Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json)
Hash identifier: LNF5QwV9Jtolu1vrTLSIZTEuY3eiur2wJjp8brxDOcQ=
Subject key identifier: 9E:D7:DC:36:BD:60:54:A7:AB:35:61:23:10:A6:41:44:52:B3:3A:00
Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Certificate serial: 019849D2D49E938AB531C6A76CB5BA0D4431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
Manifest number: 0A
Signing time: Sun 27 Jul 2025 03:00:10 +0000
Manifest this update: Sun 27 Jul 2025 03:00:10 +0000
Manifest next update: Mon 28 Jul 2025 03:00:10 +0000
Files and hashes: 1: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: ioRijq5K23cf9/UcHqVfy0k98cBLUTMFXlIszv5zWjI=)
2: uiqUmBv1k_uKYh_cj-a4QIhQlX4.roa (hash: HVtBzgdEAqEsdJNBkXbZl0/YnvdMRPK6u/IdD/XaEXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:d4:9e:93:8a:b5:31:c6:a7:6c:b5:ba:0d:44:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Validity
Not Before: Jul 27 03:00:10 2025 GMT
Not After : Jul 28 03:00:10 2025 GMT
Subject: CN=9ed7dc36bd6054a7ab35612310a6414452b33a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:73:66:5d:91:24:c2:83:9b:b4:b3:d8:1e:
1c:97:20:76:b6:c5:a5:30:af:23:8a:ae:51:0a:ca:
47:2a:6d:13:51:ca:b5:cd:ad:2c:c3:3a:36:2e:e7:
78:57:e7:10:cc:54:ce:e8:bd:b9:e9:e1:88:df:08:
a1:02:b3:3f:49:cf:aa:80:c4:15:2b:ad:4f:97:17:
99:20:b2:da:9b:c6:f7:8d:f4:64:6d:e2:ba:d3:17:
cd:04:bb:c9:66:ab:5c:7b:b7:a7:db:89:7c:15:52:
a8:f9:6f:a2:d0:04:9c:1b:4e:60:82:a3:8a:b2:40:
ff:f0:ca:69:6d:5c:db:fc:98:05:9f:c6:98:d8:ed:
6c:43:ac:08:05:6d:2f:58:09:69:e4:db:cb:70:f8:
09:8a:38:14:35:85:76:23:23:0d:24:c6:21:b3:3e:
e8:c0:83:a6:4d:b9:56:51:e9:c8:37:10:8b:e3:8e:
5c:f0:db:94:33:b5:ee:3d:38:cf:d9:22:fc:a7:1e:
c3:be:94:bb:cc:9d:ad:a9:c8:ff:bf:57:ba:a0:2f:
f7:ba:9b:b3:0f:e8:93:ad:1f:60:94:01:45:a7:3a:
d9:7a:fc:cc:c3:ee:e8:e7:9a:fc:ac:66:98:81:f5:
23:57:36:f1:db:09:92:5f:45:33:3e:09:8f:38:15:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D7:DC:36:BD:60:54:A7:AB:35:61:23:10:A6:41:44:52:B3:3A:00
X509v3 Authority Key Identifier:
keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a3:36:40:54:ae:21:13:f8:a0:93:7b:0a:76:2e:82:01:5a:
6f:27:d1:1b:13:b4:89:61:b2:a1:da:4d:41:d9:fd:78:c1:ca:
e4:fe:9a:16:a4:e3:51:ae:4e:71:3b:90:53:bf:88:56:d5:b2:
a7:4f:ae:2a:bb:da:67:66:3a:93:2b:7b:ac:14:5f:a2:c2:2b:
92:62:c3:d5:78:ea:47:b2:ad:a7:9f:2a:4f:e4:05:86:0b:20:
90:cb:75:f2:e0:00:78:00:ec:d6:4b:7c:a5:3d:21:ea:dd:ae:
d4:c3:12:dc:84:d0:c1:f8:a1:70:be:00:90:d9:b8:f7:05:6b:
a6:3f:e5:4a:31:47:64:c6:80:74:67:3f:c7:1b:91:40:ba:da:
3f:72:d7:9b:1f:68:55:ec:56:16:a2:a1:93:a3:65:f9:ce:ec:
fc:e7:b0:a5:d8:b1:ac:c4:d2:52:80:5b:da:b4:e7:a5:df:46:
24:3e:19:a8:3b:ad:0e:f2:86:02:2b:3e:67:cf:b1:f9:cf:62:
8e:c0:c6:cd:dd:c1:28:0b:60:0d:91:ba:74:66:95:95:76:31:
7b:da:d3:9e:5a:3a:bd:62:e1:01:cb:48:de:a0:f3:e7:ae:bb:
a3:6e:77:8f:56:ae:a2:70:72:75:c7:da:3d:32:b4:2b:84:b8:
e7:bc:8f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:19:25 2025 by rpki-client