Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: uC9omYpe/AfywIyUk9wrLFkXeVs4GvY7EwegkIiYvts=
Subject key identifier: 56:14:90:FA:EF:4C:48:7F:D2:F1:E5:10:DE:9B:0B:C2:41:97:58:B8
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 0198D40484BF98619DC7976706A0A1040280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 137B
Signing time: Fri 22 Aug 2025 23:02:02 +0000
Manifest this update: Fri 22 Aug 2025 23:02:02 +0000
Manifest next update: Sat 23 Aug 2025 23:02:02 +0000
Files and hashes: 1: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (hash: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=)
2: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: lM+1Jy0Jzm+DkOF8gCCx8ly/JYNYRxU3AFvan2ESsUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:84:bf:98:61:9d:c7:97:67:06:a0:a1:04:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Aug 22 23:02:02 2025 GMT
Not After : Aug 23 23:02:02 2025 GMT
Subject: CN=561490faef4c487fd2f1e510de9b0bc2419758b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:aa:b3:8a:6a:9e:be:9a:da:99:38:02:43:
c8:51:0c:77:bb:90:cd:88:5f:06:56:f0:f4:d0:d0:
83:1e:15:53:12:61:16:3f:11:76:ab:dc:a3:97:48:
2f:8f:4d:8b:ae:be:b3:e2:b2:1a:28:bc:b7:23:39:
12:85:97:12:08:04:1b:39:db:84:8f:0b:ca:37:0f:
ca:df:ea:00:ad:e4:6e:10:02:ec:99:ea:b9:f0:82:
a4:71:8d:cc:3c:bb:86:ef:3e:bd:5b:9f:d6:5f:76:
3e:0e:f5:a3:2d:d8:70:f5:c9:18:c6:15:84:17:dd:
a6:6f:cc:63:77:37:db:90:e5:c1:8e:18:b7:b1:10:
fe:21:c1:46:19:73:6c:24:9f:f0:80:2f:4a:8d:4c:
fb:d8:26:8c:86:cb:5c:80:d9:dc:34:c6:65:50:1c:
dc:af:f6:57:d0:c4:14:21:de:c5:d9:3a:1b:1a:30:
70:fc:79:00:7f:a3:0a:1b:e9:ba:41:63:4a:1d:e9:
ab:54:b3:f6:67:59:f6:ff:bc:b7:8c:65:de:67:2a:
fb:3e:36:19:c3:57:e2:a1:bf:f2:a7:43:15:6d:a0:
54:6c:4c:f9:a8:50:54:e8:de:8d:ad:77:81:ce:e8:
19:26:52:8f:3b:75:58:76:1c:64:36:cd:1b:ca:67:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:14:90:FA:EF:4C:48:7F:D2:F1:E5:10:DE:9B:0B:C2:41:97:58:B8
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:07:32:4e:1b:a8:03:32:99:1c:a9:ef:eb:d6:0d:f4:3c:de:
4a:5b:31:c2:a9:0c:fc:79:1d:ef:82:cb:09:14:c9:d3:32:20:
51:51:86:7b:78:83:43:de:44:7d:96:7a:a4:dc:6a:b2:8b:1f:
d1:c2:49:0f:7c:da:a7:f9:7e:a6:40:cc:c5:61:2e:9e:f7:ef:
23:1d:cf:a4:94:05:dd:64:20:cf:cf:af:90:e0:ca:46:6c:e2:
1e:62:8c:e1:11:57:e8:46:1b:65:33:a2:9c:b7:b7:06:61:c9:
5d:d2:36:55:e5:38:17:6e:12:f3:72:49:d1:34:7e:dd:7b:b2:
4e:29:9b:c1:f8:c1:41:0f:f3:49:ec:24:8d:7c:c3:2a:9a:f6:
f1:29:75:e4:7d:ec:85:28:54:4e:c6:d8:a8:9e:84:97:20:44:
c0:e0:f3:d0:22:87:f3:f1:67:00:f9:43:60:9b:75:1c:6f:12:
5c:27:77:bd:07:7a:14:1b:17:99:bc:a8:cb:1b:df:2a:51:cf:
4f:f1:f5:f4:2f:b1:23:ef:24:5b:14:68:e4:cc:69:d8:6d:78:
12:c2:4a:f6:5b:78:08:dc:8a:4f:2f:2f:32:23:d5:0c:8f:fe:
e8:1a:9a:ec:10:2c:14:65:4b:2a:80:f2:ef:9f:32:ab:4e:0b:
31:04:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:20 2025 by rpki-client