Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: uhCU2uXKoaHr0ZtUzFUrllti3r9eoG4oorh88/xc/Ug=
Subject key identifier: 71:D1:90:FD:12:D7:77:30:F9:C4:6E:AA:0F:F8:78:1C:77:95:BE:0F
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 01983B72AB7F96B5255873F541B8537D3109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 132C
Signing time: Thu 24 Jul 2025 08:00:27 +0000
Manifest this update: Thu 24 Jul 2025 08:00:27 +0000
Manifest next update: Fri 25 Jul 2025 08:00:27 +0000
Files and hashes: 1: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (hash: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=)
2: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: ubmVWgnNuv6DkNSouztr42GMtvjvMEeB1F0uy3TsX7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:72:ab:7f:96:b5:25:58:73:f5:41:b8:53:7d:31:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Jul 24 08:00:27 2025 GMT
Not After : Jul 25 08:00:27 2025 GMT
Subject: CN=71d190fd12d77730f9c46eaa0ff8781c7795be0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:3d:c3:ae:32:34:b0:57:2f:d4:2b:64:e0:
9a:c3:10:2b:fa:1d:cd:c1:03:6a:9d:7f:0f:67:b3:
d0:c6:39:a1:c9:60:c8:5c:fe:92:00:2a:68:89:57:
07:eb:c0:22:1f:27:ec:15:8b:e5:88:1a:0d:23:8d:
7d:bd:9a:5a:df:89:28:45:d3:c7:78:7d:71:9e:1e:
36:8a:28:ba:97:7a:a1:d5:34:7e:2b:15:3a:80:0a:
37:40:e7:d1:b5:28:f3:f2:90:a6:e0:c6:33:ca:80:
1a:5e:9b:f6:aa:2d:64:8c:7f:b6:19:fc:d0:cc:14:
77:67:f1:a7:42:e7:84:5e:22:fc:6a:fd:14:d0:75:
27:db:ad:0d:d9:2f:2d:d1:d1:83:35:5e:60:e2:c6:
e6:f0:ed:5a:2d:f7:c8:08:4d:51:c0:ff:36:99:a2:
a5:2b:90:1e:2f:5a:4d:00:20:48:67:b0:d8:6c:d4:
54:93:2f:f3:39:66:36:8c:cb:bb:93:8e:6d:38:58:
56:17:d1:78:19:f6:15:e3:53:81:3a:ca:af:8d:6f:
a1:1a:92:73:31:2f:49:c9:26:67:ca:cd:5f:1f:7e:
42:6d:bf:ca:f3:f3:80:17:7e:b2:8d:34:7e:29:4b:
9c:22:bc:05:0b:70:6d:88:c0:f4:a1:02:99:8d:2d:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:90:FD:12:D7:77:30:F9:C4:6E:AA:0F:F8:78:1C:77:95:BE:0F
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:44:3e:f3:0b:cf:f8:ea:0c:d8:d2:28:6c:85:65:93:62:d4:
ba:28:48:08:92:35:d5:ef:1a:bb:99:19:00:95:32:38:8f:cb:
ad:7d:dc:66:a0:3c:3a:1a:14:40:eb:9f:76:1d:b6:85:e1:ee:
20:de:b3:d5:2e:4a:35:ab:2e:bc:2a:56:dd:e3:4c:0d:1d:a7:
77:c3:0a:92:82:5e:1e:e7:7a:30:2c:4f:0a:44:d7:c9:89:26:
f4:f0:48:95:fb:0e:c2:75:c9:20:6d:d5:81:cb:f7:d1:c2:ca:
af:67:de:39:b6:6b:3b:d9:89:64:2b:4b:54:27:dc:f3:11:69:
5e:ba:ac:c8:03:e7:4b:9b:66:39:e5:ee:17:fe:1a:0b:66:33:
05:d6:7a:e9:78:57:04:cd:26:8b:24:d2:14:79:ba:51:f4:06:
54:46:23:11:5b:9d:d0:bc:78:e5:a6:72:83:80:c0:5a:a5:34:
0c:0d:c8:8e:ba:0c:f0:9d:31:ff:c5:e7:eb:dc:8e:f0:b0:94:
04:7d:b2:55:b8:75:18:b7:02:ee:e8:07:79:ed:fb:95:27:e1:
ee:90:84:d2:40:d1:22:c0:63:ac:73:fb:71:d2:c9:c3:2b:c2:
0c:b6:44:e7:e6:20:e6:93:1b:3c:48:c9:4b:db:f5:c3:85:07:
44:dd:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:53:57 2025 by rpki-client