Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: +9ON6wtPOIfiKM16KfgcU+9zD4u7gvGjGO8X1RwXQjE=
Subject key identifier: 29:51:49:B8:B3:8F:0D:73:FD:EE:AB:5B:AD:53:8D:C7:00:D2:D4:23
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 019A2B1EAD45301A0D84A4DA41F11453CDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 16FE
Signing time: Tue 28 Oct 2025 14:00:21 +0000
Manifest this update: Tue 28 Oct 2025 14:00:21 +0000
Manifest next update: Wed 29 Oct 2025 14:00:21 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: syJ5woJt5Ac4UJ0yej8fQE/v9ryx9ouYLm9IFwBvc3U=)
2: gPqZz-ULbWxNpVtGrAcbURafLCM.roa (hash: bhtp8MkxjHqH+uI5CHLafEhg4ALYqQQHfi1+8hAlks8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:ad:45:30:1a:0d:84:a4:da:41:f1:14:53:cd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Oct 28 14:00:21 2025 GMT
Not After : Oct 29 14:00:21 2025 GMT
Subject: CN=295149b8b38f0d73fdeeab5bad538dc700d2d423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:8f:96:bb:1a:d3:34:7f:36:aa:ea:8e:5a:
3a:9b:b1:ad:7d:45:e9:50:df:43:3a:f2:ac:11:2a:
27:9d:da:e3:70:a4:b3:cc:1e:cd:1d:c9:01:ab:ce:
dd:fb:64:cd:87:9c:73:79:5a:9f:41:e8:00:2f:8d:
cb:5c:98:e2:8d:cc:56:06:eb:f3:37:64:bf:1e:e1:
e6:10:a3:21:4c:2c:3e:f0:7b:08:b4:cb:74:f9:a3:
93:e2:69:b6:35:a4:3f:50:cb:37:ae:d3:d1:a1:29:
db:80:cb:3c:f2:d9:7a:cb:6f:bb:17:5d:6a:e7:f6:
23:9f:16:dd:c1:55:8d:87:05:dd:14:a3:61:c9:8d:
0a:7c:97:98:c0:3e:0b:60:b3:0a:bc:8e:82:f4:e1:
4a:5e:83:ce:20:65:dc:b7:00:5e:69:06:f8:b6:6f:
f8:be:7d:03:05:c4:81:fd:b8:de:07:93:f3:06:3c:
86:60:f0:1c:ab:b5:2d:84:c8:2d:22:42:9f:d1:5e:
b0:15:7d:54:b2:26:59:28:c6:fd:fe:76:11:00:4e:
0e:b7:84:0b:72:2c:fe:ec:f0:c7:f3:6d:f3:69:c8:
1c:d9:5c:2e:0e:92:1a:8b:c7:f9:3b:35:a4:f4:19:
dc:a9:b2:5b:af:b6:b6:62:62:22:1a:f8:3a:7a:2f:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:51:49:B8:B3:8F:0D:73:FD:EE:AB:5B:AD:53:8D:C7:00:D2:D4:23
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d4:b9:b1:7c:6a:64:e7:e0:49:56:8d:11:30:73:bb:f6:11:
df:dd:a1:c3:e2:2a:55:8e:16:81:01:a3:a5:be:47:22:63:08:
f7:60:4a:83:c1:aa:f9:2c:07:8d:9e:0c:13:2c:7d:e6:64:55:
89:be:2b:86:ae:f9:a8:b5:b6:61:60:4d:0b:60:c4:27:0d:4a:
06:88:e2:38:aa:4a:0d:6f:ff:77:62:19:2e:9d:8f:e1:a1:16:
ee:c9:99:87:54:f4:25:11:7b:63:85:b0:41:b3:0d:a1:d9:8e:
bb:f1:e2:40:ac:41:87:7e:37:76:fc:4c:4d:97:b7:eb:9e:05:
51:97:90:96:a0:cc:c1:b7:5f:af:f1:55:02:9c:e0:a0:34:6d:
65:76:08:79:80:2a:58:e8:b6:b9:52:3a:0f:f5:63:aa:7d:4f:
bc:0e:99:ae:11:e7:8c:64:6d:3e:31:a3:40:df:1c:c4:de:63:
f7:8e:46:78:bf:bb:f5:7b:a4:41:f6:24:27:56:60:4a:b7:e3:
cd:e9:a7:13:e6:49:5b:10:fa:41:fa:7f:1f:8a:32:23:4f:de:
f5:ff:39:a4:4f:6a:ae:db:f4:75:ac:73:8a:2d:62:9e:e5:18:
d2:15:c5:b0:d4:fe:a8:32:d7:36:95:62:dc:d2:fb:b0:91:1f:
7a:70:04:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZorHq1FMBoNhKTaQfEUU83uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTJhOGE2ZGY5OTc4ZGU3MjI3MDAzYjFmZDNmMGUyYjll
NTljYzcwHhcNMjUxMDI4MTQwMDIxWhcNMjUxMDI5MTQwMDIxWjAzMTEwLwYDVQQD
EygyOTUxNDliOGIzOGYwZDczZmRlZWFiNWJhZDUzOGRjNzAwZDJkNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbSPlrsa0zR/Nqrqjlo6m7GtfUXp
UN9DOvKsESonndrjcKSzzB7NHckBq87d+2TNh5xzeVqfQegAL43LXJjijcxWBuvz
N2S/HuHmEKMhTCw+8HsItMt0+aOT4mm2NaQ/UMs3rtPRoSnbgMs88tl6y2+7F11q
5/YjnxbdwVWNhwXdFKNhyY0KfJeYwD4LYLMKvI6C9OFKXoPOIGXctwBeaQb4tm/4
vn0DBcSB/bjeB5PzBjyGYPAcq7UthMgtIkKf0V6wFX1UsiZZKMb9/nYRAE4Ot4QL
ciz+7PDH823zacgc2VwuDpIai8f5OzWk9BncqbJbr7a2YmIiGvg6ei+qfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClRSbizjw1z/e6rW61TjccA0tQjMB8GA1UdIwQY
MBaAFDUSqKbfmXjecicAOx/T8OK55ZzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWIt
NzQ3ZTc1ZTU1NDYxLzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWItNzQ3ZTc1ZTU1NDYx
LzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdS5sXxq
ZOfgSVaNETBzu/YR392hw+IqVY4WgQGjpb5HImMI92BKg8Gq+SwHjZ4MEyx95mRV
ib4rhq75qLW2YWBNC2DEJw1KBojiOKpKDW//d2IZLp2P4aEW7smZh1T0JRF7Y4Ww
QbMNodmOu/HiQKxBh343dvxMTZe3654FUZeQlqDMwbdfr/FVApzgoDRtZXYIeYAq
WOi2uVI6D/Vjqn1PvA6ZrhHnjGRtPjGjQN8cxN5j945GeL+79XukQfYkJ1ZgSrfj
zemnE+ZJWxD6Qfp/H4oyI0/e9f85pE9qrtv0daxzii1inuUY0hXFsNT+qDLXNpVi
3NL7sJEfenAEbg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 21:26:24 2025 by rpki-client