Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: 1zz5cENqyXZl/28m4bhWgSkH26EYXWBTr/pBKws56h8=
Subject key identifier: 22:7A:F4:D8:05:F3:54:91:EC:C6:D9:B1:C9:2D:8D:38:1A:98:AE:0B
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 0196CBE180008C836E1EB30E0C528DA61FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 153F
Signing time: Tue 13 May 2025 23:01:15 +0000
Manifest this update: Tue 13 May 2025 23:01:15 +0000
Manifest next update: Wed 14 May 2025 23:01:15 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: eBMsN+wXqLJSr7ivPjMnVG6M7sbZLQWZ3NtVSqoeBN4=)
2: gPqZz-ULbWxNpVtGrAcbURafLCM.roa (hash: bhtp8MkxjHqH+uI5CHLafEhg4ALYqQQHfi1+8hAlks8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:80:00:8c:83:6e:1e:b3:0e:0c:52:8d:a6:1f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: May 13 23:01:15 2025 GMT
Not After : May 14 23:01:15 2025 GMT
Subject: CN=227af4d805f35491ecc6d9b1c92d8d381a98ae0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0a:f1:90:b7:7d:51:92:3a:ec:9b:58:56:14:
41:91:03:f4:5a:c8:d5:1e:2c:a8:1b:67:f2:21:2e:
95:96:6e:1e:80:dd:68:35:5d:a8:02:4b:82:a4:67:
d7:2b:3d:d6:6f:0e:cf:e0:60:93:78:d8:2b:fa:a4:
c3:27:57:86:85:67:e4:76:f1:e6:bc:7f:c5:4d:2b:
f9:32:62:47:fe:63:dc:2d:a1:a6:b6:95:3e:21:d0:
39:f5:a9:7b:3a:63:61:dc:ea:c9:40:68:2f:1c:49:
e7:a6:08:5a:25:2a:b3:7e:a5:67:0b:cb:fa:51:16:
b3:0d:b3:6f:3a:a8:3a:b6:c7:85:09:93:ad:38:c3:
b2:43:71:0a:8e:da:a5:bb:a3:be:21:2e:ad:22:9d:
42:6c:d9:59:ea:fb:4e:d7:8f:9b:16:65:d8:6f:af:
db:87:4b:8b:2e:c0:1c:c5:47:bd:0f:b5:48:d7:77:
25:33:a9:2b:0b:4f:42:cf:79:dc:9d:ff:cf:a9:e1:
fa:9d:77:d3:59:49:ac:3c:e0:28:54:a8:9a:e4:ce:
b3:01:53:cb:1f:fa:4b:1d:e2:dc:72:f2:7d:bd:51:
45:7c:c9:99:d7:8d:25:85:21:72:39:bf:3d:df:3e:
6d:98:d9:e9:3d:f0:6b:11:aa:4f:f4:3e:5a:0b:44:
cb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7A:F4:D8:05:F3:54:91:EC:C6:D9:B1:C9:2D:8D:38:1A:98:AE:0B
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:77:52:a7:ee:dd:c8:60:1c:69:0c:6b:31:d6:f1:92:15:f9:
4b:7f:ac:93:e5:2c:6b:7c:0f:09:9e:6b:bb:b1:28:15:e3:6a:
0c:85:65:2f:2f:c6:cb:34:e9:0d:02:5d:95:ab:4f:7b:e1:5c:
fc:1c:fb:9b:a4:f7:8e:49:32:c5:77:ad:5d:42:23:ff:93:39:
e6:32:d6:79:84:8c:ce:58:cd:f8:bb:f7:96:f9:5d:98:8a:0c:
73:71:f9:a4:08:ee:10:a2:3d:c2:18:f9:f0:5f:9f:d8:6f:fa:
d1:d2:37:75:2a:f6:20:d1:1f:a6:b1:bb:48:7d:eb:2f:ae:04:
42:ca:7c:17:fe:77:0b:9b:28:23:21:d3:b1:54:13:60:46:5f:
75:b8:fc:53:a9:96:fe:6f:f4:c1:b6:87:d5:9a:ad:98:08:38:
c8:b0:10:3c:05:11:eb:8e:3c:5d:4f:4a:5a:39:96:9a:78:65:
14:4b:f7:b6:ee:95:6c:ee:90:fe:d3:02:09:67:df:f1:22:52:
61:ea:ae:49:a9:e0:1e:58:2c:69:a1:8e:9f:4a:8d:ce:19:0d:
f4:42:f6:46:2d:b8:ea:35:a5:34:e1:1f:c0:df:6e:3d:43:a3:
a1:48:fa:2f:ae:1e:36:9d:9d:cf:35:64:1f:13:a5:e5:cb:49:
cd:fd:55:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:13:16 2025 by rpki-client