Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: E0TCbV7Po08bCzzHQ7xrIPX7fYgHcCKc1UdHyoOghQo=
Subject key identifier: 5C:1C:EA:75:30:25:FE:D4:20:12:35:4A:77:32:33:45:35:65:ED:EC
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 019A503D95AA8A3C80314A950D077C13CE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 19:00:04 +0000
Manifest this update: Tue 04 Nov 2025 19:00:04 +0000
Manifest next update: Wed 05 Nov 2025 19:00:04 +0000
Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: soZzdhkE9S2X2sVCKaAysvFXqM4llF4MMAxJccTtQYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:95:aa:8a:3c:80:31:4a:95:0d:07:7c:13:ce:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Nov 4 19:00:04 2025 GMT
Not After : Nov 5 19:00:04 2025 GMT
Subject: CN=5c1cea753025fed42012354a773233453565edec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:ff:cb:39:7e:79:0c:16:94:6b:6a:b4:ec:
eb:cb:d7:f1:34:6a:d6:75:91:64:91:6f:78:9f:1f:
e7:86:4d:b1:29:cb:5e:2f:eb:54:4a:e9:b7:94:5a:
1d:df:b9:5f:39:7f:5b:db:85:f4:86:1a:b8:45:30:
91:7f:84:df:3f:ae:bc:be:7a:24:45:b8:68:1c:9b:
a5:28:ca:d3:8b:06:56:d7:4b:85:66:3a:5b:4e:71:
e3:19:a3:79:31:d4:66:eb:5a:72:d2:ca:68:1f:67:
5f:7e:5d:24:32:4c:ac:d0:23:6a:cd:ce:68:67:fc:
07:a1:eb:fa:13:36:7a:59:10:1c:01:b9:c7:f2:0a:
d0:47:40:da:9b:53:8d:a6:da:5b:1e:7b:9b:bc:8c:
dc:9c:9f:f9:c7:83:0a:0e:24:ec:cd:c8:3e:4d:80:
2e:b7:b9:62:03:1e:a6:aa:3d:9a:e3:b1:22:00:a0:
a6:7a:59:ed:e3:2d:e6:f2:ed:fb:45:43:2d:2b:95:
cf:1a:2f:c9:df:f0:eb:87:14:cb:e9:ad:48:e7:2b:
61:3f:01:84:36:ef:98:a2:9c:f0:d9:9c:46:3b:83:
c4:dd:97:ae:52:09:1b:4b:36:92:87:89:3e:b1:62:
47:46:ab:48:d2:00:b4:39:0f:1f:3d:b9:92:4f:4f:
2c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1C:EA:75:30:25:FE:D4:20:12:35:4A:77:32:33:45:35:65:ED:EC
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:56:01:66:be:86:80:a5:59:39:e1:9a:a9:a7:f9:a7:20:41:
2f:05:53:b3:da:b6:38:b4:de:21:04:e2:b5:35:34:92:f7:29:
7e:00:22:38:09:94:ee:38:c5:c7:86:0a:83:d4:25:bf:b5:0b:
0d:09:83:a2:d9:74:f9:91:ed:a5:8b:2e:ca:6b:eb:eb:84:f4:
93:af:2e:44:fa:c4:52:3f:36:2a:46:e8:27:b7:83:2e:fa:83:
24:08:82:61:0b:79:ca:92:5b:5c:fe:2c:b5:01:b6:23:5d:42:
61:bd:15:54:a2:94:cf:b0:0c:9a:39:8d:c3:8e:f9:78:47:a0:
9a:ad:f7:7d:25:49:e8:d0:83:49:9b:9a:4d:1a:cb:55:0b:36:
1d:f0:e5:66:35:6b:03:a8:81:c8:b2:36:45:3c:ae:7a:81:12:
86:23:8f:d2:34:bb:dc:93:b7:a4:0c:b1:fd:bb:2f:78:0e:93:
d6:28:1f:e2:06:bc:57:14:3f:7d:8b:55:64:f3:d9:26:a6:87:
67:ce:69:73:ea:2d:10:30:70:6a:a2:eb:25:4a:0f:86:bd:f1:
da:ad:88:72:b4:91:34:e0:5b:98:a1:d8:80:d3:84:9d:bc:56:
da:0d:06:8b:57:96:8a:67:a4:b4:cd:8a:e5:0b:15:45:fe:75:
2f:98:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:50 2025 by rpki-client