1b:d2:ac:29:cc:13:bb:e2:90:2d:ee:5a:25:f9:6a:f4:0a:a5:
0c:a1:59:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:44 2025 by rpki-client