Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: gVOHhaetX+TzGKUilHywvcPHXQPySdLGl/bSONz3VmQ=
Subject key identifier: 75:AC:3C:A0:86:FB:29:44:44:5E:84:8C:80:7D:34:69:38:8B:15:04
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 01984852A1DD641490CAB9C220FF25AD1A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 20:00:31 +0000
Manifest this update: Sat 26 Jul 2025 20:00:31 +0000
Manifest next update: Sun 27 Jul 2025 20:00:31 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: cEQnPnUj9g31sTeePak2KaC7yCWapm3reA2qArzuw8k=)
2: gPqZz-ULbWxNpVtGrAcbURafLCM.roa (hash: bhtp8MkxjHqH+uI5CHLafEhg4ALYqQQHfi1+8hAlks8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:a1:dd:64:14:90:ca:b9:c2:20:ff:25:ad:1a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Jul 26 20:00:31 2025 GMT
Not After : Jul 27 20:00:31 2025 GMT
Subject: CN=75ac3ca086fb2944445e848c807d3469388b1504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:48:8c:92:26:bf:36:d0:52:c9:41:c2:bf:
90:28:46:ba:15:60:bf:b9:0c:e3:e3:ce:fa:e3:ee:
ab:6c:fe:40:f9:68:8d:db:9b:53:75:2b:26:8a:2f:
b4:86:16:3b:7c:7f:39:28:b9:72:a1:9a:ae:69:f8:
c0:70:27:8f:66:75:9f:72:ca:b7:1d:42:75:fe:09:
68:fd:aa:67:5c:23:95:06:71:a2:37:78:88:71:bc:
d4:c8:25:35:ba:6b:46:67:d3:7a:d8:58:f8:09:a1:
04:bf:f2:32:fb:92:a8:12:84:71:9b:db:54:d7:47:
af:38:17:f6:38:90:9e:ce:35:b1:ba:a6:4c:6a:62:
7f:11:61:ff:d4:e8:28:39:1c:08:d3:a4:a4:ba:ea:
98:8c:33:f8:63:a8:81:7a:b1:e9:e4:85:4c:b7:c6:
f8:48:a5:05:df:3a:64:f3:70:a5:48:10:20:12:69:
9f:e5:e7:ef:ac:f8:40:cf:7e:70:11:a0:e4:67:a4:
24:f5:51:e6:fd:b7:d1:43:bd:45:e1:93:a4:6a:fb:
f5:26:f5:20:df:c9:62:ed:13:5b:d2:e1:8b:a1:47:
f1:d0:93:aa:7a:14:62:3b:f7:0e:28:e3:f4:3b:79:
f5:8d:2f:36:af:21:31:47:41:9c:1d:8d:db:46:98:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AC:3C:A0:86:FB:29:44:44:5E:84:8C:80:7D:34:69:38:8B:15:04
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1f:72:26:1a:77:9a:e4:1a:b7:2a:d5:5a:bf:03:dd:6d:93:
f4:9b:69:32:51:db:b7:be:b6:65:70:39:14:9f:0f:da:18:6a:
15:cb:14:1d:2e:9a:f2:67:99:9e:9f:61:e1:ae:38:77:4c:d3:
52:ad:80:05:fd:39:fe:88:40:1d:01:cf:83:6a:f6:8f:aa:00:
02:55:6f:f1:75:54:29:05:e6:79:de:5b:c3:45:37:80:b4:72:
3f:ac:b7:3a:3d:d8:98:0a:20:dc:3c:b0:58:af:8c:60:a4:30:
9c:3b:65:c2:11:93:6b:cd:02:ae:0e:a9:c1:f1:3d:2f:5c:8c:
c9:08:da:fe:72:66:d1:87:a7:4b:7e:8f:e1:3e:35:61:2b:d2:
b3:67:b8:cd:70:61:c7:09:06:9d:9b:a6:aa:64:8c:f6:85:0e:
3e:4c:24:4f:b9:57:72:ed:90:a5:a1:53:94:46:76:5b:1d:df:
a8:c7:be:7e:66:32:96:2f:e1:d5:86:65:cc:73:5d:a3:3c:54:
05:6a:cc:9d:23:6c:ea:cf:54:ae:6b:3f:69:8e:8a:f2:82:af:
d1:7e:3f:af:5e:68:fd:65:01:71:4e:f8:81:4b:90:8c:6a:56:
6c:40:45:9c:e3:24:eb:b6:87:f3:d6:9b:8e:68:74:fb:91:d5:
e2:29:65:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:28:18 2025 by rpki-client