Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: gnSmO7fIhYHAsvrSYj+fBo1DAV48QxHrJAXhOaW0g7I=
Subject key identifier: A1:69:9C:66:0B:2F:D6:70:B2:73:E6:2A:65:FF:1D:5D:12:26:57:CE
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 0199FF59655349A24665938915F30B65612E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 1416
Signing time: Mon 20 Oct 2025 02:01:12 +0000
Manifest this update: Mon 20 Oct 2025 02:01:12 +0000
Manifest next update: Tue 21 Oct 2025 02:01:12 +0000
Files and hashes: 1: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (hash: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=)
2: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: COAStSM70GR0TLWbVs+XfVEqyGjVCAwCF0//VTQiMPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:65:53:49:a2:46:65:93:89:15:f3:0b:65:61:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Oct 20 02:01:12 2025 GMT
Not After : Oct 21 02:01:12 2025 GMT
Subject: CN=a1699c660b2fd670b273e62a65ff1d5d122657ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:e3:53:af:47:15:44:68:0b:cf:3e:e8:fa:
b8:56:c0:84:57:78:8c:73:0d:a9:44:6b:9b:fa:2f:
7b:98:5b:53:40:04:1e:60:3a:4d:1c:ab:9e:74:42:
a4:30:8a:17:83:68:7a:20:5e:10:7e:af:2c:aa:0c:
16:af:fc:ce:09:9e:d2:c4:6f:ad:ce:50:c6:39:9a:
4c:60:1a:ae:b3:a4:b1:8e:71:9e:9f:01:ce:0c:04:
b7:89:53:73:6d:03:04:ce:0d:cb:05:c4:83:37:c8:
2a:9d:ef:73:e6:ba:88:71:69:9c:33:80:2e:31:72:
a0:33:93:af:68:ed:ec:ad:fb:c9:c1:08:b4:ce:15:
23:3a:52:13:48:57:dd:bb:3b:5a:1c:ac:eb:29:1a:
1a:f6:76:0c:3a:e8:2e:94:88:ca:96:40:c2:74:26:
6e:be:77:2a:f3:73:c0:3f:7e:36:7b:3a:d4:1f:9e:
09:17:5a:9c:72:42:ff:d4:1b:dc:1c:62:fa:fb:40:
1f:70:09:88:30:78:51:33:71:6f:b2:5e:4b:99:4c:
a7:98:9a:f2:95:9a:be:7b:a5:68:7d:d0:57:07:e5:
80:90:0a:53:e3:cb:9c:d8:29:ab:ec:dd:f4:e1:17:
06:4f:ba:ca:e5:e4:df:54:1f:39:2c:c8:1f:e7:1d:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:69:9C:66:0B:2F:D6:70:B2:73:E6:2A:65:FF:1D:5D:12:26:57:CE
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:65:dd:ea:1d:3d:d5:d7:76:19:08:dc:a5:10:1c:92:e4:4f:
52:9e:ef:81:fe:eb:93:de:40:a7:6d:13:5d:a3:23:11:4f:44:
3d:57:05:c4:8d:b7:31:92:ac:c1:16:ec:2e:c8:50:49:f4:fd:
93:72:f4:44:43:22:1d:33:1e:5b:fe:a7:a7:fb:d9:f3:93:37:
27:ae:7f:1a:f0:2f:45:5d:fa:45:41:a7:17:05:2a:73:d0:07:
33:39:82:3a:94:40:68:a7:94:b6:85:84:13:ca:dc:87:05:f2:
80:1f:db:80:9d:fb:28:e2:81:e8:9d:68:31:a9:fa:a9:4b:d2:
c9:da:ce:30:de:36:75:1c:02:ef:f0:27:7a:55:df:72:e1:8a:
0e:ae:3d:1d:eb:3c:e4:d6:55:15:3c:5b:0d:fd:af:18:fd:e9:
c1:b1:e2:8d:84:8a:d8:38:3f:b9:28:a8:f3:1d:89:ec:2e:34:
cd:69:f7:58:ca:77:fb:46:11:53:20:50:5f:c1:19:3a:0b:23:
52:8a:52:67:25:47:ee:15:b3:f1:5c:fc:6d:a6:68:09:96:c0:
b2:1d:f0:85:fa:d2:1d:79:e3:16:76:ac:3a:08:26:ff:76:bc:
03:2e:bb:a3:97:8f:1c:46:9c:8a:51:a3:07:f9:a1:cd:ce:47:
54:9c:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:15 2025 by rpki-client