Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: BHVCZSyfxM0m1/AARoYlEK7U7uikBLJtWJ6EB42Bp4E=
Subject key identifier: 8F:D5:38:57:74:27:B6:C6:9A:F9:8B:BE:08:A8:BF:73:87:F9:E4:72
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 019772640958ACE1524D5789325593F1D489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 158E
Signing time: Sun 15 Jun 2025 07:00:47 +0000
Manifest this update: Sun 15 Jun 2025 07:00:47 +0000
Manifest next update: Mon 16 Jun 2025 07:00:47 +0000
Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: rHPTo9VM11xfgIItv/04a27j27HNdfUonqthLWP6B/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:09:58:ac:e1:52:4d:57:89:32:55:93:f1:d4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Jun 15 07:00:47 2025 GMT
Not After : Jun 16 07:00:47 2025 GMT
Subject: CN=8fd538577427b6c69af98bbe08a8bf7387f9e472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:7e:b7:b9:2a:4a:59:53:7e:4b:4f:96:5a:
ef:b1:04:5b:1f:89:d6:09:35:17:af:c5:e9:1f:56:
39:88:44:6c:38:ed:cb:c2:ce:32:14:6a:d2:af:c3:
d3:5e:1e:11:e7:d8:a5:38:65:ef:be:4c:ce:7e:4b:
13:11:5b:42:79:1b:da:0e:b8:9c:46:de:a7:5e:a4:
a8:d9:6e:7a:8d:43:9f:ea:1e:f3:28:12:d5:ac:58:
fd:ee:0f:a6:5d:10:76:86:a5:a1:05:79:c1:81:71:
88:c7:57:2b:68:7e:3a:5a:ea:96:cb:ef:44:3e:7d:
b5:c8:91:6f:2b:1e:3f:a0:9e:c8:1b:aa:af:6f:55:
12:c5:b2:b6:b8:03:1e:15:91:e0:18:85:ca:c2:b0:
f5:d7:d7:fe:f7:56:c0:4f:90:39:e0:e1:a7:05:6f:
49:a4:3f:3d:31:07:bb:d8:54:a8:2f:6c:5e:1d:79:
b0:96:b1:42:9d:3e:ad:f0:10:2d:8e:69:7a:33:be:
c9:e2:a9:d4:87:c2:16:91:9d:80:4d:00:ea:9b:df:
d5:a2:60:99:d7:20:dd:80:61:17:40:8d:3e:62:a0:
08:64:02:63:42:ed:f1:65:4b:d7:e7:c1:a8:48:2f:
4b:40:e4:ea:d6:11:37:16:d9:28:c2:d4:2c:64:a4:
be:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D5:38:57:74:27:B6:C6:9A:F9:8B:BE:08:A8:BF:73:87:F9:E4:72
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:17:91:b7:d9:07:0e:59:d2:95:9e:e9:b7:99:3a:f8:f0:ad:
49:e7:10:ad:e4:b5:55:b4:fa:cb:49:87:e0:0f:4b:23:5e:37:
fe:89:01:55:8f:a1:dc:47:80:78:30:90:8c:87:ac:4e:06:20:
38:1c:df:70:42:80:47:c6:fa:d0:cc:27:3f:64:5f:83:7f:29:
fa:40:40:56:a4:0f:9e:91:ae:5a:4d:e8:4e:72:2c:34:45:f0:
97:25:6b:cf:54:4b:a9:47:ad:3b:32:2a:2f:57:6c:c4:1c:59:
ab:4b:c4:0c:6d:5b:4e:74:fe:e3:2f:ee:08:4c:07:cd:ed:33:
43:85:e2:29:05:23:8f:df:2e:ae:f6:9d:9b:d6:6c:cd:a3:8b:
2e:bb:5d:b6:cc:c7:4b:0b:cb:d6:47:50:60:83:91:2b:b9:07:
97:60:6b:a3:cf:f8:e0:c3:d0:62:11:65:23:57:d4:b4:20:6b:
f2:c1:0f:a4:cc:44:c2:3a:26:b2:ab:11:36:1d:c5:cd:d3:f2:
b2:77:04:1a:65:b5:3b:5a:19:1c:0c:7a:85:09:9f:94:a4:30:
b7:57:26:cd:22:02:c6:cc:5e:99:e4:79:9c:a7:09:f5:11:ab:
26:2a:3b:b5:2b:72:10:36:e6:90:3e:af:3f:18:90:37:7b:c4:
3c:13:11:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyZAlYrOFSTVeJMlWT8dSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjIxMWQ3ZjhmYTFhYWRkZWE0NDBjNTAxMjY5YmRhZjFj
YWI0NTIwHhcNMjUwNjE1MDcwMDQ3WhcNMjUwNjE2MDcwMDQ3WjAzMTEwLwYDVQQD
Eyg4ZmQ1Mzg1Nzc0MjdiNmM2OWFmOThiYmUwOGE4YmY3Mzg3ZjllNDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPl+t7kqSllTfktPllrvsQRbH4nW
CTUXr8XpH1Y5iERsOO3Lws4yFGrSr8PTXh4R59ilOGXvvkzOfksTEVtCeRvaDric
Rt6nXqSo2W56jUOf6h7zKBLVrFj97g+mXRB2hqWhBXnBgXGIx1craH46WuqWy+9E
Pn21yJFvKx4/oJ7IG6qvb1USxbK2uAMeFZHgGIXKwrD119f+91bAT5A54OGnBW9J
pD89MQe72FSoL2xeHXmwlrFCnT6t8BAtjml6M77J4qnUh8IWkZ2ATQDqm9/VomCZ
1yDdgGEXQI0+YqAIZAJjQu3xZUvX58GoSC9LQOTq1hE3FtkowtQsZKS+PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/VOFd0J7bGmvmLvgiov3OH+eRyMB8GA1UdIwQY
MBaAFJyyEdf4+hqt3qRAxQEmm9rxyrRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jMzEwN2ItODE1NS00YTJhLTliNTkt
MmFkZmVjODM3MTExLzEvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jMzEwN2ItODE1NS00YTJhLTliNTktMmFkZmVjODM3MTEx
LzEvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVheRt9kH
DlnSlZ7pt5k6+PCtSecQreS1VbT6y0mH4A9LI143/okBVY+h3EeAeDCQjIesTgYg
OBzfcEKAR8b60MwnP2Rfg38p+kBAVqQPnpGuWk3oTnIsNEXwlyVrz1RLqUetOzIq
L1dsxBxZq0vEDG1bTnT+4y/uCEwHze0zQ4XiKQUjj98urvadm9ZszaOLLrtdtszH
SwvL1kdQYIORK7kHl2Bro8/44MPQYhFlI1fUtCBr8sEPpMxEwjomsqsRNh3FzdPy
sncEGmW1O1oZHAx6hQmflKQwt1cmzSICxsxemeR5nKcJ9RGrJio7tStyEDbmkD6v
PxiQN3vEPBMR2A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:59:28 2025 by rpki-client