Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: prIAXPLsFg21Ub74s7XPuP1QgnrDabk113MjpGzaiA0=
Subject key identifier: 28:CD:17:47:2A:DE:C5:B8:FC:52:A7:5B:57:6A:96:A2:A5:67:65:7A
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 01964A7D78B9892613FCFE1330FA27CBE108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 14FC
Signing time: Fri 18 Apr 2025 20:00:59 +0000
Manifest this update: Fri 18 Apr 2025 20:00:59 +0000
Manifest next update: Sat 19 Apr 2025 20:00:59 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: ISx1Mjg3LCI3tAT0ATDhHZC18AFLJf5RAMeJpAeFpxs=)
2: gPqZz-ULbWxNpVtGrAcbURafLCM.roa (hash: bhtp8MkxjHqH+uI5CHLafEhg4ALYqQQHfi1+8hAlks8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:78:b9:89:26:13:fc:fe:13:30:fa:27:cb:e1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Apr 18 20:00:59 2025 GMT
Not After : Apr 19 20:00:59 2025 GMT
Subject: CN=28cd17472adec5b8fc52a75b576a96a2a567657a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bd:ea:94:03:6c:3a:84:82:d5:7b:fc:80:9b:
99:62:e4:02:28:20:f3:64:61:38:c9:6a:e1:9a:50:
db:6d:2f:d1:f6:48:ec:70:be:3a:70:7f:0e:f7:05:
02:44:eb:8f:1f:fb:ee:2b:78:c9:93:d1:1e:ea:64:
95:b5:c2:29:5b:a7:25:ea:88:d3:dc:1c:42:0d:ec:
42:7d:f0:5c:c8:45:df:4d:26:d8:96:33:77:36:eb:
57:70:aa:59:0b:9c:a2:ef:a1:08:9b:43:40:9f:69:
73:38:1a:02:f8:b4:58:2e:18:ab:63:1a:d8:e4:c0:
70:d1:11:89:4e:f5:a0:d8:15:f6:e7:e6:e2:1e:e6:
95:d6:75:8b:1e:ce:12:cd:11:60:74:09:2b:4d:d5:
4a:cf:13:15:a5:8d:6f:2f:94:aa:16:71:1d:85:92:
3b:5b:67:a5:e5:1c:e5:c1:bc:0f:ef:05:b0:9b:a0:
9f:1b:c0:1b:37:96:da:66:6f:ba:4e:1d:8f:3b:f4:
4e:79:cc:bf:0d:fc:65:a8:dd:78:88:d2:11:ec:84:
db:16:b0:97:21:57:90:f3:7e:13:e6:6a:8a:a2:a3:
71:45:a5:78:6e:42:a3:8a:7b:f4:6f:df:36:8c:ab:
d7:11:c1:e3:76:1d:32:dd:ef:00:a3:1f:88:78:60:
af:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CD:17:47:2A:DE:C5:B8:FC:52:A7:5B:57:6A:96:A2:A5:67:65:7A
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:05:e6:fe:fc:3d:f8:50:95:ab:58:54:67:28:6e:ce:45:bc:
d0:a3:d8:2e:de:63:f9:08:33:74:f3:08:80:ac:a1:84:9d:7a:
d2:f0:f6:86:d1:9b:57:e5:6d:41:38:01:aa:1a:b5:88:53:32:
b6:b7:ca:29:67:47:0b:e3:98:50:8c:f3:c4:09:46:97:44:34:
a3:d5:2f:1c:1c:c1:a8:05:40:99:77:05:f4:94:64:98:36:d5:
9c:61:b2:2c:0e:cf:40:2a:fc:43:3c:d6:4c:5d:89:f5:21:ca:
67:a8:c4:4e:76:98:4a:5a:0d:f3:70:8a:cf:90:80:a2:16:a8:
da:9f:8e:7c:c9:4a:14:02:32:10:e4:88:3e:a7:59:23:b5:52:
0c:35:3e:70:29:3c:c1:c3:c0:ed:1d:4b:0c:36:6e:1c:70:7d:
d8:96:fd:05:45:da:5d:88:37:69:b8:d2:6c:47:91:b9:7a:8e:
83:4a:8f:32:83:f4:28:a7:e6:f1:0b:41:78:2b:39:2b:2c:cb:
34:91:98:36:10:70:52:23:ca:b5:21:68:46:41:ab:17:59:78:
45:c1:31:3f:35:64:77:76:04:e9:36:03:0d:dc:08:45:f0:e9:
f8:d1:6d:18:9a:87:bb:1f:7b:0f:b9:be:30:f6:ce:57:ec:3c:
46:4d:9a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:31:25 2025 by rpki-client