Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
File: lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json)
Hash identifier: xzzfwAiudoYe0MaoHHw77sCRLKs0gCCc0zmSF3p3tPU=
Subject key identifier: FD:EB:0C:5A:8B:F0:95:38:F3:00:49:50:F2:04:B0:52:CB:44:6E:8A
Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Certificate issuer: /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Certificate serial: 01976D06A9DAB34DE1D138F28DC59078F1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
Manifest number: 101A
Signing time: Sat 14 Jun 2025 06:00:42 +0000
Manifest this update: Sat 14 Jun 2025 06:00:42 +0000
Manifest next update: Sun 15 Jun 2025 06:00:42 +0000
Files and hashes: 1: lCUgvhyBp0UKbHxKxUYkrgGL2EY.roa (hash: kCJqfKEC/8AcT5Dn8+T0849c1Ido/6VgqldxnSwXqNg=)
2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: 97zImAK5CfXBUEmDN5WpK680rrXNfIE5v/RIBGbCgCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:a9:da:b3:4d:e1:d1:38:f2:8d:c5:90:78:f1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Validity
Not Before: Jun 14 06:00:42 2025 GMT
Not After : Jun 15 06:00:42 2025 GMT
Subject: CN=fdeb0c5a8bf09538f3004950f204b052cb446e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:e8:ec:96:e6:57:0e:ea:02:d4:44:f0:ab:
4d:21:2b:6e:f4:9c:09:f8:6c:29:cc:e5:5a:59:b9:
80:a2:69:40:12:8f:2a:11:bc:3c:3f:0a:9e:2d:2d:
55:1e:e9:1c:95:27:a1:c6:43:ab:f9:bb:cb:7a:6e:
32:3a:db:ad:a7:6b:4b:82:5c:94:4b:06:f3:16:22:
ec:25:c6:d6:b3:82:12:ec:57:94:9e:c8:33:53:f7:
bc:f6:d1:67:77:89:a5:8c:ac:0e:f9:ee:47:46:8e:
dc:72:43:28:bc:8b:d1:fb:1e:f2:f8:08:da:63:6a:
8a:e4:ee:45:8a:b3:e0:7a:de:35:c4:a7:be:27:45:
d4:de:83:9c:c4:0f:f8:6e:36:31:94:37:b1:28:c5:
7e:c0:67:90:6d:cc:35:f5:b8:9f:66:31:5d:37:e3:
ac:b3:2c:dc:dc:a8:63:6d:4b:44:b2:b9:56:d5:54:
e1:fe:f6:3e:f8:96:6c:98:00:20:d2:1f:95:ee:77:
a2:1f:14:cd:e4:e0:f3:9b:92:ec:e9:7e:81:7a:39:
7d:61:3e:95:21:ec:61:c0:a1:44:6e:16:65:19:8b:
be:b6:b7:c7:5c:b5:2d:ec:5b:66:42:44:8b:7a:52:
08:fc:8a:f0:0b:ed:40:f2:47:57:55:7d:c4:02:ff:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EB:0C:5A:8B:F0:95:38:F3:00:49:50:F2:04:B0:52:CB:44:6E:8A
X509v3 Authority Key Identifier:
keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:46:7a:3e:a3:dd:de:11:ee:3a:0a:b2:2e:67:da:ff:8d:fe:
f4:c0:e1:e9:11:89:a8:b6:dd:2a:0c:84:d9:81:17:bf:9c:84:
28:93:03:1f:ee:06:dc:cf:e1:9f:fc:a4:9f:fd:51:84:1c:ce:
3b:5e:65:4c:95:d0:25:f7:53:ab:f2:f3:32:2a:0a:74:ce:2c:
31:be:47:c4:53:db:4e:40:d9:a1:ca:b9:1b:6a:22:a9:3c:49:
0d:39:e2:e8:89:39:dc:9a:e3:16:3f:dc:f9:7b:3f:89:cc:6b:
6e:67:ab:99:6f:25:ab:9f:01:f4:2b:16:da:e9:c6:51:84:c3:
bd:90:da:43:4f:93:fc:ed:e2:9a:11:58:3a:46:76:e9:ab:b7:
97:73:08:d8:95:6d:33:0b:eb:b9:93:11:98:3c:7c:75:45:24:
dd:79:c5:01:9a:bd:ba:3a:3b:69:0a:0d:c9:ef:71:f3:32:9e:
70:b7:2b:8d:8b:d3:af:75:4c:22:4e:d0:c8:c2:fc:e3:de:33:
b4:4b:df:f6:e4:f2:00:c2:a1:40:f0:39:1a:57:91:15:79:0c:
65:e7:e0:ee:86:0e:b9:ea:62:c5:3c:5e:26:28:27:3d:b6:f7:
9b:2b:a9:c8:c7:a7:8d:33:be:e9:ff:b9:69:9c:91:12:16:b5:
52:80:63:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:37:07 2025 by rpki-client