Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json)
Hash identifier: 1VO5+446gYE15BFIOnudQF6Tg0nV5l9szcSzVaK9sRQ=
Subject key identifier: 54:5A:50:7C:0C:91:F1:60:78:99:60:31:B0:2C:E0:3C:71:1B:FC:29
Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Certificate serial: 0199FC58D24FB7D1A1E46FE692619B27F8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
Manifest number: EB
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: priM4sI/Nw16We5T6vt9MwV59YZgINnyJcGHxH5jtPM=)
2: uiqUmBv1k_uKYh_cj-a4QIhQlX4.roa (hash: HVtBzgdEAqEsdJNBkXbZl0/YnvdMRPK6u/IdD/XaEXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d2:4f:b7:d1:a1:e4:6f:e6:92:61:9b:27:f8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=545a507c0c91f16078996031b02ce03c711bfc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:b3:c4:35:e7:73:f7:70:ba:91:41:19:ff:
cb:e6:0f:0d:c5:bf:0a:2c:af:7b:63:c7:54:7b:da:
d5:43:fd:12:e3:18:2c:2a:23:5e:15:ce:9f:3d:28:
54:ef:3e:72:48:3a:df:b1:07:37:29:e7:3e:57:47:
7f:5d:c1:26:5a:ba:d0:62:bc:cb:fa:5e:eb:8d:8a:
20:6b:f6:a0:2e:9f:2b:f4:c7:e7:b2:4d:cb:2e:ef:
b9:29:b1:5f:ce:bd:59:bf:00:d3:5a:58:d3:48:47:
61:1d:1f:51:f7:27:8e:fd:31:b9:7f:a5:0a:7d:a7:
e3:a5:06:a4:36:ca:20:89:71:af:08:44:81:06:b0:
36:c1:3e:17:25:4d:bb:66:04:5b:1d:8b:68:d2:56:
aa:da:29:aa:18:9b:72:54:81:b5:17:00:6c:6f:f1:
03:b7:a7:7e:b1:46:51:92:11:48:aa:05:4a:07:da:
85:dc:2c:b1:45:90:73:0c:83:53:47:86:07:13:0d:
cb:2e:0e:81:93:ed:a1:a0:f7:23:71:df:3b:11:0c:
b4:f6:a4:b1:b1:4c:d2:4f:c8:5b:d2:ef:8f:47:61:
9d:2d:c4:b2:d9:14:f8:15:65:76:d5:8f:10:7e:17:
71:ea:1c:2c:9e:9e:65:00:53:15:1f:7b:2d:47:c5:
ab:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5A:50:7C:0C:91:F1:60:78:99:60:31:B0:2C:E0:3C:71:1B:FC:29
X509v3 Authority Key Identifier:
keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c8:69:96:f4:16:ea:55:46:aa:6d:fc:2f:35:c5:7a:f0:85:
e7:06:d5:c1:49:bd:41:22:3a:22:35:ba:09:c2:a3:ca:79:79:
b8:26:57:39:9c:b7:75:10:5d:d1:19:8c:1b:96:23:13:b2:0e:
a5:59:c0:6d:82:37:ea:4b:14:ea:69:4b:a0:0d:5b:6e:bf:1e:
55:91:3f:0a:10:a5:71:e4:30:3e:c9:54:32:8e:58:3d:bd:36:
47:88:a6:13:32:84:16:56:da:ce:9c:83:f4:c5:94:9f:18:6b:
57:6c:5d:89:15:34:c4:40:93:78:3b:68:ba:5e:b2:ea:cd:3e:
8f:c4:b6:93:0b:89:0f:9e:01:55:fc:7e:43:33:e9:96:7c:3c:
21:a1:71:65:78:1f:23:56:63:1a:a1:f1:a0:ef:2f:a9:6a:56:
63:8b:63:65:16:5e:d5:0e:12:64:d2:36:ed:1f:16:5d:47:35:
fb:b5:ff:d3:e2:59:de:2b:dd:84:b1:8b:79:92:73:91:a1:4d:
6f:a5:79:a4:57:f2:81:de:39:be:0a:f4:38:f8:b4:b3:f7:48:
ee:6e:34:bb:bd:31:19:a1:2f:0f:1e:0f:87:b2:22:36:a2:16:
8e:d0:6c:34:43:05:99:cd:fc:b5:9a:15:25:2a:26:fb:ba:f5:
e6:a4:7d:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WNJPt9Gh5G/mkmGbJ/jGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjE1NGNlMTc5OGI5YWM1MzBmMjA3ZjJkYWIwNmEzYWQz
YTI5NjYwHhcNMjUxMDE5MTIwMTQzWhcNMjUxMDIwMTIwMTQzWjAzMTEwLwYDVQQD
Eyg1NDVhNTA3YzBjOTFmMTYwNzg5OTYwMzFiMDJjZTAzYzcxMWJmYzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ezxDXnc/dwupFBGf/L5g8Nxb8K
LK97Y8dUe9rVQ/0S4xgsKiNeFc6fPShU7z5ySDrfsQc3Kec+V0d/XcEmWrrQYrzL
+l7rjYoga/agLp8r9Mfnsk3LLu+5KbFfzr1ZvwDTWljTSEdhHR9R9yeO/TG5f6UK
fafjpQakNsogiXGvCESBBrA2wT4XJU27ZgRbHYto0laq2imqGJtyVIG1FwBsb/ED
t6d+sUZRkhFIqgVKB9qF3CyxRZBzDINTR4YHEw3LLg6Bk+2hoPcjcd87EQy09qSx
sUzST8hb0u+PR2GdLcSy2RT4FWV21Y8Qfhdx6hwsnp5lAFMVH3stR8WrXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRaUHwMkfFgeJlgMbAs4DxxG/wpMB8GA1UdIwQY
MBaAFIixVM4XmLmsUw8gfy2rBqOtOilmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUt
YWI0M2MwMDg1NDdmLzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUtYWI0M2MwMDg1NDdm
LzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMhplvQW
6lVGqm38LzXFevCF5wbVwUm9QSI6IjW6CcKjynl5uCZXOZy3dRBd0RmMG5YjE7IO
pVnAbYI36ksU6mlLoA1bbr8eVZE/ChClceQwPslUMo5YPb02R4imEzKEFlbazpyD
9MWUnxhrV2xdiRU0xECTeDtoul6y6s0+j8S2kwuJD54BVfx+QzPplnw8IaFxZXgf
I1ZjGqHxoO8vqWpWY4tjZRZe1Q4SZNI27R8WXUc1+7X/0+JZ3ivdhLGLeZJzkaFN
b6V5pFfygd45vgr0OPi0s/dI7m40u70xGaEvDx4Ph7IiNqIWjtBsNEMFmc38tZoV
JSom+7r15qR9Lg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:53 2025 by rpki-client