Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: RfajmJPmg3vlytLQvdgHHglNmkXs3OSl9a11/6MUpLY=
Subject key identifier: 51:1D:31:A6:1A:17:42:A0:FF:BB:BF:22:D9:74:42:3E:D7:BD:64:07
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 0197B6328AA201189CBB370FFDD740FCD7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 12E7
Signing time: Sat 28 Jun 2025 11:00:54 +0000
Manifest this update: Sat 28 Jun 2025 11:00:54 +0000
Manifest next update: Sun 29 Jun 2025 11:00:54 +0000
Files and hashes: 1: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (hash: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=)
2: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: PGiaRvUQ8h5FYIPt8oBSsmOVib5hfn774vikeKxZAN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:8a:a2:01:18:9c:bb:37:0f:fd:d7:40:fc:d7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Jun 28 11:00:54 2025 GMT
Not After : Jun 29 11:00:54 2025 GMT
Subject: CN=511d31a61a1742a0ffbbbf22d974423ed7bd6407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:56:bc:41:4e:6e:6c:d1:06:49:30:cb:31:
67:57:03:f2:9a:0f:75:de:22:3a:17:d6:00:68:15:
50:d1:d5:e4:be:b4:50:54:ef:69:af:47:21:d5:cf:
e4:91:a4:10:a5:fe:a6:d2:51:1b:26:9b:ad:21:9c:
89:40:74:4b:bd:ae:c7:9d:23:91:49:ae:82:bb:aa:
c8:a3:bb:2c:b8:a9:ae:45:19:2d:40:3d:37:d3:24:
35:e6:7a:33:ca:45:44:82:c8:8d:bf:06:3d:42:27:
7b:f0:43:2c:6a:4d:a9:be:6d:08:73:06:d1:c5:49:
22:3c:93:18:37:3d:72:86:fd:4d:f5:87:b2:fa:da:
8d:0f:ca:40:79:39:81:2f:d6:80:2e:04:a4:88:40:
70:a1:c6:04:f4:b4:20:61:77:29:f3:5e:67:89:10:
39:c9:a1:0e:a4:bc:ad:03:80:53:61:23:a6:d7:24:
db:c0:b9:f1:14:fe:c6:58:64:91:e7:22:0a:d7:b8:
f2:52:af:78:60:ce:8c:a6:f5:76:40:b3:fb:14:91:
e4:24:0f:ee:78:02:dc:98:cc:24:56:cf:99:a7:10:
a5:05:c2:92:a8:87:57:85:43:8b:60:90:f6:2c:09:
c8:65:f0:3e:75:73:76:43:d1:65:43:eb:e4:e5:a5:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1D:31:A6:1A:17:42:A0:FF:BB:BF:22:D9:74:42:3E:D7:BD:64:07
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ce:fc:75:26:98:fd:2c:d3:90:b1:ae:2c:d8:14:63:cc:f7:
de:34:40:56:3f:e3:3a:61:bf:cf:49:b1:0e:d6:5a:91:21:fb:
a2:47:f7:4e:3c:fe:70:6b:fa:13:b5:ef:9c:bf:4d:3e:46:a2:
da:9d:eb:be:4b:dc:3a:1e:ba:46:c6:5c:b6:69:e7:cf:7a:72:
32:d2:80:fd:ac:78:4a:f9:57:ee:6b:97:8b:b8:cf:c3:ff:c6:
e5:e8:c9:27:c1:0d:e6:83:2d:51:9a:ce:92:ed:0c:8e:c6:b9:
27:52:4d:d7:d2:ef:ad:af:bf:d1:fc:17:49:1d:7d:79:fb:06:
43:46:94:dc:bb:16:c3:3c:1c:f3:34:04:b4:a7:95:ed:13:15:
f3:5e:96:3f:ab:d2:bb:1e:e6:61:c3:7c:18:e9:0a:92:1d:36:
11:b1:55:ed:60:9f:9c:2d:7a:10:12:e5:31:f2:4b:17:91:9a:
53:33:13:b9:f1:ef:08:68:80:0a:7b:43:47:d2:19:b2:b2:28:
1d:07:b5:1d:55:4b:27:9e:6a:52:69:0f:8a:13:9c:b2:64:04:
97:d6:3a:ad:de:b1:83:63:bd:ac:ee:e2:93:01:36:e2:58:f6:
fb:ca:e9:8b:b7:d2:f3:4f:9d:cf:32:e7:4f:84:01:14:59:db:
ed:b6:8d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:02:19 2025 by rpki-client