Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: VseHFHDmxtSLPmj5YWzNoZZGR6DMAPLPicpsJ25usqw=
Subject key identifier: DA:1A:58:A8:19:6E:C6:32:59:9B:01:3A:AA:79:A7:52:89:AB:F2:15
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 01987AF6988A63AE0DE5AA16CC7FBF55395A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 1617
Signing time: Tue 05 Aug 2025 16:00:37 +0000
Manifest this update: Tue 05 Aug 2025 16:00:37 +0000
Manifest next update: Wed 06 Aug 2025 16:00:37 +0000
Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: molHVRAfiWeuBJWaCCze2cFVqSgFgHvLfzl8EoOlsW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f6:98:8a:63:ae:0d:e5:aa:16:cc:7f:bf:55:39:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Aug 5 16:00:37 2025 GMT
Not After : Aug 6 16:00:37 2025 GMT
Subject: CN=da1a58a8196ec632599b013aaa79a75289abf215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:84:ff:4f:23:38:bf:c1:24:cb:b2:d0:b8:25:
3b:f4:d9:9e:58:33:05:24:51:b5:67:70:c2:0c:11:
79:f0:95:77:d0:5e:f6:0b:7d:15:75:91:8e:bb:5a:
62:b1:43:35:03:62:af:36:b3:40:88:20:82:56:46:
1c:7c:a1:a1:2c:91:48:db:9e:4a:11:0a:fe:66:ea:
bd:1e:8e:5c:66:25:bf:33:2f:c4:1d:bd:8e:1d:81:
8e:d5:62:f4:f0:9f:0d:e7:41:1e:fa:96:50:11:61:
19:58:c2:3a:4a:70:9e:14:73:d5:88:bf:10:dc:ee:
c1:84:97:bb:99:17:60:a1:34:5f:be:2e:0c:ea:2a:
47:fd:59:e4:8c:4a:bf:d8:80:ef:74:ee:53:d9:5d:
3e:5d:93:a7:ad:c1:c8:cf:ce:5e:91:70:6a:8c:37:
56:b0:36:77:60:5f:12:23:14:cc:43:fd:76:68:ce:
b9:da:9d:10:b3:e0:ee:a5:95:3f:49:01:f5:10:55:
36:cd:10:29:84:b7:25:ab:b7:95:31:48:f6:5f:25:
96:2a:50:e4:cf:b5:f0:7d:52:8e:5b:17:1f:86:5f:
c8:e8:05:5c:97:d9:53:f8:a2:75:a6:a9:fc:0d:74:
b9:a7:f8:3b:b3:d1:6c:87:f3:04:c9:1b:7e:8c:65:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1A:58:A8:19:6E:C6:32:59:9B:01:3A:AA:79:A7:52:89:AB:F2:15
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:a3:e7:1a:29:67:9f:9c:70:2e:6f:cb:55:86:ef:7d:e5:3e:
76:8e:25:92:45:95:d8:fb:88:83:26:5c:e3:c2:64:b5:bc:77:
a4:39:35:1b:11:4b:72:02:44:8c:29:ae:98:0e:b9:d4:4d:a3:
71:65:e2:5e:f2:79:7c:ed:d4:bf:e5:c1:5a:7b:02:53:05:51:
49:bf:03:6d:70:66:4e:f9:88:6a:f0:d2:39:80:6a:65:1f:70:
11:ff:33:51:ab:e7:25:bd:d2:af:90:a6:62:5f:94:9c:5a:cf:
ff:4b:02:3a:d0:45:57:00:00:0c:d8:87:cd:35:98:99:ff:ed:
a7:74:d8:f6:a5:5f:a1:a6:7a:b1:59:bf:c8:b7:b3:83:db:ca:
98:a3:9f:a8:a5:e2:f9:1f:91:99:25:84:01:b3:b5:c3:f0:64:
bb:09:c4:7f:e9:e0:a3:72:86:c7:88:a7:8a:0f:d8:56:37:10:
33:18:9a:58:87:35:80:b7:0e:e9:ca:80:43:2c:0d:f6:24:6a:
4a:f4:c6:55:cc:23:82:1a:db:c0:72:97:c2:db:cd:ad:77:76:
41:2a:c6:b4:d1:f4:54:84:5b:00:68:4d:67:e0:9d:54:b3:53:
bc:95:bd:1a:d8:b1:28:46:b6:3a:6c:28:b8:42:cb:07:8d:bf:
24:1b:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:46:56 2025 by rpki-client