Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json)
Hash identifier: PXz9ahTG2Efjv5GgI2jHzcHWpRDaiziZxGSdBnlsJHw=
Subject key identifier: 49:8B:70:57:EA:83:24:5E:A8:52:08:86:22:BA:BA:F7:6D:15:4A:7D
Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Certificate serial: 0199356EAE8BA1A32CCFB7EF6D7C62C87FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
Manifest number: 84
Signing time: Wed 10 Sep 2025 21:01:10 +0000
Manifest this update: Wed 10 Sep 2025 21:01:10 +0000
Manifest next update: Thu 11 Sep 2025 21:01:10 +0000
Files and hashes: 1: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: 8/Vw3aBMyoe8/PVJdhpmlC+l8u30E9ZF8CXvadQW8r8=)
2: uiqUmBv1k_uKYh_cj-a4QIhQlX4.roa (hash: HVtBzgdEAqEsdJNBkXbZl0/YnvdMRPK6u/IdD/XaEXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:ae:8b:a1:a3:2c:cf:b7:ef:6d:7c:62:c8:7f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Validity
Not Before: Sep 10 21:01:10 2025 GMT
Not After : Sep 11 21:01:10 2025 GMT
Subject: CN=498b7057ea83245ea852088622babaf76d154a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:4c:15:68:88:63:49:95:eb:04:39:3b:1d:
b5:48:97:2b:50:c6:a4:b0:76:23:5f:ce:ae:54:5d:
4b:56:be:d6:29:28:65:6a:9b:6c:64:d3:92:0f:da:
36:c0:74:45:7a:3d:02:fb:37:44:9b:e6:6d:05:d1:
35:3d:47:82:40:a7:11:15:03:2b:05:79:e6:a5:8a:
69:66:16:9e:60:58:4e:69:3f:e2:1f:67:e5:f4:9b:
e4:b3:a2:e8:65:7c:31:8c:3e:d0:b8:39:63:f2:2b:
d2:42:56:67:45:5e:e1:dd:30:cc:af:32:99:3c:07:
56:35:39:03:84:af:7d:50:c0:ab:fb:a6:b4:a5:fc:
e5:48:16:07:06:42:7a:80:fc:72:c7:ea:19:75:56:
47:5f:6c:d0:3e:22:b7:a8:cf:c9:c9:51:37:02:29:
79:c6:9a:3e:ab:9a:98:65:23:81:03:48:54:ca:e1:
b7:a2:aa:8c:7d:6f:e0:10:15:e7:b1:20:54:21:9f:
25:82:e2:02:4c:95:ce:35:a4:01:69:4d:e5:ef:58:
d7:40:bf:bc:96:59:fb:f3:1e:2d:80:4e:b2:db:ed:
56:b8:76:3d:17:b4:19:3b:74:79:0a:2a:82:6f:a6:
ec:5a:48:47:2c:e4:06:5e:a3:34:a5:db:57:3c:f5:
c1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8B:70:57:EA:83:24:5E:A8:52:08:86:22:BA:BA:F7:6D:15:4A:7D
X509v3 Authority Key Identifier:
keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:77:98:89:a5:cf:56:5f:08:ac:6f:7e:4a:f0:72:5d:6d:67:
58:b7:78:18:77:ab:5d:16:92:73:69:3a:1b:73:ac:4c:e1:da:
35:21:30:ed:d6:8c:5f:d6:75:d8:c1:02:26:2e:1b:08:d6:80:
5c:d3:41:75:ca:66:65:4f:5d:50:80:d5:a1:74:cf:89:1b:b7:
70:65:19:cd:9b:82:4c:a0:46:81:8d:b6:5d:f9:7f:75:48:89:
4e:a4:ab:49:a8:a7:08:8d:f0:1a:cb:5b:f8:7b:8e:55:08:73:
c6:1f:64:ba:95:37:78:c1:11:bd:04:43:56:67:f0:b4:ac:2c:
8f:b9:74:66:df:6d:44:12:e0:79:bc:7d:2b:a9:f8:08:b8:4d:
46:f2:a3:46:85:e7:24:2d:d9:02:53:04:18:64:74:bc:38:0d:
cd:de:1b:17:cd:63:5b:82:e5:1a:1a:d5:ab:1d:de:b7:d5:e9:
01:e7:75:75:d2:9c:5a:4d:ce:e2:dc:3a:03:8a:70:02:9a:3d:
20:15:79:ad:72:86:56:46:8f:dc:76:39:fc:da:12:66:e0:9b:
67:70:6c:2e:1f:43:58:58:3e:36:78:3b:04:bc:4c:55:3e:d8:
6c:df:4c:c4:d9:a8:61:54:ae:60:e8:bb:01:09:6d:93:f8:55:
1c:54:9f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:25:09 2025 by rpki-client