Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json)
Hash identifier: X5HRwSL6i81TqWukIoyISTxQ4o1cQh24HosNWRYsbeY=
Subject key identifier: DA:BC:68:49:34:71:04:E3:86:CE:7C:51:15:A0:74:1C:9C:24:F9:25
Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Certificate serial: 019A571C34AE391995A0D9D5742E8CE5D690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
Manifest number: 011A
Signing time: Thu 06 Nov 2025 03:00:57 +0000
Manifest this update: Thu 06 Nov 2025 03:00:57 +0000
Manifest next update: Fri 07 Nov 2025 03:00:57 +0000
Files and hashes: 1: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: oLi8DTvbHczLSJQk0Ort/WP+A5eSxPnfv9v5gnqjfuo=)
2: uiqUmBv1k_uKYh_cj-a4QIhQlX4.roa (hash: HVtBzgdEAqEsdJNBkXbZl0/YnvdMRPK6u/IdD/XaEXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1c:34:ae:39:19:95:a0:d9:d5:74:2e:8c:e5:d6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Validity
Not Before: Nov 6 03:00:57 2025 GMT
Not After : Nov 7 03:00:57 2025 GMT
Subject: CN=dabc6849347104e386ce7c5115a0741c9c24f925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:6e:ac:5c:9b:55:ae:0c:1b:5c:5c:e3:e2:
05:98:34:64:49:5f:5a:ae:a5:37:56:e1:b6:2d:9c:
16:55:0d:d7:5b:f1:0a:5b:26:e2:37:8f:e1:f5:9f:
69:a9:90:34:e0:e8:57:ab:7a:fa:9f:6d:07:06:4e:
27:5c:c4:f7:13:d8:ce:4b:63:8d:95:41:23:96:3b:
66:30:2c:74:33:22:f0:38:1e:2e:69:38:7c:2d:f7:
7c:42:34:db:af:a7:a8:18:cc:90:1b:be:1e:e5:3f:
37:b6:04:03:08:57:6e:98:83:57:4a:7c:4c:78:57:
da:e7:6c:4d:6b:76:d8:08:da:fa:19:a2:78:99:8d:
22:b5:20:2a:e7:b9:a0:cc:e3:8e:94:2b:b2:63:cf:
af:36:fc:e0:a0:0c:8d:71:b1:a2:84:eb:06:5a:bd:
3b:92:d7:a9:57:03:f1:ca:15:3a:67:ba:b8:29:a9:
90:e8:48:3c:22:d4:94:e0:c2:20:0e:71:11:86:ae:
18:89:f3:da:9e:69:5a:d7:bc:b3:0c:16:4c:c8:13:
69:25:7f:34:bc:de:fe:81:70:ba:69:3a:d8:74:42:
21:b8:c2:1a:e6:45:a9:08:26:a7:79:4e:16:79:5e:
55:25:5d:0a:ed:77:b4:59:26:d1:05:87:b0:0b:30:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BC:68:49:34:71:04:E3:86:CE:7C:51:15:A0:74:1C:9C:24:F9:25
X509v3 Authority Key Identifier:
keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0e:72:eb:76:00:91:79:d9:6c:9b:59:05:5b:db:1d:b8:be:
3d:93:0a:da:ea:0a:f0:1d:2b:6c:0a:4f:b2:8c:08:e9:5d:fb:
46:1f:5e:f4:15:d2:be:98:eb:b4:c1:05:f4:59:02:ca:29:1e:
e6:99:8d:20:fe:db:af:7c:3e:f5:5b:11:6d:d9:f3:91:d3:60:
dd:7b:5c:fe:48:2b:d9:6a:c0:8c:45:1b:42:6c:2a:d6:87:95:
99:8a:ab:a4:4d:13:40:cb:48:ed:69:12:3c:b0:87:50:db:2d:
18:9e:d5:77:ef:27:5a:47:fb:33:f0:7c:93:5e:02:c7:da:de:
4e:dd:c9:2c:49:74:2d:47:bd:4a:e6:16:ba:0e:fe:bc:10:25:
6f:2c:5b:fe:d3:9e:02:25:3b:cb:51:c9:4c:9a:bb:99:d2:fb:
0c:d0:9b:ed:12:12:f8:28:7e:88:18:cb:e9:e5:ab:05:60:a6:
02:a2:9d:c6:a5:75:30:e9:23:28:0c:e7:3c:a0:91:bd:d6:18:
03:30:f3:f7:b5:7a:62:1b:bb:6a:74:c3:94:a7:db:6d:ab:88:
d0:36:71:69:4b:d2:ad:da:68:c0:aa:f7:d0:ee:a3:c4:de:91:
46:76:04:72:23:a2:a5:f1:dd:b7:99:1b:d2:c6:37:9e:b5:5b:
b1:5b:94:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpXHDSuORmVoNnVdC6M5daQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjE1NGNlMTc5OGI5YWM1MzBmMjA3ZjJkYWIwNmEzYWQz
YTI5NjYwHhcNMjUxMTA2MDMwMDU3WhcNMjUxMTA3MDMwMDU3WjAzMTEwLwYDVQQD
EyhkYWJjNjg0OTM0NzEwNGUzODZjZTdjNTExNWEwNzQxYzljMjRmOTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLVurFybVa4MG1xc4+IFmDRkSV9a
rqU3VuG2LZwWVQ3XW/EKWybiN4/h9Z9pqZA04OhXq3r6n20HBk4nXMT3E9jOS2ON
lUEjljtmMCx0MyLwOB4uaTh8Lfd8QjTbr6eoGMyQG74e5T83tgQDCFdumINXSnxM
eFfa52xNa3bYCNr6GaJ4mY0itSAq57mgzOOOlCuyY8+vNvzgoAyNcbGihOsGWr07
ktepVwPxyhU6Z7q4KamQ6Eg8ItSU4MIgDnERhq4YifPanmla17yzDBZMyBNpJX80
vN7+gXC6aTrYdEIhuMIa5kWpCCaneU4WeV5VJV0K7Xe0WSbRBYewCzCnOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNq8aEk0cQTjhs58URWgdBycJPklMB8GA1UdIwQY
MBaAFIixVM4XmLmsUw8gfy2rBqOtOilmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUt
YWI0M2MwMDg1NDdmLzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUtYWI0M2MwMDg1NDdm
LzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPw5y63YA
kXnZbJtZBVvbHbi+PZMK2uoK8B0rbApPsowI6V37Rh9e9BXSvpjrtMEF9FkCyike
5pmNIP7br3w+9VsRbdnzkdNg3Xtc/kgr2WrAjEUbQmwq1oeVmYqrpE0TQMtI7WkS
PLCHUNstGJ7Vd+8nWkf7M/B8k14Cx9reTt3JLEl0LUe9SuYWug7+vBAlbyxb/tOe
AiU7y1HJTJq7mdL7DNCb7RIS+Ch+iBjL6eWrBWCmAqKdxqV1MOkjKAznPKCRvdYY
AzDz97V6Yhu7anTDlKfbbauI0DZxaUvSrdpowKr30O6jxN6RRnYEciOipfHdt5kb
0sY3nrVbsVuU+g==
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:08:00 2025 by rpki-client