Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: L5gcLZXk3LAugSB9uwG0O1dNeSWlMkXany5xTXvSKX4=
Subject key identifier: B9:CA:6B:DB:5B:BD:B4:33:78:02:03:B2:52:38:A4:8A:D8:00:41:02
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 0198737426358B998E5ADA61CF5A0AD7D609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 1349
Signing time: Mon 04 Aug 2025 05:00:48 +0000
Manifest this update: Mon 04 Aug 2025 05:00:48 +0000
Manifest next update: Tue 05 Aug 2025 05:00:48 +0000
Files and hashes: 1: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (hash: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=)
2: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: YjTtTM35l6PMP57T6qXa8x2tbqCwwSzrfDrYoMQgrFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:26:35:8b:99:8e:5a:da:61:cf:5a:0a:d7:d6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Aug 4 05:00:48 2025 GMT
Not After : Aug 5 05:00:48 2025 GMT
Subject: CN=b9ca6bdb5bbdb433780203b25238a48ad8004102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:bc:a0:e2:5e:e6:41:53:fc:23:b1:51:78:
5f:1b:6f:46:79:76:e7:35:ff:67:9f:c0:ce:83:7f:
51:d1:5c:c3:f1:9a:6e:a7:05:43:7d:9b:17:e0:6e:
c2:13:1f:49:16:04:9a:f3:e1:a0:46:d3:d2:3c:f3:
22:e9:59:13:e0:2c:79:9c:6d:87:32:57:00:6c:ac:
99:17:f8:b6:a0:1d:4b:b9:39:e9:00:e9:84:37:a8:
70:c3:5e:cd:94:37:ce:13:14:4a:27:39:11:9d:e9:
64:7d:b1:93:02:ac:7e:dd:3c:b8:1f:c9:fc:d9:23:
e2:36:6e:15:ec:5c:db:3f:bc:4d:57:55:dd:25:4e:
e6:90:ae:17:36:91:a9:8a:c7:66:c5:b9:9d:4a:c4:
7a:66:93:f7:38:c0:01:07:a0:da:0a:07:cd:da:16:
9e:f8:3f:bf:8d:92:f8:01:15:bc:a8:87:b1:80:e7:
33:6a:09:53:13:28:2f:2e:7c:f1:da:10:b9:1f:31:
5d:de:11:8c:69:81:a4:90:bc:21:02:8b:9e:18:15:
97:1b:52:7d:87:32:57:ab:80:c9:80:d4:08:6b:a1:
b9:27:8b:97:34:bb:11:8a:d3:c1:2e:cd:53:fd:a2:
0a:84:c2:cb:f4:12:bf:db:39:99:8b:cb:7f:4c:67:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CA:6B:DB:5B:BD:B4:33:78:02:03:B2:52:38:A4:8A:D8:00:41:02
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d1:17:62:b6:59:b9:e6:9e:e7:50:b3:6c:58:e0:ab:3b:32:
80:1d:b2:65:00:7d:0e:bf:1f:89:8a:16:87:25:0e:83:58:81:
a2:4a:d9:7b:d8:68:59:3c:0b:8d:28:67:d1:d0:81:7f:30:25:
96:4b:dc:11:73:ef:48:01:2e:33:c2:27:7e:f1:57:c1:68:91:
20:ee:60:ea:34:59:5a:3c:e7:87:ea:2f:18:30:04:72:b1:64:
3f:2a:a4:61:4f:ad:44:13:1a:e0:b0:b3:8c:36:24:ff:02:cd:
df:4f:17:15:f0:56:92:52:58:a9:ca:b9:a9:14:f9:54:9a:db:
0e:8c:53:6e:00:ef:7b:5f:74:62:ab:b5:3d:9c:76:86:9f:6d:
a8:bd:f8:5b:08:20:b6:3f:d3:46:d8:58:f8:93:b1:57:eb:e3:
c1:5a:f8:95:80:62:ce:ec:c8:cd:ca:45:f1:05:af:73:55:e9:
cb:c0:52:9b:90:f3:d3:12:e3:d1:d9:80:c7:ad:a9:27:02:b5:
3c:aa:df:bd:68:60:f1:1b:83:40:1d:1c:b1:4a:4f:6c:a2:38:
84:fa:30:6b:d5:12:7d:ca:b2:e0:d1:1a:03:b4:5d:2e:f3:b8:
5e:90:71:09:e2:44:d0:a0:6e:ae:21:34:fb:03:78:c7:bb:43:
c3:63:04:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:17 2025 by rpki-client