Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
File: lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json)
Hash identifier: /tIiBB4erh4HmLiuJZgGs/ytEPgkgphASblraNso/e0=
Subject key identifier: 5E:74:AC:8F:47:6D:15:87:B4:49:91:99:FA:5D:F1:09:6D:46:EE:A5
Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Certificate issuer: /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Certificate serial: 0198D472E7EE0609E14AF6090D7C0D12B956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
Manifest number: 10D4
Signing time: Sat 23 Aug 2025 01:02:36 +0000
Manifest this update: Sat 23 Aug 2025 01:02:36 +0000
Manifest next update: Sun 24 Aug 2025 01:02:36 +0000
Files and hashes: 1: lCUgvhyBp0UKbHxKxUYkrgGL2EY.roa (hash: kCJqfKEC/8AcT5Dn8+T0849c1Ido/6VgqldxnSwXqNg=)
2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: Be+xadcsQDaWSZlByLvZ1mVYyrcBabjAtEQqMfnTIQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e7:ee:06:09:e1:4a:f6:09:0d:7c:0d:12:b9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Validity
Not Before: Aug 23 01:02:36 2025 GMT
Not After : Aug 24 01:02:36 2025 GMT
Subject: CN=5e74ac8f476d1587b4499199fa5df1096d46eea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:59:f7:80:f5:a4:13:86:b7:ed:6e:a7:51:
de:cd:5a:9c:4b:7e:66:62:49:d4:89:c4:c6:0a:36:
0d:f3:32:ee:e4:3c:f0:0d:71:36:40:6d:e2:78:74:
53:42:44:c6:e3:1e:ef:9f:a4:15:5f:fa:c2:04:5e:
8d:17:b1:55:5c:e8:ac:f2:2d:78:85:0c:f1:c3:ea:
82:f6:5e:ec:c9:8f:03:eb:23:88:93:dd:ca:24:00:
b1:ed:bf:9f:91:39:8e:40:11:f3:2b:fe:be:d3:30:
32:24:f7:04:01:0c:04:57:47:75:96:58:97:9e:5a:
54:94:7f:57:b5:2a:b0:c0:21:b8:5c:88:f3:76:2d:
7c:b0:3f:02:f9:78:1b:6e:fc:0f:95:a0:81:5f:b9:
ec:08:f0:a9:b2:5b:6a:93:ed:3f:58:69:b7:4c:45:
a1:64:68:56:00:fb:02:9c:95:35:fd:f3:96:12:84:
c5:3a:18:0e:1e:ae:aa:e7:c7:da:7d:83:93:48:69:
93:45:09:8a:37:6d:af:c9:fe:0d:4e:9a:a6:a2:be:
8f:14:6d:74:b4:ea:ec:5b:fe:b1:5f:87:8c:74:b0:
7e:81:1f:a5:6b:1b:42:84:81:cd:b0:fa:28:1a:6f:
79:e3:cf:c1:6b:d4:7d:37:64:07:31:10:95:55:16:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:74:AC:8F:47:6D:15:87:B4:49:91:99:FA:5D:F1:09:6D:46:EE:A5
X509v3 Authority Key Identifier:
keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:39:ff:8d:63:98:d3:40:4e:78:cb:63:cc:5e:f9:43:cf:6b:
fb:d0:34:0a:39:b8:de:6a:80:2e:03:21:c5:b0:b8:d8:9b:d0:
f0:66:e4:48:12:4a:49:67:b5:4b:9c:d2:e3:67:aa:0d:e3:77:
82:ff:72:f1:a5:e3:1d:dd:21:63:be:f0:d6:c6:16:2c:b9:a9:
f5:f5:53:f4:e4:76:c5:d4:ee:a2:57:d0:25:e2:ad:8f:dc:16:
ac:f8:16:f1:6c:4e:3d:75:14:9d:52:ed:a3:64:0f:e7:79:2c:
6a:48:58:36:ac:82:5a:da:a8:00:1d:cb:0f:f1:6e:84:1f:81:
63:23:4e:7b:0f:06:68:4b:98:54:1a:12:15:3c:ff:30:4e:ad:
5d:9a:28:92:c6:e6:06:99:8f:b0:b5:28:f3:c4:37:a9:70:79:
96:9a:dd:a6:d4:4a:41:a7:44:51:33:b6:a9:31:da:37:46:dc:
31:7b:cc:ba:4b:54:50:2d:57:cf:48:72:3c:87:4b:25:5c:95:
5a:09:db:dc:76:e3:5d:7c:2e:de:60:8e:33:c9:54:ab:58:8c:
19:97:b1:d7:fe:42:5d:d4:70:dd:a7:51:50:02:99:34:73:78:
11:c3:af:4d:bf:e7:4f:f2:74:df:29:ff:f1:08:a8:8a:88:55:
24:da:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:57 2025 by rpki-client