Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
File: lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json)
Hash identifier: lihNAZq6+g/K7ZpXaZgPjdn87KkoJVro/5hv0DByjgY=
Subject key identifier: 7C:6F:2E:94:AB:B7:45:B5:F0:CE:08:B4:EA:32:F3:ED:3E:FE:86:19
Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Certificate issuer: /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Certificate serial: 0199FBEC02A803517CBD27C5906E6157D5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
Manifest number: 116D
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: lCUgvhyBp0UKbHxKxUYkrgGL2EY.roa (hash: kCJqfKEC/8AcT5Dn8+T0849c1Ido/6VgqldxnSwXqNg=)
2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: N6dnbCvLywf5PQIJLe5LAcb4JJObLeo4rulvFM/csdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:02:a8:03:51:7c:bd:27:c5:90:6e:61:57:d5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=7c6f2e94abb745b5f0ce08b4ea32f3ed3efe8619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:61:3b:67:ac:e5:2e:e7:a1:80:c4:58:90:7b:
bc:cb:67:9d:6b:cf:6c:fd:e8:29:d0:8f:a6:24:c0:
a0:85:03:69:86:c1:24:f4:83:9d:5d:7c:18:e8:a7:
90:65:6a:b6:01:6c:42:40:4f:4c:de:96:05:da:3b:
bc:47:20:7d:64:cf:dc:6a:83:e7:7c:01:52:e1:2b:
c4:61:8b:e4:19:b6:7a:12:99:96:70:52:85:05:af:
8c:ae:7d:94:19:fb:88:12:4d:59:37:21:34:bf:b2:
a4:15:1a:78:14:b8:f4:e1:c4:0e:47:31:77:dc:f7:
a4:de:13:6b:f6:82:3b:e5:44:db:34:a1:13:9f:43:
75:df:38:f8:cc:d9:2b:13:d8:5c:bd:71:e2:b0:6e:
1d:05:74:d6:99:c9:cd:e2:8b:30:e6:ac:7b:d0:31:
de:10:34:32:48:e4:52:11:33:5d:db:2d:37:92:19:
08:ee:2e:72:b1:b3:60:57:97:71:aa:f0:02:48:97:
46:77:55:2c:bb:5a:94:89:0a:73:03:19:9f:83:ee:
2f:a3:e7:22:f4:f5:c4:cd:65:9c:fc:5b:bc:f5:62:
b9:9a:40:2a:3e:3b:bb:e4:3e:b3:11:57:10:fe:41:
42:0a:46:90:c5:8c:21:6e:f9:87:6f:72:38:c6:02:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6F:2E:94:AB:B7:45:B5:F0:CE:08:B4:EA:32:F3:ED:3E:FE:86:19
X509v3 Authority Key Identifier:
keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2c:74:e5:61:27:6e:d2:a9:3c:3e:0a:37:ae:4d:23:bf:53:
f8:cb:1d:67:e0:bc:cf:9e:9a:4e:81:1a:13:ba:db:c0:31:5b:
4b:30:dd:d4:8b:44:5b:c5:98:ab:ab:2a:2d:7d:37:99:74:30:
91:9f:dc:34:be:1c:56:f6:fe:52:d8:11:27:71:43:69:e3:f4:
fe:61:3d:bc:e2:f2:cc:0b:c5:72:f5:d6:46:63:6b:96:5e:41:
ae:2d:8c:2a:be:73:dc:63:08:5e:a4:e4:56:63:28:cd:22:4c:
b9:7c:b3:ba:6d:75:a7:a2:52:3c:1f:dd:de:62:f5:7e:32:53:
de:0e:b1:c3:12:15:23:8b:cc:a9:92:f6:46:15:32:fa:a1:57:
c9:a8:73:eb:56:8b:6a:1e:15:e2:ba:8b:35:0e:90:fe:19:1d:
9f:18:23:90:5e:ad:08:1b:6e:01:11:d5:fc:b5:ba:42:66:a6:
07:d4:bd:b5:16:4a:ac:98:d3:5c:17:85:46:78:24:2b:dd:98:
6d:22:96:d7:2e:f0:b4:d6:da:a4:71:46:70:6c:91:fe:81:e1:
9c:f2:37:5a:fd:ad:da:a7:07:d0:85:74:d8:51:45:99:d8:93:
59:30:15:c8:37:11:b7:37:db:dd:51:cf:a8:cc:fa:d2:80:60:
33:5a:be:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:09 2025 by rpki-client