Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: lqxoC7Ho7cylqxT+EixGltwyK9HH1urN37WqN5R6O1M=
Subject key identifier: 0F:39:67:22:B0:48:E7:1E:B7:BC:29:A9:1B:B3:DD:DC:30:06:CC:8E
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 01964556A0B506D3F66F5692CD49703CB61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 1228
Signing time: Thu 17 Apr 2025 20:00:27 +0000
Manifest this update: Thu 17 Apr 2025 20:00:27 +0000
Manifest next update: Fri 18 Apr 2025 20:00:27 +0000
Files and hashes: 1: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (hash: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=)
2: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: jxOPX6gnNWZ0KIzSr43+fIWGVpPeKjPvqcjoHzpxA/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:a0:b5:06:d3:f6:6f:56:92:cd:49:70:3c:b6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Apr 17 20:00:27 2025 GMT
Not After : Apr 18 20:00:27 2025 GMT
Subject: CN=0f396722b048e71eb7bc29a91bb3dddc3006cc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:ca:1a:df:10:20:a1:ad:ad:e4:23:b3:6d:
1d:be:ee:7e:09:26:33:07:4d:f9:19:7a:17:c4:72:
f7:35:38:7c:4e:81:0f:92:88:4a:43:54:6c:21:2e:
07:16:f7:59:5e:00:e1:79:a5:94:11:46:a1:c3:ad:
88:54:e7:ad:e9:5f:58:14:e6:f7:16:f0:64:49:82:
10:55:27:ca:3e:a4:cb:7a:c5:9e:35:eb:a6:77:1f:
e3:f1:97:5b:13:3d:5f:04:1b:00:5d:b9:66:dc:1f:
e4:c9:cf:53:d5:ec:ea:55:73:b0:57:76:4d:da:17:
f0:c9:3b:ec:79:d3:20:64:d7:df:65:cb:f5:de:4c:
fc:2e:bb:15:06:ce:fd:94:57:7c:b9:93:8a:3d:cf:
be:1b:41:45:40:fd:07:97:32:0a:eb:35:99:89:15:
a7:ec:5d:6f:0b:e7:23:c1:85:31:55:1f:ab:8a:71:
18:a4:2f:54:5a:f7:f4:e3:0e:93:4d:89:41:7e:19:
c5:57:8f:dd:31:ea:7d:66:cc:e9:b2:6f:e2:74:79:
f3:79:c7:0d:6c:20:d9:fe:35:89:96:b5:d7:ba:05:
96:c0:ae:97:41:49:96:1b:3b:73:19:05:c5:2c:4a:
58:90:8b:e0:86:fd:2a:ae:24:07:d8:3a:f5:7c:79:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:39:67:22:B0:48:E7:1E:B7:BC:29:A9:1B:B3:DD:DC:30:06:CC:8E
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:65:d3:ad:f7:67:4e:c4:c2:8d:5b:a1:aa:e5:fc:d0:7c:8a:
07:ee:82:11:ec:75:47:a8:f8:e6:c1:02:c6:fa:11:3a:b3:f6:
30:d8:30:b3:35:5a:af:be:51:91:9e:77:ff:fd:83:0b:bd:f5:
6d:06:57:14:62:50:9e:42:87:dc:dc:ca:22:4f:9e:60:9a:f1:
00:5d:30:b6:b3:a3:72:94:3c:58:c6:f6:8a:b9:12:d0:83:b4:
70:d4:e5:4e:7d:2e:4b:5f:52:00:3a:ec:9b:ba:99:79:56:ea:
42:b2:48:0a:df:46:f1:cb:e3:ac:a1:f2:b5:29:53:24:88:59:
03:fa:9d:d4:06:5c:8b:6f:90:d1:aa:77:96:a7:ca:30:e7:df:
31:b5:e8:6f:98:ed:4c:46:57:80:76:2d:20:8d:1a:10:a6:e6:
e5:4d:98:7f:1d:ae:46:1b:f7:f3:97:45:4c:20:30:e3:78:38:
ab:0e:be:04:b7:e4:3f:2f:9e:e0:27:24:2a:d5:04:0d:3a:93:
56:a0:ff:f4:1d:a2:61:c5:a6:d3:61:36:fc:d5:04:93:01:a3:
e1:25:d8:87:f7:37:89:c1:24:7a:cc:bf:46:43:f9:19:21:45:
0a:e7:c7:2f:7d:97:f0:de:ee:a6:a8:25:f8:5d:ef:4a:ae:ee:
6f:ac:db:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFVqC1BtP2b1aSzUlwPLYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGY4YmY4ZDAxMmEyNWNjY2VlMjEwNjgwM2Q3MDY0MzIw
ZWQwZjAwHhcNMjUwNDE3MjAwMDI3WhcNMjUwNDE4MjAwMDI3WjAzMTEwLwYDVQQD
EygwZjM5NjcyMmIwNDhlNzFlYjdiYzI5YTkxYmIzZGRkYzMwMDZjYzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRHKGt8QIKGtreQjs20dvu5+CSYz
B035GXoXxHL3NTh8ToEPkohKQ1RsIS4HFvdZXgDheaWUEUahw62IVOet6V9YFOb3
FvBkSYIQVSfKPqTLesWeNeumdx/j8ZdbEz1fBBsAXblm3B/kyc9T1ezqVXOwV3ZN
2hfwyTvsedMgZNffZcv13kz8LrsVBs79lFd8uZOKPc++G0FFQP0HlzIK6zWZiRWn
7F1vC+cjwYUxVR+rinEYpC9UWvf04w6TTYlBfhnFV4/dMep9Zszpsm/idHnzeccN
bCDZ/jWJlrXXugWWwK6XQUmWGztzGQXFLEpYkIvghv0qriQH2Dr1fHmwSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA85ZyKwSOcet7wpqRuz3dwwBsyOMB8GA1UdIwQY
MBaAFCCPi/jQEqJczO4hBoA9cGQyDtDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEt
ODA1NWVjMTBmZjBhLzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEtODA1NWVjMTBmZjBh
LzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs2XTrfdn
TsTCjVuhquX80HyKB+6CEex1R6j45sECxvoROrP2MNgwszVar75RkZ53//2DC731
bQZXFGJQnkKH3NzKIk+eYJrxAF0wtrOjcpQ8WMb2irkS0IO0cNTlTn0uS19SADrs
m7qZeVbqQrJICt9G8cvjrKHytSlTJIhZA/qd1AZci2+Q0ap3lqfKMOffMbXob5jt
TEZXgHYtII0aEKbm5U2Yfx2uRhv385dFTCAw43g4qw6+BLfkPy+e4CckKtUEDTqT
VqD/9B2iYcWm02E2/NUEkwGj4SXYh/c3icEkesy/RkP5GSFFCufHL32X8N7upqgl
+F3vSq7ub6zbiQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:31 2025 by rpki-client