Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: q6HhfzmnhVLO+Qql6ZA0qDPBpleFYX/lMcSc4U5jDQk=
Subject key identifier: 35:6B:C4:80:4F:D5:5E:75:62:6E:95:92:E5:A1:B4:D1:76:5B:E5:4A
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 01967B69D50BC613ADF09B389936AB5131B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 1244
Signing time: Mon 28 Apr 2025 08:00:55 +0000
Manifest this update: Mon 28 Apr 2025 08:00:55 +0000
Manifest next update: Tue 29 Apr 2025 08:00:55 +0000
Files and hashes: 1: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (hash: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=)
2: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: FEpjhdp6gdWxe87Ogv5X1TqV/MZB4AogAHXkc0O1DKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:d5:0b:c6:13:ad:f0:9b:38:99:36:ab:51:31:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Apr 28 08:00:55 2025 GMT
Not After : Apr 29 08:00:55 2025 GMT
Subject: CN=356bc4804fd55e75626e9592e5a1b4d1765be54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:1f:66:40:31:67:7f:08:e5:6d:98:7f:db:
4e:cf:84:18:ab:83:c6:40:a5:53:73:e9:b1:03:7a:
e5:09:81:0c:74:24:4b:bc:dc:d1:1c:43:0d:84:00:
53:7a:80:7c:12:17:c5:52:17:36:5c:1e:58:81:79:
8d:8f:a1:ce:23:cf:c6:b5:56:5f:d7:b5:5a:d2:54:
02:c4:ec:a3:57:92:14:67:17:2e:ce:10:53:27:ba:
1f:9e:93:ac:75:d6:1b:d2:c3:6c:f4:56:80:f5:35:
66:76:48:ad:b3:03:03:01:83:c4:c8:50:86:8b:c0:
1e:de:c4:fe:96:6d:d9:00:68:28:7c:3e:bd:49:38:
b6:a3:32:13:15:0d:d8:ea:8e:b3:bb:a4:2b:f0:97:
4d:88:7b:94:b0:ce:c5:f4:4f:0e:0d:9e:2f:30:35:
dd:e5:60:7c:5f:ea:a7:5c:22:8a:fa:42:77:73:14:
2b:f6:fe:ae:18:5a:0e:d3:73:98:88:4f:30:3e:09:
e5:68:d5:cf:35:01:d8:d6:33:27:72:a8:f9:0b:e5:
30:62:15:20:d8:f2:b2:66:a6:82:ef:dc:67:f2:58:
85:8f:27:0e:14:47:c5:f0:52:d7:9e:f8:c3:45:73:
3d:8e:e5:e0:13:3d:02:f7:5f:6f:5f:8b:c7:3b:c3:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:C4:80:4F:D5:5E:75:62:6E:95:92:E5:A1:B4:D1:76:5B:E5:4A
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3b:58:f4:bc:31:d2:c0:14:ce:0d:87:c1:4a:de:fe:50:f8:
ab:18:8a:eb:e4:32:90:7d:05:d9:81:ef:80:2e:62:bf:d6:09:
e5:18:06:38:b2:6a:02:03:80:c2:1e:02:07:dd:45:47:29:a3:
e6:87:cc:32:27:35:ec:da:7c:fb:09:c8:02:27:39:9f:50:4a:
4a:6d:b5:39:31:68:c0:b0:a2:61:0a:85:cb:32:78:53:b4:43:
52:63:0e:5d:1d:97:45:fe:f1:54:48:ce:8a:24:e8:5e:72:47:
70:39:6e:40:5f:85:58:a4:35:a2:da:93:f2:91:61:87:16:9e:
1e:1d:aa:ee:2d:99:7f:a2:7f:2f:a8:f3:e3:a1:c0:66:2d:07:
79:be:ed:21:16:c6:aa:59:b9:ae:9d:85:15:0f:e3:26:da:e9:
b6:24:5b:1b:52:37:a6:e0:5e:6a:02:ff:79:76:4e:0c:e3:58:
4d:c4:69:70:8e:77:a9:da:ca:74:e4:92:4c:19:d1:2a:24:ea:
21:ea:08:65:e0:c0:c7:dc:b1:47:89:67:72:db:68:38:d9:67:
37:c8:a6:a1:fc:27:bb:ca:43:3a:0d:40:f5:03:b4:16:70:4b:
40:7f:68:5e:00:58:bb:eb:f0:58:1d:22:1b:47:4f:f7:ce:eb:
b3:22:59:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:34:45 2025 by rpki-client