Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: j3FXWODUWDjITeHmRvbn2NEAnOXl0W5caFPqAYVaPxs=
Subject key identifier: 95:D1:DF:40:20:5B:FA:99:38:FA:56:40:6D:15:31:3B:05:01:2D:A8
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 0197B77C3380F0E7ACFCFA759F619FE0D5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:00:59 +0000
Manifest this update: Sat 28 Jun 2025 17:00:59 +0000
Manifest next update: Sun 29 Jun 2025 17:00:59 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: jjJHv8KV7HKYq66dSdzkO2bQ754X56ED1+1Tb+yOKZQ=)
2: gPqZz-ULbWxNpVtGrAcbURafLCM.roa (hash: bhtp8MkxjHqH+uI5CHLafEhg4ALYqQQHfi1+8hAlks8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:33:80:f0:e7:ac:fc:fa:75:9f:61:9f:e0:d5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Jun 28 17:00:59 2025 GMT
Not After : Jun 29 17:00:59 2025 GMT
Subject: CN=95d1df40205bfa9938fa56406d15313b05012da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:3d:1a:6f:3b:ea:27:b9:5c:6f:ba:f6:51:
2f:bf:37:e5:1c:ef:d7:bd:33:1f:71:0d:1d:10:2e:
ce:49:ee:32:8e:61:43:dd:14:f3:ff:46:87:a9:a1:
ff:90:e6:c4:d4:65:6a:16:04:75:28:31:c6:e9:50:
32:14:ee:9b:aa:6f:a5:e9:b2:52:7f:4f:59:76:d8:
d3:2f:0e:a8:3d:52:29:3f:ac:4f:28:8d:ae:e7:98:
97:a8:e7:95:86:fd:36:74:1b:86:4b:4c:ac:d4:be:
ce:0d:55:35:65:41:21:7b:0d:e0:52:82:3e:dd:47:
17:3c:ed:88:a8:3c:e0:35:87:80:39:81:3b:f1:89:
25:d3:8e:e3:5e:5b:87:b9:ef:88:65:85:94:e2:73:
d0:37:bd:93:74:59:fb:9e:78:ae:bc:a5:6e:9a:ff:
a2:cf:c9:6a:8f:e3:91:cc:dc:bb:50:15:ef:dd:2d:
61:83:dd:94:54:6f:05:7e:f5:df:71:28:85:19:c7:
37:08:8d:10:c8:c6:25:cd:c7:94:c9:d3:03:dc:9d:
0d:ca:5a:fa:bd:35:96:14:f6:b5:a9:9d:5d:5d:61:
ad:78:f4:e0:a2:25:a0:3c:de:2d:a8:7c:a4:5b:35:
d5:d2:b0:79:a0:05:d2:ac:dc:69:55:c3:5f:15:16:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D1:DF:40:20:5B:FA:99:38:FA:56:40:6D:15:31:3B:05:01:2D:A8
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3c:97:b5:e2:db:1f:90:0d:d0:5c:9e:94:1e:f1:5b:0b:52:
7f:fa:3c:db:df:a8:3f:37:58:e0:75:ed:cc:fa:9d:01:d4:f4:
5a:fc:e8:85:59:7d:d8:c7:7d:32:ff:23:b1:9c:a1:ac:7c:94:
f9:00:81:16:f5:19:79:7b:21:23:ef:52:c3:b4:3b:99:35:ef:
02:3a:be:bb:2e:26:79:26:78:d5:d2:da:f7:9a:af:51:dd:f9:
96:ae:62:4f:c9:62:3a:21:46:d2:64:d6:98:eb:21:ea:58:bb:
8d:e2:f8:04:e3:c7:3f:3a:4e:b7:46:0e:ac:03:aa:12:9d:29:
e1:9b:77:7c:9d:de:54:4b:06:8e:9b:02:1c:40:cb:f1:87:67:
7d:b4:43:30:21:0b:75:14:0b:2a:8d:dd:db:86:f0:73:57:e4:
59:7d:9e:7f:40:56:52:53:33:94:e6:e4:a3:43:e2:64:07:37:
12:86:f3:23:94:27:2f:b5:fe:3e:4a:d0:98:e9:d3:00:5b:91:
1b:a3:4c:d5:84:d8:50:56:09:80:bd:7d:b7:0c:a1:cf:8a:90:
d5:90:60:31:a2:d3:25:ba:f9:29:57:89:a2:4c:c9:ab:33:64:
f5:08:49:04:2d:af:c8:3a:2f:02:f3:b5:4a:6c:a4:d0:4a:71:
a8:eb:ab:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fDOA8Oes/Pp1n2Gf4NXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTJhOGE2ZGY5OTc4ZGU3MjI3MDAzYjFmZDNmMGUyYjll
NTljYzcwHhcNMjUwNjI4MTcwMDU5WhcNMjUwNjI5MTcwMDU5WjAzMTEwLwYDVQQD
Eyg5NWQxZGY0MDIwNWJmYTk5MzhmYTU2NDA2ZDE1MzEzYjA1MDEyZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplo9Gm876ie5XG+69lEvvzflHO/X
vTMfcQ0dEC7OSe4yjmFD3RTz/0aHqaH/kObE1GVqFgR1KDHG6VAyFO6bqm+l6bJS
f09ZdtjTLw6oPVIpP6xPKI2u55iXqOeVhv02dBuGS0ys1L7ODVU1ZUEhew3gUoI+
3UcXPO2IqDzgNYeAOYE78Ykl047jXluHue+IZYWU4nPQN72TdFn7nniuvKVumv+i
z8lqj+ORzNy7UBXv3S1hg92UVG8FfvXfcSiFGcc3CI0QyMYlzceUydMD3J0Nylr6
vTWWFPa1qZ1dXWGtePTgoiWgPN4tqHykWzXV0rB5oAXSrNxpVcNfFRYgowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXR30AgW/qZOPpWQG0VMTsFAS2oMB8GA1UdIwQY
MBaAFDUSqKbfmXjecicAOx/T8OK55ZzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWIt
NzQ3ZTc1ZTU1NDYxLzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWItNzQ3ZTc1ZTU1NDYx
LzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTyXteLb
H5AN0FyelB7xWwtSf/o829+oPzdY4HXtzPqdAdT0WvzohVl92Md9Mv8jsZyhrHyU
+QCBFvUZeXshI+9Sw7Q7mTXvAjq+uy4meSZ41dLa95qvUd35lq5iT8liOiFG0mTW
mOsh6li7jeL4BOPHPzpOt0YOrAOqEp0p4Zt3fJ3eVEsGjpsCHEDL8YdnfbRDMCEL
dRQLKo3d24bwc1fkWX2ef0BWUlMzlObko0PiZAc3EobzI5QnL7X+PkrQmOnTAFuR
G6NM1YTYUFYJgL19twyhz4qQ1ZBgMaLTJbr5KVeJokzJqzNk9QhJBC2vyDovAvO1
Smyk0EpxqOuruQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:08 2025 by rpki-client