Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: XyuDE28jNIviqJ5yfWz09xNiolfwbxUjjoLMw7V4vMw=
Subject key identifier: DE:4B:0C:2B:58:FE:15:21:B2:C1:52:F0:59:BE:4F:E3:A5:53:06:72
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 019679444923FFA457F30690340A3756A908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 22:00:40 +0000
Manifest this update: Sun 27 Apr 2025 22:00:40 +0000
Manifest next update: Mon 28 Apr 2025 22:00:40 +0000
Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: SlJX/A5AbJmg+55xA8BJKq2fUCXLHF1c4ZCfhgqzRD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:49:23:ff:a4:57:f3:06:90:34:0a:37:56:a9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Apr 27 22:00:40 2025 GMT
Not After : Apr 28 22:00:40 2025 GMT
Subject: CN=de4b0c2b58fe1521b2c152f059be4fe3a5530672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:78:27:54:1f:16:00:a9:59:b1:68:c4:fa:
40:4c:db:a7:f2:39:e8:84:07:d7:8a:7a:06:b4:69:
1a:57:5f:1d:1d:6b:c8:12:b2:09:f2:fc:bf:cc:0c:
97:c5:2a:29:fb:1a:59:fd:92:ac:e1:e7:45:f1:fc:
cc:b8:9b:f7:05:ff:ef:cb:ad:c5:0a:e6:00:6b:76:
de:a8:16:71:cf:2a:5a:60:dc:b5:4f:e2:66:1e:2a:
39:de:57:4d:7f:1e:b0:c5:82:0b:29:38:4b:b1:17:
0a:d2:27:b4:93:02:f8:dc:70:ee:4a:11:8e:c0:a1:
ff:fb:0d:72:aa:9b:50:9e:ba:6f:81:ec:c3:dc:f8:
c6:18:89:f2:f1:09:f2:62:32:31:80:d4:78:d7:27:
89:95:ed:96:c6:73:e5:01:55:22:17:ca:52:70:0d:
7e:55:2c:2c:75:12:fb:d9:43:25:0e:5a:b8:f4:a1:
e7:5a:96:ea:ec:b7:59:b8:55:f0:16:d1:62:8b:ff:
ca:55:83:c0:13:07:43:57:e1:df:e9:7c:bb:86:66:
70:33:57:3a:3c:55:0e:0c:4a:58:6d:c0:4c:c3:85:
9e:6b:0c:2c:d8:81:d4:b1:e0:62:59:16:60:c5:47:
8d:15:14:04:d1:dc:d7:4d:eb:7a:11:e9:e6:90:28:
e2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4B:0C:2B:58:FE:15:21:B2:C1:52:F0:59:BE:4F:E3:A5:53:06:72
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:20:9a:da:16:3d:50:d4:4f:a0:8a:a2:6b:c2:be:0d:f1:6e:
b4:df:b5:61:bf:14:c7:39:92:41:49:34:1c:dd:2a:9d:c4:46:
e9:94:e5:85:27:b4:b2:a5:7c:e1:3c:48:ef:12:1f:bd:9c:b7:
bd:58:28:77:ee:d9:5f:6b:7f:81:a1:a9:b3:32:ce:e4:2b:00:
e8:ed:09:b4:42:b7:f3:db:d7:df:f8:29:7e:ab:2a:ee:89:2d:
57:a6:85:ba:91:c6:f2:16:33:16:80:7d:2b:1c:1c:e9:8a:fc:
ba:c8:77:b9:ca:78:f6:76:cd:a3:8b:f6:6d:89:6e:d2:00:65:
65:b1:07:a1:5c:bf:ec:84:9d:f8:7d:c5:0d:b8:6b:11:fc:a3:
6a:0e:41:f2:a9:39:be:3f:de:db:93:fb:50:17:a4:6c:f3:87:
6b:67:02:1a:18:e1:0f:41:71:19:4b:30:29:99:8f:2b:73:ec:
32:a3:a6:37:5c:6d:6a:73:6d:57:f5:81:ea:da:85:54:64:93:
12:88:ac:81:d6:a2:e5:23:6f:1b:02:7e:64:a4:59:fe:90:ef:
c0:b2:ba:a3:c1:99:50:9d:22:a9:4a:f8:a1:9c:f7:e4:41:48:
e4:59:7a:3e:59:80:ef:d4:33:5c:c9:82:f5:cb:64:b9:c0:cc:
07:81:af:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:46:33 2025 by rpki-client