Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: lD7AivSi2ec3WJ5xUqv0sBB2aw2kR+hgVEVuwlArQKU=
Subject key identifier: F6:CA:01:2C:C0:C4:C4:0A:AE:87:8F:17:46:8C:E4:02:A2:F5:86:CF
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 01976C2B370D531CC181165C9C4534F2CA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 02:01:00 +0000
Manifest this update: Sat 14 Jun 2025 02:01:00 +0000
Manifest next update: Sun 15 Jun 2025 02:01:00 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: enzaznoLDODO5SpWOMExynbPoL88u0RYEAlR3Q332CQ=)
2: gPqZz-ULbWxNpVtGrAcbURafLCM.roa (hash: bhtp8MkxjHqH+uI5CHLafEhg4ALYqQQHfi1+8hAlks8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:37:0d:53:1c:c1:81:16:5c:9c:45:34:f2:ca:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Jun 14 02:01:00 2025 GMT
Not After : Jun 15 02:01:00 2025 GMT
Subject: CN=f6ca012cc0c4c40aae878f17468ce402a2f586cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:f5:3e:0b:27:4e:f2:5c:22:f0:f0:32:28:
5f:f3:f6:47:db:d6:cd:de:80:95:0b:75:a4:32:ca:
30:bc:bf:0c:0a:09:dc:40:bf:ba:35:05:e4:c0:d4:
c8:c9:e5:45:03:b9:bf:72:df:64:62:af:8a:26:16:
84:9e:b9:79:15:9a:a2:d2:5d:f9:c7:4b:5b:92:35:
8b:40:d2:35:75:00:4f:4c:c3:fc:01:c5:8a:4b:06:
d0:85:7a:ef:96:2d:3c:be:7e:e9:34:bd:e9:91:24:
c5:93:03:81:ad:7d:86:43:cf:5d:3b:3f:cf:f7:34:
f1:60:e0:2a:f5:2c:6c:4f:df:06:de:84:37:c7:09:
94:08:10:e4:84:56:8d:9e:b2:ec:94:96:9c:b9:f1:
fc:bd:63:2a:b6:33:5e:17:62:1f:cb:70:fb:0c:45:
4f:9e:dc:32:7a:c6:42:ca:1b:b7:ea:eb:77:29:77:
4b:2d:08:0e:29:54:8f:b7:4c:08:14:1d:3f:60:24:
a5:db:19:61:20:fa:f5:9f:d0:23:52:5a:87:8d:47:
c1:3b:43:e9:af:95:9c:37:09:ea:24:a8:00:99:9b:
48:08:84:e5:9f:1e:e9:12:08:36:60:f9:b3:6e:a9:
41:72:29:85:25:da:c9:df:ec:d3:30:57:19:6f:af:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CA:01:2C:C0:C4:C4:0A:AE:87:8F:17:46:8C:E4:02:A2:F5:86:CF
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:24:f2:a1:b9:e2:8b:11:1e:c0:84:42:32:07:13:16:87:18:
de:ed:08:74:c3:eb:75:1c:b9:20:3e:ca:a6:15:9e:1f:ed:8c:
32:35:0f:79:db:7a:f6:f1:fc:9e:c9:17:b9:c3:c4:c6:75:f8:
17:25:77:99:ef:7a:aa:71:73:0c:2d:e5:97:7d:37:ed:fb:fb:
f7:fd:96:ec:3d:16:02:27:9e:08:fe:39:eb:ac:5f:ed:c3:1d:
48:a0:81:03:d4:4e:26:f7:cb:2c:17:61:f8:3b:ff:23:bc:20:
bc:d0:ce:2c:76:d0:97:fc:6a:1e:68:a7:4a:cf:d1:39:9e:7f:
ec:ee:94:be:1e:c6:e7:45:10:9c:fd:6b:b0:4f:da:95:7c:b8:
ff:57:94:a6:41:8f:fe:15:dd:76:fe:89:99:70:b9:9d:fe:1b:
37:36:f8:55:6a:50:94:6b:72:bf:ae:d4:1e:6a:a4:fa:33:11:
df:41:a7:1c:86:fc:87:22:1b:cb:5b:cc:4b:3d:7f:f0:d4:8a:
c5:0f:f8:54:f8:55:55:f2:20:54:bf:70:19:5f:ed:89:73:5a:
8c:6d:3e:d4:18:3a:91:c7:ab:15:ff:e8:ae:a4:eb:cb:2e:0d:
7f:6c:02:a0:71:f1:cf:a4:71:4b:bb:60:3c:2c:37:c4:ac:36:
5b:33:63:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKzcNUxzBgRZcnEU08soKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTJhOGE2ZGY5OTc4ZGU3MjI3MDAzYjFmZDNmMGUyYjll
NTljYzcwHhcNMjUwNjE0MDIwMTAwWhcNMjUwNjE1MDIwMTAwWjAzMTEwLwYDVQQD
EyhmNmNhMDEyY2MwYzRjNDBhYWU4NzhmMTc0NjhjZTQwMmEyZjU4NmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCz1PgsnTvJcIvDwMihf8/ZH29bN
3oCVC3WkMsowvL8MCgncQL+6NQXkwNTIyeVFA7m/ct9kYq+KJhaEnrl5FZqi0l35
x0tbkjWLQNI1dQBPTMP8AcWKSwbQhXrvli08vn7pNL3pkSTFkwOBrX2GQ89dOz/P
9zTxYOAq9SxsT98G3oQ3xwmUCBDkhFaNnrLslJacufH8vWMqtjNeF2Ify3D7DEVP
ntwyesZCyhu36ut3KXdLLQgOKVSPt0wIFB0/YCSl2xlhIPr1n9AjUlqHjUfBO0Pp
r5WcNwnqJKgAmZtICITlnx7pEgg2YPmzbqlBcimFJdrJ3+zTMFcZb68nRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbKASzAxMQKroePF0aM5AKi9YbPMB8GA1UdIwQY
MBaAFDUSqKbfmXjecicAOx/T8OK55ZzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWIt
NzQ3ZTc1ZTU1NDYxLzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWItNzQ3ZTc1ZTU1NDYx
LzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyTyobni
ixEewIRCMgcTFocY3u0IdMPrdRy5ID7KphWeH+2MMjUPedt69vH8nskXucPExnX4
FyV3me96qnFzDC3ll3037fv79/2W7D0WAieeCP4566xf7cMdSKCBA9ROJvfLLBdh
+Dv/I7wgvNDOLHbQl/xqHminSs/ROZ5/7O6Uvh7G50UQnP1rsE/alXy4/1eUpkGP
/hXddv6JmXC5nf4bNzb4VWpQlGtyv67UHmqk+jMR30GnHIb8hyIby1vMSz1/8NSK
xQ/4VPhVVfIgVL9wGV/tiXNajG0+1Bg6kcerFf/orqTryy4Nf2wCoHHxz6RxS7tg
PCw3xKw2WzNjHw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:07 2025 by rpki-client