Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: BRS/DCCuoFgiQ6HxY27pKON15b3tdd73hqiedG0DYU0=
Subject key identifier: 24:9D:A7:BF:4B:93:96:83:11:74:87:B4:25:D5:B4:0E:FF:76:56:AA
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 0198398449141783CEDF53EFDC3D21B87169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 132B
Signing time: Wed 23 Jul 2025 23:00:27 +0000
Manifest this update: Wed 23 Jul 2025 23:00:27 +0000
Manifest next update: Thu 24 Jul 2025 23:00:27 +0000
Files and hashes: 1: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (hash: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=)
2: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: B0AEPhJb0deB0g8hPz9EG2Ae15dKrne7j0XhjdjegMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:84:49:14:17:83:ce:df:53:ef:dc:3d:21:b8:71:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Jul 23 23:00:27 2025 GMT
Not After : Jul 24 23:00:27 2025 GMT
Subject: CN=249da7bf4b939683117487b425d5b40eff7656aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:70:cc:b2:36:fa:26:bf:a0:33:6d:c0:86:2f:
96:dd:82:ae:3d:a3:35:e0:a2:07:a5:dc:e2:29:bf:
1d:c1:9e:91:c1:7c:f7:be:02:9b:3d:9f:fd:b6:b0:
56:60:5d:3a:04:ab:26:54:c7:9d:90:b4:3f:05:c7:
e5:27:98:b6:66:c8:a0:ad:b3:87:1a:44:58:85:df:
c5:53:af:39:c9:a5:95:d3:f2:66:0d:2c:f4:5e:cc:
20:89:12:99:9f:a3:a0:37:e7:a7:f3:c5:b4:99:60:
22:42:44:e2:3a:d0:ff:e7:b5:2e:0a:be:de:e1:02:
fa:91:40:73:30:e6:2d:5b:5f:47:c0:2b:cc:16:d1:
cb:a7:83:e4:55:f6:fd:ce:8a:56:a8:42:32:f7:fc:
9c:4d:a8:f1:1d:9f:a2:63:9a:a8:2d:12:03:22:a9:
33:68:07:54:1f:0c:82:a5:c4:87:f1:de:8e:28:e5:
2a:e5:2a:16:8e:3b:3e:d1:c8:65:4f:f4:4e:50:79:
44:a4:60:ec:d2:51:f5:f8:6f:8c:40:f6:76:be:07:
8e:87:04:e8:d7:ab:41:8b:dd:92:aa:ad:70:75:a9:
90:52:0e:53:80:05:ca:03:4e:85:31:3e:fd:b9:a3:
ee:b1:b6:48:44:63:13:1b:31:81:9c:06:bf:aa:19:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9D:A7:BF:4B:93:96:83:11:74:87:B4:25:D5:B4:0E:FF:76:56:AA
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:44:dc:b5:b7:7c:63:bf:9b:9b:f2:1f:e0:2c:b2:4c:65:58:
b3:4d:41:ae:cc:1d:e8:79:19:ca:98:30:5e:a9:0c:93:4a:56:
44:37:e5:5a:4d:06:ed:82:39:62:e8:b5:dd:cb:36:d5:bd:2c:
55:71:69:df:09:d3:89:bc:3c:3b:11:58:68:64:21:0d:bf:5f:
e6:be:5c:f4:ec:8f:a8:ca:f9:f2:67:60:5d:e3:ec:85:07:72:
13:12:1f:1f:ea:32:1e:a1:d5:5b:70:71:d6:4c:f5:22:c3:10:
03:d4:9f:ee:d4:6d:ed:8d:66:5e:a5:41:2f:4a:1d:ce:54:3c:
42:44:50:8e:c2:1a:fc:b6:1b:29:f4:73:82:3f:97:8b:bf:93:
af:24:a1:66:ae:35:4f:eb:ae:15:66:eb:d5:44:a9:38:82:a6:
2b:ad:1f:4d:88:26:68:3a:28:28:39:bf:29:b2:5c:b6:6a:28:
8a:09:e5:ab:26:a2:d0:b9:1a:b2:b7:0d:08:02:98:1c:09:86:
18:51:02:1d:81:98:de:42:03:1c:75:83:f7:d2:72:f8:f8:3e:
a7:67:1c:55:9b:80:c3:e4:e7:d7:66:36:c0:cc:31:f7:e4:8c:
d1:e9:4d:2a:a7:8d:e3:ac:14:84:60:a3:15:42:4c:be:ab:7e:
ac:27:2d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:04:55 2025 by rpki-client