Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: UR9W7FWFH1LBVsExjhHYm9zqJE1bwdy9I85oAVIrXEw=
Subject key identifier: 64:04:E8:C0:EF:9E:32:6C:D0:68:15:6C:D6:04:E8:59:BC:69:9F:CF
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 019A4E866C66C7DD7834EDD2A55170B64D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 143F
Signing time: Tue 04 Nov 2025 11:00:23 +0000
Manifest this update: Tue 04 Nov 2025 11:00:23 +0000
Manifest next update: Wed 05 Nov 2025 11:00:23 +0000
Files and hashes: 1: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (hash: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=)
2: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: ZiM3HbrUYItEu/byZ6XHNZH77ORPXMfLgWRx/dAoHoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:6c:66:c7:dd:78:34:ed:d2:a5:51:70:b6:4d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Nov 4 11:00:23 2025 GMT
Not After : Nov 5 11:00:23 2025 GMT
Subject: CN=6404e8c0ef9e326cd068156cd604e859bc699fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:df:9f:ac:b0:a5:95:aa:32:29:90:42:a6:
94:99:d6:a8:1d:7c:be:51:11:d7:8e:7f:44:d7:d6:
23:ef:49:aa:f7:1c:75:41:06:35:51:c8:e6:69:d9:
ff:6a:2b:96:86:e5:4c:61:f8:d5:32:2a:3e:5c:58:
de:14:c3:d3:aa:c4:9c:07:23:df:e4:50:7f:02:f5:
bf:38:e9:85:81:d2:82:8b:26:4a:c5:f6:12:12:af:
e7:04:58:e4:0a:3e:78:df:d0:e8:bd:1c:21:06:35:
dd:d8:bb:d0:3b:d8:d2:99:61:33:37:24:d0:14:14:
95:c2:68:ff:18:cf:44:d2:0f:df:7e:7a:38:2b:fc:
54:7d:47:7b:a9:02:38:a7:90:df:de:09:8a:7f:a7:
6a:4a:0d:4e:b0:b8:4e:04:a1:a6:b8:da:23:e7:cf:
d6:7d:92:78:74:5c:b7:39:9e:a7:ac:2f:cb:d9:b9:
e9:88:62:06:31:03:1a:54:a0:7e:1d:82:df:8e:ba:
60:af:5f:ec:59:48:6a:09:81:0b:79:da:60:93:5f:
e2:f0:59:c3:0a:f3:66:03:58:6b:b7:09:f3:82:26:
e4:2a:d5:fd:86:e8:d9:35:21:2e:0e:87:7a:1b:b3:
3b:7a:d4:36:de:72:a6:e0:b0:5f:ae:bf:56:c2:cb:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:04:E8:C0:EF:9E:32:6C:D0:68:15:6C:D6:04:E8:59:BC:69:9F:CF
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:98:1c:d4:9e:fc:38:ef:49:2b:ee:98:56:87:e1:a4:80:ed:
7e:95:84:54:5e:2b:93:b5:25:59:c9:90:03:27:c5:0f:1b:60:
b7:3c:ad:4b:46:ef:5e:35:7c:ad:78:50:1a:23:6b:2a:b1:2e:
30:97:06:c1:15:63:c0:bf:eb:c5:aa:ad:38:75:03:80:2f:c6:
56:73:9a:57:b4:b6:d5:fa:ac:7b:8f:45:a1:5e:af:dc:9c:8d:
b8:b2:7a:65:f7:d8:a6:b0:d3:2b:fe:e9:9b:6a:7a:e9:77:3c:
68:e6:6c:95:47:59:78:69:ce:08:9a:61:bf:69:0b:88:6f:9b:
5c:db:8f:db:f0:bf:e6:78:23:3f:09:8d:70:58:cb:f0:dd:20:
a5:f4:6f:d0:d0:be:13:69:52:69:0b:fd:b9:6e:dd:9f:bf:50:
5d:e5:85:4a:8f:fb:6b:fb:27:6f:4e:df:1d:18:1a:3f:55:87:
ab:3e:2e:48:4b:ca:37:58:5d:42:fc:f3:d0:75:93:45:b4:4e:
53:b0:13:c5:e1:3c:bf:c9:e3:09:69:3e:66:6e:20:2b:a5:6a:
fd:87:09:c0:5f:65:5a:ca:b8:0c:f4:c9:7c:b1:55:72:15:9c:
6b:1c:a4:8e:61:3b:d3:a7:36:ae:8b:82:cc:3b:5c:92:df:e6:
89:d2:ef:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:52 2025 by rpki-client