Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json)
Hash identifier: PELBoz7XJBvNJu6PHp5+wqhWK1V/qCBMvA4yKAbj66g=
Subject key identifier: 45:4C:8C:0F:E4:75:EA:E6:82:2A:9F:B1:2F:55:05:06:93:16:8E:60
Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Certificate serial: 0198744FE2DC7CAF0DC4804FDDD156DE0005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
Manifest number: 20
Signing time: Mon 04 Aug 2025 09:00:49 +0000
Manifest this update: Mon 04 Aug 2025 09:00:49 +0000
Manifest next update: Tue 05 Aug 2025 09:00:49 +0000
Files and hashes: 1: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: ZwzPM4SZc5m3uoc4BPFD8WIpA97fmvsNpi+G0fjCRck=)
2: uiqUmBv1k_uKYh_cj-a4QIhQlX4.roa (hash: HVtBzgdEAqEsdJNBkXbZl0/YnvdMRPK6u/IdD/XaEXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:e2:dc:7c:af:0d:c4:80:4f:dd:d1:56:de:00:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Validity
Not Before: Aug 4 09:00:49 2025 GMT
Not After : Aug 5 09:00:49 2025 GMT
Subject: CN=454c8c0fe475eae6822a9fb12f55050693168e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:35:0c:89:7d:cf:29:ce:93:a0:fe:af:fb:
a0:dc:fe:43:c0:25:8c:e5:92:03:f6:25:2a:32:6f:
74:f1:57:de:52:f4:d1:84:8e:77:1e:e0:94:ae:9e:
ab:07:16:06:b4:a7:e4:b3:78:71:20:44:23:bb:d9:
d4:cc:ef:41:e3:3c:2b:fd:77:c4:29:33:e0:51:8f:
4a:87:9e:2d:fd:1c:96:4a:be:20:78:80:04:b8:7f:
09:68:24:9a:1d:9a:90:5e:1d:8d:e6:9d:17:d6:57:
f0:f2:3f:06:38:61:9a:d5:61:4b:a9:70:5b:bc:a6:
37:18:d2:ae:56:78:8a:1c:2a:02:db:a6:81:88:a1:
9b:d3:59:15:df:14:9c:79:24:05:9c:ff:79:4a:30:
64:6e:1d:b2:94:49:b4:af:54:f6:a8:22:0f:2e:0b:
ed:ab:a5:00:60:7e:ab:5e:b3:a6:39:7c:b1:9e:73:
d2:ac:a5:54:2c:1d:26:8c:7f:35:80:14:20:05:e2:
d9:65:be:2c:d6:e8:a3:f1:a2:64:af:c7:ad:56:c1:
ca:9e:84:23:a7:93:1f:57:c4:11:2b:00:52:cc:72:
7c:b4:63:6b:38:3b:e5:38:41:ac:1f:b3:99:05:8a:
b4:30:d4:a8:d8:e2:70:10:f8:b0:1a:fb:97:91:d2:
d4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4C:8C:0F:E4:75:EA:E6:82:2A:9F:B1:2F:55:05:06:93:16:8E:60
X509v3 Authority Key Identifier:
keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cf:1c:4d:d5:e6:de:2c:90:f6:72:12:bd:79:99:f7:b1:b6:
98:e7:b1:b1:2c:1e:2b:ba:2b:21:4a:d8:79:ce:d9:90:eb:98:
a4:35:7b:84:63:7e:39:fb:1c:e7:c5:40:68:b3:ec:1e:5b:4f:
4b:e4:7b:12:05:fd:c4:b4:87:c1:3b:53:97:30:6a:40:ef:e0:
5c:d6:af:10:3c:5b:f1:c7:f1:fe:77:3c:64:82:53:23:2c:4d:
8c:97:f1:de:35:82:e4:3c:55:1f:75:ea:19:be:20:b3:2f:67:
3b:17:51:c3:7d:f0:d8:d7:94:ae:43:36:d6:61:10:a2:16:71:
ce:ab:69:ea:07:a3:57:3d:b7:94:fe:3c:43:84:b7:ae:04:01:
8e:6f:52:e7:db:01:fe:1f:1b:ff:96:37:59:27:ea:1b:8b:f7:
59:a9:bd:ed:ac:50:4f:8e:9e:7d:82:08:98:81:4b:77:53:bc:
4b:f2:d1:2f:6e:49:cc:05:55:f6:02:be:fe:75:c1:44:f9:a5:
2b:31:a3:8d:87:37:52:f6:fc:3b:16:97:c3:44:2d:aa:5b:e0:
0a:13:c9:05:8f:7b:9f:8c:af:1c:ef:55:96:2d:62:e3:91:e4:
9b:ea:83:0b:93:8a:a4:f2:cd:c7:cf:96:61:ce:f5:d5:a8:36:
cd:be:7e:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T+LcfK8NxIBP3dFW3gAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjE1NGNlMTc5OGI5YWM1MzBmMjA3ZjJkYWIwNmEzYWQz
YTI5NjYwHhcNMjUwODA0MDkwMDQ5WhcNMjUwODA1MDkwMDQ5WjAzMTEwLwYDVQQD
Eyg0NTRjOGMwZmU0NzVlYWU2ODIyYTlmYjEyZjU1MDUwNjkzMTY4ZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX01DIl9zynOk6D+r/ug3P5DwCWM
5ZID9iUqMm908VfeUvTRhI53HuCUrp6rBxYGtKfks3hxIEQju9nUzO9B4zwr/XfE
KTPgUY9Kh54t/RyWSr4geIAEuH8JaCSaHZqQXh2N5p0X1lfw8j8GOGGa1WFLqXBb
vKY3GNKuVniKHCoC26aBiKGb01kV3xSceSQFnP95SjBkbh2ylEm0r1T2qCIPLgvt
q6UAYH6rXrOmOXyxnnPSrKVULB0mjH81gBQgBeLZZb4s1uij8aJkr8etVsHKnoQj
p5MfV8QRKwBSzHJ8tGNrODvlOEGsH7OZBYq0MNSo2OJwEPiwGvuXkdLUAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVMjA/kdermgiqfsS9VBQaTFo5gMB8GA1UdIwQY
MBaAFIixVM4XmLmsUw8gfy2rBqOtOilmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUt
YWI0M2MwMDg1NDdmLzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUtYWI0M2MwMDg1NDdm
LzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPc8cTdXm
3iyQ9nISvXmZ97G2mOexsSweK7orIUrYec7ZkOuYpDV7hGN+Ofsc58VAaLPsHltP
S+R7EgX9xLSHwTtTlzBqQO/gXNavEDxb8cfx/nc8ZIJTIyxNjJfx3jWC5DxVH3Xq
Gb4gsy9nOxdRw33w2NeUrkM21mEQohZxzqtp6gejVz23lP48Q4S3rgQBjm9S59sB
/h8b/5Y3WSfqG4v3Wam97axQT46efYIImIFLd1O8S/LRL25JzAVV9gK+/nXBRPml
KzGjjYc3Uvb8OxaXw0QtqlvgChPJBY97n4yvHO9Vli1i45Hkm+qDC5OKpPLNx8+W
Yc711ag2zb5++w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:05:53 2025 by rpki-client