Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: M+ylV1vORJKimzMwABStMNDQSDaGG43gAl0PapKawTo=
Subject key identifier: 81:7B:A2:22:C3:49:2A:B2:07:CC:C0:2C:A1:1D:6B:BD:3A:AD:B0:AB
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 0198D54E3249195729510D35B2A026AEF177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 05:02:08 +0000
Manifest this update: Sat 23 Aug 2025 05:02:08 +0000
Manifest next update: Sun 24 Aug 2025 05:02:08 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: owsaSyrW+JLnA9eBD/asg/cOBFk8ur6lQnMWC4D7q/k=)
2: gPqZz-ULbWxNpVtGrAcbURafLCM.roa (hash: bhtp8MkxjHqH+uI5CHLafEhg4ALYqQQHfi1+8hAlks8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:32:49:19:57:29:51:0d:35:b2:a0:26:ae:f1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Aug 23 05:02:08 2025 GMT
Not After : Aug 24 05:02:08 2025 GMT
Subject: CN=817ba222c3492ab207ccc02ca11d6bbd3aadb0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:d8:87:88:41:03:8b:0c:74:ff:ad:8b:6b:
0f:73:28:24:ba:48:ff:53:7f:18:08:84:c3:e6:93:
ed:20:b8:e6:42:6f:09:33:be:44:25:39:45:b9:f2:
5d:4c:ae:fd:12:c9:b4:f9:7b:bb:37:a3:20:24:12:
0e:58:8f:44:ea:d0:d3:5e:90:b5:93:ca:d6:20:a1:
dd:f2:1e:9c:a6:1a:74:51:97:2c:b0:dd:6d:e1:73:
dc:38:a2:0d:6e:57:64:42:90:79:e1:9b:7d:aa:d2:
11:07:06:02:bf:58:82:2c:88:43:c6:6c:90:42:97:
13:46:a5:75:af:2e:1c:c8:22:ad:a8:04:2f:03:66:
7a:62:59:a5:11:b2:82:45:22:60:dd:4b:a2:93:63:
ee:ed:91:62:d2:fe:35:d2:a0:5b:c0:94:f3:6a:32:
e6:f9:18:54:a7:91:36:69:27:68:a8:ad:6b:df:52:
c8:8a:ed:5e:49:1c:e0:03:4a:e1:cb:9e:7c:28:71:
e8:41:15:51:06:ac:8d:ec:99:f1:4e:c5:79:d0:38:
ed:0a:fc:95:87:96:29:47:9c:59:3b:4c:c0:d3:78:
74:73:0a:d1:ee:a5:83:5d:2e:94:e4:6b:2d:fb:a5:
57:fb:b6:10:1f:4a:49:cb:7b:fc:56:f1:e8:d7:3e:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7B:A2:22:C3:49:2A:B2:07:CC:C0:2C:A1:1D:6B:BD:3A:AD:B0:AB
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f2:91:23:0c:22:73:a9:97:d6:e8:10:ff:63:bb:40:6e:b6:
78:88:d7:7b:5a:59:c5:8d:ef:31:44:5f:8d:aa:78:05:20:46:
83:00:c4:31:5d:d5:66:3f:37:3e:59:93:38:f6:ae:81:fc:29:
bb:67:c3:22:2c:2b:9a:92:98:fd:67:10:ab:9a:27:3a:4c:7d:
15:b9:c7:f0:1b:52:6a:ff:dc:56:b8:4c:a1:25:5f:bc:af:cd:
87:4c:a8:75:ad:f1:ba:d2:95:6b:43:e6:31:79:cc:6e:95:cb:
8c:09:35:36:1d:64:fa:f8:a1:0f:ef:ea:f5:71:c5:5d:33:e2:
50:07:21:a6:d2:6e:54:68:b7:cd:f0:fa:5b:3b:e4:5f:3a:4b:
66:3e:c8:e6:8e:6a:16:f0:12:cf:2d:88:4c:69:39:77:c6:3e:
66:02:95:3c:40:10:18:57:d2:7e:25:18:92:12:9e:36:48:5c:
4c:0f:1d:cf:65:b6:0c:d0:73:b7:84:b3:a3:05:f6:32:bd:26:
c6:13:56:fa:2a:44:e7:09:4d:98:f7:42:23:6b:c3:5f:85:3d:
61:fa:ee:d0:a3:be:30:c9:87:21:62:e0:45:1f:92:7f:7f:ee:
4e:c5:ad:23:39:2a:0d:bc:48:4a:bf:1e:37:19:49:d2:a1:d4:
af:ed:af:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:57 2025 by rpki-client