Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
File: lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json)
Hash identifier: nt6A2f571ZIJ6Ccr/03vK6Bdr7QpnHgn3eRrYel83NQ=
Subject key identifier: 6F:22:33:66:CF:AF:FC:8B:EB:AA:BB:03:BC:AF:FB:95:10:53:EC:DF
Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Certificate issuer: /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Certificate serial: 01987B9D60A5CCAE4DA1FC1E196C851F6047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
Manifest number: 10A6
Signing time: Tue 05 Aug 2025 19:02:47 +0000
Manifest this update: Tue 05 Aug 2025 19:02:47 +0000
Manifest next update: Wed 06 Aug 2025 19:02:47 +0000
Files and hashes: 1: lCUgvhyBp0UKbHxKxUYkrgGL2EY.roa (hash: kCJqfKEC/8AcT5Dn8+T0849c1Ido/6VgqldxnSwXqNg=)
2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: 9mGvENkoz0qoLGgK3WQ+eQ/ABmw1ALQu/dUn4dprr0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:60:a5:cc:ae:4d:a1:fc:1e:19:6c:85:1f:60:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Validity
Not Before: Aug 5 19:02:47 2025 GMT
Not After : Aug 6 19:02:47 2025 GMT
Subject: CN=6f223366cfaffc8bebaabb03bcaffb951053ecdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:49:92:7e:5e:56:88:94:fe:84:ae:f3:5f:
da:35:9c:55:0d:8a:85:27:42:a6:dd:5c:4c:17:23:
21:49:b9:d8:46:75:8d:95:57:17:4e:d5:aa:4a:1f:
bf:60:28:ba:1b:05:75:4a:b7:ff:02:4f:06:94:5d:
8d:7c:b4:8f:36:f7:93:62:aa:68:7a:7d:dd:b3:d8:
47:58:b4:22:a8:91:2e:d7:a4:c7:dd:db:72:97:b0:
1d:bc:b1:ac:30:62:85:08:79:e8:6d:53:97:34:8b:
69:5a:1a:69:37:78:e9:bc:44:24:df:2d:7d:31:94:
03:e9:b5:aa:42:a3:82:97:22:77:71:15:d4:fa:25:
75:78:b1:fc:36:77:92:7e:35:cd:13:01:11:9e:6f:
d8:78:99:08:8a:ea:fe:e7:8b:f2:8d:b6:21:de:7c:
bf:fd:ce:dd:aa:92:99:3f:da:1f:08:d1:8d:b0:7c:
11:44:59:22:fc:69:78:a6:e7:b8:1a:e7:76:af:42:
93:13:ac:a1:d5:ac:3d:91:d0:71:63:fd:cb:41:97:
82:40:72:e5:aa:24:8d:31:00:35:e4:dc:f8:a0:f2:
d5:4c:88:89:b7:94:01:fe:2e:98:95:4c:ce:44:10:
e6:48:46:b6:53:52:27:66:4e:f2:14:a6:54:a6:f5:
00:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:22:33:66:CF:AF:FC:8B:EB:AA:BB:03:BC:AF:FB:95:10:53:EC:DF
X509v3 Authority Key Identifier:
keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:36:b7:12:31:b0:95:1b:46:bd:fc:68:1b:d4:5a:a8:ac:b1:
6d:b7:99:1e:45:65:18:f6:f4:41:54:7b:ef:2c:7f:de:db:30:
aa:ff:c5:2a:ed:92:e3:25:7e:74:a0:e0:79:be:38:ee:c6:2f:
2d:29:99:d5:14:9a:e6:d7:6a:2c:9c:79:95:4e:58:fa:6c:8a:
49:d1:f5:7c:e1:dc:06:de:a7:ef:8f:fa:20:32:69:e6:80:16:
60:d0:6e:1e:84:ea:bf:e6:09:cf:d7:fb:e5:cb:03:63:3d:f7:
8a:ea:5c:15:81:ab:31:b0:2f:b6:bc:bb:21:bc:51:2f:60:0b:
25:5a:f6:f2:28:e3:a1:3f:f3:ca:fe:65:01:d3:c1:4f:a3:fa:
2f:58:d2:90:6d:52:c4:e0:d6:0e:0e:1b:eb:62:36:2c:ca:66:
6d:9a:8d:6f:0b:27:92:30:3c:b4:40:10:3c:30:10:69:8d:0d:
37:69:d7:6a:fb:de:40:28:af:63:d1:25:23:ee:e5:58:42:38:
7e:eb:7d:59:90:ac:d2:66:fe:8d:ab:f2:eb:bc:3f:d5:4e:9b:
65:a4:6f:6d:e9:50:00:7d:c1:c1:08:f4:b4:8b:6d:82:a6:23:
b9:dd:00:fc:57:92:6e:74:b5:d7:77:0f:6f:2f:b1:65:a9:24:
8a:6b:93:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:11:18 2025 by rpki-client