Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: U/Ii6Ys/8aZO3hS/fzlHVjW3A1f6Tg8hvugiszL6FjQ=
Subject key identifier: 48:B1:0B:C7:2E:F5:2F:DB:77:80:7C:1D:31:29:53:AA:D0:2E:6C:53
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 0196A3F7A45A9CF45ACA232DFCD821A6FA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 1259
Signing time: Tue 06 May 2025 05:00:37 +0000
Manifest this update: Tue 06 May 2025 05:00:37 +0000
Manifest next update: Wed 07 May 2025 05:00:37 +0000
Files and hashes: 1: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (hash: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=)
2: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: Mozh9WBXy1pwu0ybS1uNj6QHOvs0jwFb2mF0wFFJFbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:f7:a4:5a:9c:f4:5a:ca:23:2d:fc:d8:21:a6:fa:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: May 6 05:00:37 2025 GMT
Not After : May 7 05:00:37 2025 GMT
Subject: CN=48b10bc72ef52fdb77807c1d312953aad02e6c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fb:af:8c:aa:a5:69:94:a9:36:d1:d2:87:ce:
77:fe:ee:37:dc:7e:32:c9:ad:a7:82:e0:3f:b6:5e:
11:2b:23:6a:83:9c:7f:bb:c5:d0:b7:59:af:31:a0:
43:92:8e:89:9c:15:8c:98:3e:06:33:70:b8:04:c4:
13:07:6b:69:18:60:4f:ea:85:74:6a:69:52:26:a2:
33:d2:39:83:13:8c:0f:91:b4:0d:36:c9:07:d9:b8:
dd:5e:37:b5:0c:89:66:31:24:c9:41:21:38:f2:e3:
ee:63:8f:1e:ba:a5:e7:1a:24:38:18:f4:96:c7:00:
68:32:9c:f5:ec:91:75:18:70:3c:a8:08:09:a8:f8:
ba:fd:3a:39:d9:12:92:f7:09:30:22:05:42:83:e4:
7c:6d:ac:99:d2:ce:fb:2c:a6:0f:04:f1:22:a6:8a:
40:98:84:eb:dd:5b:75:df:d3:3e:5b:eb:58:b6:90:
dc:be:11:28:a5:d0:f1:81:53:3b:e2:aa:b0:dd:0c:
e3:f7:15:30:da:91:f0:08:37:eb:03:0b:41:0a:10:
07:fe:79:a1:69:79:ff:dc:7d:fd:b4:27:fc:e0:90:
27:b3:95:ed:52:03:93:dd:02:8a:e7:5b:c0:86:3f:
ee:bd:29:10:d6:b6:a5:ff:f0:df:d1:95:96:11:18:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B1:0B:C7:2E:F5:2F:DB:77:80:7C:1D:31:29:53:AA:D0:2E:6C:53
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:85:ff:7b:0e:69:41:06:42:76:92:95:32:3c:3c:89:f0:83:
8c:a0:43:8f:82:40:a0:b8:5d:56:78:53:11:58:ad:f9:89:75:
da:a6:4c:3d:d6:cd:c5:e5:ec:af:52:fc:18:ff:8f:45:08:24:
a7:24:43:1f:8a:31:51:6a:b2:58:91:d8:1f:1a:95:9f:04:bc:
8d:05:b0:20:d6:5e:f5:91:ba:db:65:7a:1b:da:8c:d2:bb:d6:
f0:06:73:45:fc:b3:89:ce:81:a5:d1:53:2b:81:03:a8:5a:3f:
84:fd:02:9e:37:0b:65:56:1b:ac:f4:84:93:22:4b:30:63:50:
8e:be:5d:4c:88:3f:cf:fe:fd:ba:e8:c6:fb:e8:38:8f:0f:c7:
d9:48:1d:d4:02:44:c8:e2:a1:a2:a6:47:12:2d:c1:e6:d6:39:
52:0b:11:a2:f7:65:80:75:10:1f:8a:43:4b:59:7c:a7:80:69:
a6:c0:0e:65:43:0c:34:e0:0b:4b:77:90:7b:b9:49:cc:8a:e0:
e8:40:b1:b5:c6:37:58:2d:c9:d8:e7:d0:2c:ca:b5:41:4a:2f:
b3:cd:87:ce:fb:fc:b4:b8:3a:9e:9b:b4:b2:dd:56:5d:a6:24:
ff:62:e0:2b:68:35:6a:81:97:e8:30:69:ae:44:c7:4a:d2:1c:
e8:df:c6:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaj96RanPRayiMt/NghpvqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGY4YmY4ZDAxMmEyNWNjY2VlMjEwNjgwM2Q3MDY0MzIw
ZWQwZjAwHhcNMjUwNTA2MDUwMDM3WhcNMjUwNTA3MDUwMDM3WjAzMTEwLwYDVQQD
Eyg0OGIxMGJjNzJlZjUyZmRiNzc4MDdjMWQzMTI5NTNhYWQwMmU2YzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfuvjKqlaZSpNtHSh853/u433H4y
ya2nguA/tl4RKyNqg5x/u8XQt1mvMaBDko6JnBWMmD4GM3C4BMQTB2tpGGBP6oV0
amlSJqIz0jmDE4wPkbQNNskH2bjdXje1DIlmMSTJQSE48uPuY48euqXnGiQ4GPSW
xwBoMpz17JF1GHA8qAgJqPi6/To52RKS9wkwIgVCg+R8bayZ0s77LKYPBPEipopA
mITr3Vt139M+W+tYtpDcvhEopdDxgVM74qqw3Qzj9xUw2pHwCDfrAwtBChAH/nmh
aXn/3H39tCf84JAns5XtUgOT3QKK51vAhj/uvSkQ1ral//Df0ZWWERhwMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEixC8cu9S/bd4B8HTEpU6rQLmxTMB8GA1UdIwQY
MBaAFCCPi/jQEqJczO4hBoA9cGQyDtDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEt
ODA1NWVjMTBmZjBhLzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEtODA1NWVjMTBmZjBh
LzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYX/ew5p
QQZCdpKVMjw8ifCDjKBDj4JAoLhdVnhTEVit+Yl12qZMPdbNxeXsr1L8GP+PRQgk
pyRDH4oxUWqyWJHYHxqVnwS8jQWwINZe9ZG622V6G9qM0rvW8AZzRfyzic6BpdFT
K4EDqFo/hP0CnjcLZVYbrPSEkyJLMGNQjr5dTIg/z/79uujG++g4jw/H2Ugd1AJE
yOKhoqZHEi3B5tY5UgsRovdlgHUQH4pDS1l8p4BppsAOZUMMNOALS3eQe7lJzIrg
6ECxtcY3WC3J2OfQLMq1QUovs82Hzvv8tLg6npu0st1WXaYk/2LgK2g1aoGX6DBp
rkTHStIc6N/GJw==
-----END CERTIFICATE-----
Generated at Tue May 6 08:23:32 2025 by rpki-client