Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: uCqPnYCs6zg5A1pJRLkvX+XWkWi+uZaAYY3SZifQCpk=
Subject key identifier: 5B:85:CE:55:21:55:35:1B:69:9D:8A:81:18:C3:1A:5A:50:A2:4F:7B
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 019882433B14E3FB852BFD801887863E1FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 1622
Signing time: Thu 07 Aug 2025 02:01:40 +0000
Manifest this update: Thu 07 Aug 2025 02:01:40 +0000
Manifest next update: Fri 08 Aug 2025 02:01:40 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: 2oHvFc0putJoLitDDzmDLU68Xfc48a6zelNCSXR2Qps=)
2: gPqZz-ULbWxNpVtGrAcbURafLCM.roa (hash: bhtp8MkxjHqH+uI5CHLafEhg4ALYqQQHfi1+8hAlks8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:3b:14:e3:fb:85:2b:fd:80:18:87:86:3e:1f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Aug 7 02:01:40 2025 GMT
Not After : Aug 8 02:01:40 2025 GMT
Subject: CN=5b85ce552155351b699d8a8118c31a5a50a24f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:64:15:ad:51:00:ad:90:d7:49:3d:74:7e:
37:7a:13:68:0a:c5:7e:af:1c:f5:d7:df:24:a6:74:
8c:07:35:7d:2b:58:a8:7a:fc:68:29:9c:ee:32:2d:
98:fc:ca:7d:f4:63:9e:d7:bd:48:f4:f1:4d:0e:f5:
85:e7:b1:09:df:6b:27:74:fe:b6:04:75:81:5b:d5:
45:cc:8c:28:cc:e8:29:fe:1e:1c:3e:a3:1c:81:bd:
b8:43:88:cd:b4:7f:af:1f:87:57:22:ec:17:1d:bf:
6a:be:0b:e0:c7:19:13:6c:93:c7:32:64:52:a3:7c:
7f:5f:73:c4:0d:7d:f1:a0:45:32:3b:48:cb:32:98:
cf:88:18:c3:ad:be:a4:d1:0f:70:7f:4a:e8:39:08:
eb:dd:3e:78:47:2f:3f:62:65:90:e4:5e:18:7c:4d:
07:22:9c:9c:c4:98:04:1b:cd:93:fe:6d:c9:d9:4b:
ad:99:da:23:6a:3f:71:5b:45:3a:24:86:f9:87:11:
ed:4e:4b:85:c4:ea:33:11:f3:0e:8a:4d:80:d7:f4:
50:58:ef:cd:ea:cf:1c:a5:55:45:83:81:1a:24:be:
9b:c4:17:eb:d9:0a:fb:a2:a1:c6:c3:11:19:91:9f:
21:cd:84:2d:3b:17:bf:0d:d0:8b:5a:61:7a:2f:a4:
e4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:85:CE:55:21:55:35:1B:69:9D:8A:81:18:C3:1A:5A:50:A2:4F:7B
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b4:28:92:34:4e:90:be:ca:b8:f8:ea:b6:5e:7e:32:a1:57:
f5:13:16:a9:86:ee:b0:de:89:52:61:71:50:d7:6f:c9:04:35:
57:9e:2e:72:90:c0:0a:e7:9b:a8:f6:d4:58:d9:a1:9d:90:d9:
47:57:4b:40:d2:29:38:e9:dc:0f:14:4e:f9:e3:b5:4d:98:2e:
ff:49:21:ca:a9:d1:ce:37:54:73:87:ef:5f:56:af:2c:21:84:
24:1b:f9:87:28:dd:d4:e1:9c:23:55:9e:2f:b9:a5:3f:fa:4f:
68:40:5e:99:a3:21:71:88:14:40:2a:a4:c4:b2:94:81:55:e2:
19:65:13:fa:3c:94:ed:0e:c7:a0:16:57:4e:c4:a2:39:7a:16:
6b:82:ee:47:ec:c8:9a:99:1e:56:fd:36:21:cb:3a:bd:04:b5:
53:63:be:1c:0f:24:4f:64:53:fc:f7:44:ec:28:b6:f7:8f:53:
84:28:36:96:14:cd:4b:74:11:5b:f1:1f:6c:ec:4b:bf:99:5e:
d7:20:c6:42:2e:ee:c2:b7:a0:ea:68:ce:72:b0:fc:4a:b1:65:
52:dd:e5:9f:a7:c4:b6:a5:2b:7e:d3:a6:a4:c4:f2:03:08:99:
fb:0a:42:8c:83:b3:b1:eb:aa:9f:72:72:48:b1:bf:54:0a:b0:
f8:b5:d3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:41:22 2025 by rpki-client