Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
File: lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json)
Hash identifier: mg9Kg2jQZXM4FV4HYNlVPFoNm4nj1DUhJVptQirB4CY=
Subject key identifier: 8B:C2:39:8B:D4:FE:85:46:54:2D:72:64:B3:58:E8:8E:D6:BB:49:14
Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Certificate issuer: /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Certificate serial: 0197B88FAB644416AD7EAA6A26D77FF349DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
Manifest number: 1041
Signing time: Sat 28 Jun 2025 22:01:52 +0000
Manifest this update: Sat 28 Jun 2025 22:01:52 +0000
Manifest next update: Sun 29 Jun 2025 22:01:52 +0000
Files and hashes: 1: lCUgvhyBp0UKbHxKxUYkrgGL2EY.roa (hash: kCJqfKEC/8AcT5Dn8+T0849c1Ido/6VgqldxnSwXqNg=)
2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: g2x2rvX6jfP/pxa3zxi+0pa+v9CkISSfCEoUlFNhwp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ab:64:44:16:ad:7e:aa:6a:26:d7:7f:f3:49:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Validity
Not Before: Jun 28 22:01:52 2025 GMT
Not After : Jun 29 22:01:52 2025 GMT
Subject: CN=8bc2398bd4fe8546542d7264b358e88ed6bb4914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d7:0b:50:9a:bd:04:28:d8:ec:1d:1f:9b:c8:
d1:54:67:fe:ae:4e:90:ba:05:d3:53:a0:71:f4:90:
71:ca:60:34:fc:37:91:ee:b3:48:00:1e:1c:86:21:
bb:f7:78:e0:05:5c:8c:d4:c8:24:57:d3:4b:0c:9a:
18:fe:50:00:d6:b7:43:5c:99:c5:39:68:7a:78:c1:
4d:3f:88:81:78:f2:85:77:2b:e0:f3:d6:9c:77:0e:
bd:ba:1e:56:8f:bc:16:cc:2a:a2:23:42:d4:9c:ba:
52:68:fc:35:37:6c:4a:fb:bd:32:56:95:ff:5c:42:
5d:c2:b2:2e:eb:8b:ac:bf:03:6a:4a:e2:19:ee:74:
2d:4c:47:86:e3:06:18:a8:aa:52:fa:6e:35:18:32:
9a:21:80:fa:6a:56:12:fb:4b:9a:14:60:38:2e:27:
41:b6:67:06:ee:73:73:e5:10:8c:7c:54:39:f1:8a:
0c:64:ee:9d:6f:2c:e3:e0:b8:ce:67:d2:fb:67:56:
8e:a0:a2:43:7c:a7:be:79:a2:ab:dd:6d:0b:79:35:
fe:f3:04:b3:fe:b7:84:fb:8f:2d:c3:33:21:fb:08:
37:b6:bb:62:e0:84:21:6a:6c:cd:61:9e:de:35:c1:
04:9b:33:92:59:43:5b:ee:30:2f:34:16:c3:f8:67:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C2:39:8B:D4:FE:85:46:54:2D:72:64:B3:58:E8:8E:D6:BB:49:14
X509v3 Authority Key Identifier:
keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:71:54:1e:5f:c5:c9:d8:62:ec:73:ab:5d:85:ee:0c:9b:15:
e9:a9:15:36:1b:05:ae:0c:80:69:e2:15:45:a7:e5:77:37:d9:
69:5b:e0:23:f9:7f:cb:fd:c7:31:a1:f9:14:42:00:e0:c1:ae:
a0:54:bd:91:6f:8c:c0:ef:14:1d:39:ab:81:cb:62:a6:1b:57:
b6:6d:f6:69:45:e5:be:eb:ab:50:8d:6f:91:d9:27:dc:a9:e1:
48:ce:4e:53:b0:46:81:e7:40:9b:76:65:b5:c1:14:3e:3f:3f:
9a:fb:e7:ec:a0:dd:61:5b:93:60:f8:2a:bf:35:a3:67:d1:fb:
b8:72:31:a2:88:20:4c:30:6e:cb:68:4b:7e:65:b4:7b:2e:bc:
a6:5b:4d:10:53:ef:71:ee:29:ea:57:96:44:38:fa:c4:45:2b:
b6:35:f8:f0:42:ff:bf:2a:6e:2f:ed:32:66:91:97:91:41:49:
53:00:a6:68:0b:9a:14:f8:15:20:14:bd:cc:56:49:87:95:a4:
0b:af:6e:ff:a0:bc:68:33:d5:6e:1c:c4:10:5b:5f:56:6f:4a:
79:c6:2b:b9:ff:1b:6e:64:c4:e9:9e:25:ca:9d:bd:3e:e4:e3:
21:06:04:a0:ef:29:1d:cc:73:9d:5d:6e:ac:c6:10:31:9f:cf:
bf:10:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:29:48 2025 by rpki-client