Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json)
Hash identifier: E+CLGRIULVGN+/hTeckfyO4eOKOP7ZmJJrJ6G60apPE=
Subject key identifier: F6:D5:36:8F:C7:6C:02:0B:0F:5C:7E:C9:FD:23:6D:15:57:FF:1C:36
Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Certificate serial: 019A24E5EB8BAA654E283DAE5BE084F680E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
Manifest number: 0100
Signing time: Mon 27 Oct 2025 09:00:39 +0000
Manifest this update: Mon 27 Oct 2025 09:00:39 +0000
Manifest next update: Tue 28 Oct 2025 09:00:39 +0000
Files and hashes: 1: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: 3vbrfdfDEUPtbqR1a/FGYGq2UkC2RQqQKTpUcFgz0Cs=)
2: uiqUmBv1k_uKYh_cj-a4QIhQlX4.roa (hash: HVtBzgdEAqEsdJNBkXbZl0/YnvdMRPK6u/IdD/XaEXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:eb:8b:aa:65:4e:28:3d:ae:5b:e0:84:f6:80:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Validity
Not Before: Oct 27 09:00:39 2025 GMT
Not After : Oct 28 09:00:39 2025 GMT
Subject: CN=f6d5368fc76c020b0f5c7ec9fd236d1557ff1c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:16:f2:0b:3d:0b:1d:3a:23:46:f5:89:f3:81:
df:a8:e0:a5:a1:10:9c:2e:ea:fc:9d:41:b5:c0:9c:
8b:06:4f:d6:12:d6:06:86:74:38:de:60:af:7a:54:
6e:d1:46:9c:52:ac:f4:e8:dc:13:0b:7a:85:c5:87:
1f:91:9a:b3:77:d9:7b:0a:76:4a:43:c0:b8:cd:89:
d1:9c:2f:2d:ba:f9:9c:95:59:01:89:95:b3:08:dc:
e9:47:b8:79:f1:86:b4:49:cc:2c:eb:b3:32:ea:e8:
db:56:a9:7a:d4:8f:e8:ab:c0:05:3b:0a:6a:b3:e2:
e5:51:47:de:81:0a:d6:84:ed:40:17:ae:a7:2f:9d:
ae:25:1a:61:30:8c:12:b6:1a:5b:93:3c:b4:81:94:
f3:8b:ca:f8:29:0f:16:9c:29:20:16:e8:7a:f5:0a:
2c:01:cb:c8:7d:97:3e:a2:74:ed:60:76:aa:82:77:
5e:d6:04:e4:12:eb:8c:df:ca:c0:e1:ad:59:9e:e7:
cf:f1:ae:21:5b:86:58:0c:3d:ac:ba:a0:c2:1f:03:
70:29:e3:2b:61:ab:f4:58:76:16:5a:ca:2c:ea:e1:
96:14:4e:06:70:26:86:7b:6e:99:84:b8:0a:ec:df:
70:88:ad:a3:58:fd:be:b2:19:90:52:f6:91:ae:ab:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D5:36:8F:C7:6C:02:0B:0F:5C:7E:C9:FD:23:6D:15:57:FF:1C:36
X509v3 Authority Key Identifier:
keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:55:86:5b:d4:24:de:6d:9a:83:d9:67:14:cb:30:96:48:d4:
d4:91:75:4d:31:d4:a9:bb:1b:c1:fa:7c:20:17:e4:97:eb:57:
bf:9d:d4:8f:de:1c:3d:f5:ab:ab:11:88:df:aa:92:80:13:6d:
d0:0b:4e:e1:e8:9c:a5:78:59:3a:3b:63:69:7e:ff:bb:64:6c:
8d:36:13:3a:2c:a6:72:64:7b:b1:76:97:0e:75:c5:c5:48:4a:
5c:e7:0a:a7:9c:c5:bb:e7:8d:ec:ab:67:58:4c:2a:c9:57:4d:
df:f9:58:be:6f:92:35:b1:32:f6:62:68:cb:96:83:b3:f8:e2:
e8:d7:6d:29:c8:d1:84:07:a9:10:13:33:a5:ed:42:85:27:e7:
1e:f9:c8:fc:91:b0:8a:05:c1:c8:d0:1b:10:57:89:12:c9:ec:
10:a7:3b:fe:33:fa:c3:63:0d:fa:2f:9b:cc:35:fb:96:48:a9:
13:8f:24:8d:2c:34:38:16:79:07:2c:68:b7:68:dc:96:d5:d6:
f7:82:cc:de:73:c4:e6:e3:7f:ec:2d:45:46:03:73:cc:ca:2c:
31:10:ac:3a:ab:d9:8e:b5:73:63:b2:f5:45:8a:37:4e:76:43:
ff:bf:30:79:bd:24:a7:d4:88:54:28:44:f5:f2:f5:da:fe:11:
93:82:d8:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5euLqmVOKD2uW+CE9oDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjE1NGNlMTc5OGI5YWM1MzBmMjA3ZjJkYWIwNmEzYWQz
YTI5NjYwHhcNMjUxMDI3MDkwMDM5WhcNMjUxMDI4MDkwMDM5WjAzMTEwLwYDVQQD
EyhmNmQ1MzY4ZmM3NmMwMjBiMGY1YzdlYzlmZDIzNmQxNTU3ZmYxYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BbyCz0LHTojRvWJ84HfqOCloRCc
Lur8nUG1wJyLBk/WEtYGhnQ43mCvelRu0UacUqz06NwTC3qFxYcfkZqzd9l7CnZK
Q8C4zYnRnC8tuvmclVkBiZWzCNzpR7h58Ya0Scws67My6ujbVql61I/oq8AFOwpq
s+LlUUfegQrWhO1AF66nL52uJRphMIwSthpbkzy0gZTzi8r4KQ8WnCkgFuh69Qos
AcvIfZc+onTtYHaqgnde1gTkEuuM38rA4a1ZnufP8a4hW4ZYDD2suqDCHwNwKeMr
Yav0WHYWWsos6uGWFE4GcCaGe26ZhLgK7N9wiK2jWP2+shmQUvaRrqv02wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbVNo/HbAILD1x+yf0jbRVX/xw2MB8GA1UdIwQY
MBaAFIixVM4XmLmsUw8gfy2rBqOtOilmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUt
YWI0M2MwMDg1NDdmLzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUtYWI0M2MwMDg1NDdm
LzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVWGW9Qk
3m2ag9lnFMswlkjU1JF1TTHUqbsbwfp8IBfkl+tXv53Uj94cPfWrqxGI36qSgBNt
0AtO4eicpXhZOjtjaX7/u2RsjTYTOiymcmR7sXaXDnXFxUhKXOcKp5zFu+eN7Ktn
WEwqyVdN3/lYvm+SNbEy9mJoy5aDs/ji6NdtKcjRhAepEBMzpe1ChSfnHvnI/JGw
igXByNAbEFeJEsnsEKc7/jP6w2MN+i+bzDX7lkipE48kjSw0OBZ5Byxot2jcltXW
94LM3nPE5uN/7C1FRgNzzMosMRCsOqvZjrVzY7L1RYo3TnZD/78web0kp9SIVChE
9fL12v4Rk4LYkA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 13:44:54 2025 by rpki-client