Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: Hhv6rM1aXBZss9MLLflt3doL/Rv4Pns0lpmYKrrLjiY=
Subject key identifier: 89:5B:08:30:BE:8E:05:AD:01:4A:44:64:16:2B:9C:D4:18:B8:CC:20
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 0199FD6ADBBBBDC11D6961FD2862E61C021E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 1415
Signing time: Sun 19 Oct 2025 17:01:02 +0000
Manifest this update: Sun 19 Oct 2025 17:01:02 +0000
Manifest next update: Mon 20 Oct 2025 17:01:02 +0000
Files and hashes: 1: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (hash: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=)
2: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: 8CYQaQDoOfGJ+cZmXuk53H+nhEYRg7cHl1J61HVj8GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:db:bb:bd:c1:1d:69:61:fd:28:62:e6:1c:02:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Oct 19 17:01:02 2025 GMT
Not After : Oct 20 17:01:02 2025 GMT
Subject: CN=895b0830be8e05ad014a4464162b9cd418b8cc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:70:66:b0:d4:e6:3b:8b:5b:79:48:58:a2:
64:a2:7d:bd:2c:d1:ca:a2:f6:7a:e9:d3:f8:07:b3:
53:bf:68:a0:cd:de:21:90:10:10:dc:6f:07:96:59:
f7:6b:f9:24:33:d3:a8:28:f6:5b:e1:52:68:da:eb:
c9:6b:bd:b8:07:02:63:01:6d:f3:0b:01:d6:5a:85:
ad:8b:cc:42:ef:85:3a:61:7d:1b:7a:71:39:e2:6b:
60:3e:f9:2a:7b:e1:25:20:c8:ef:88:88:c9:e0:1e:
b4:94:2e:bc:fa:e4:bc:26:62:d9:3d:33:92:f5:41:
94:db:e6:ce:7d:dc:fb:10:88:7b:a6:d8:5c:c2:d0:
e9:2e:78:70:0c:2b:ea:da:78:77:34:75:b7:c6:c1:
56:4c:0c:42:65:f3:2b:ee:14:d4:a7:34:50:6a:c5:
28:1f:35:c7:41:fb:5c:a0:8c:6b:cd:ea:f0:cd:f6:
74:76:5f:a9:aa:bb:15:da:14:3f:44:37:3a:a1:03:
da:d4:40:4a:85:dd:a6:2f:46:2b:ef:1b:fb:5d:1e:
4b:06:b6:68:34:d2:35:1c:12:93:02:3c:a1:60:dc:
e4:03:5a:56:64:ef:46:e9:39:50:0b:fb:8b:a1:be:
81:3a:b0:93:95:75:e2:5d:50:2b:4d:64:ac:a2:7f:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5B:08:30:BE:8E:05:AD:01:4A:44:64:16:2B:9C:D4:18:B8:CC:20
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:dc:80:73:be:d2:8c:63:3c:c1:4e:30:46:09:a1:c1:2f:53:
c9:74:4e:98:b1:3d:2c:05:c9:98:99:12:ad:b6:51:24:de:c5:
11:90:90:40:93:a7:46:1c:75:8e:5a:95:fe:90:53:c0:81:62:
d8:b9:c2:09:96:c8:c1:45:21:a1:9f:49:27:a4:5c:ad:3e:29:
06:30:0d:a7:70:ba:74:27:03:88:b9:3a:d0:aa:f9:6d:d6:db:
c5:ff:29:4d:ea:d3:2c:83:8a:a9:b4:89:1d:46:a8:34:ef:2a:
02:e4:68:cd:2e:10:54:06:0c:68:90:19:3a:8e:ea:85:2e:22:
36:20:98:a9:ea:c5:85:0f:df:a0:a6:42:0c:3f:66:e2:2d:9d:
f8:60:3e:a6:dc:bf:86:30:d5:10:81:bd:50:ba:f6:08:17:71:
65:f3:47:83:6f:35:27:ef:80:06:74:2e:ce:69:aa:15:42:55:
8c:c7:f4:c8:05:e6:e6:d4:c5:7a:43:2d:cc:4e:22:05:2d:4a:
e2:c5:79:df:44:fb:dd:e1:fe:01:43:a4:8c:f2:b4:73:a5:9a:
10:08:50:1b:89:7a:0f:0d:bd:c5:a8:74:dc:60:1a:8b:15:b4:
da:1a:4f:26:34:97:1d:19:19:b5:39:1c:06:64:74:10:58:78:
f2:78:e5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:17:36 2025 by rpki-client