Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: 9EUYIxmEcBR/Lb97EC7qGRZPOuXnmj1bFL3r2h/Yayc=
Subject key identifier: CC:2C:26:9F:FF:39:7F:D9:66:7E:7E:F8:00:38:65:12:F2:58:CF:BA
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 0197B7EA15F8C345EEC262CCF21E5873025B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 19:01:00 +0000
Manifest this update: Sat 28 Jun 2025 19:01:00 +0000
Manifest next update: Sun 29 Jun 2025 19:01:00 +0000
Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: 7fEawvA/L9w1G00GiS39+SOaWuup2IxBuPyLmrPt0v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:15:f8:c3:45:ee:c2:62:cc:f2:1e:58:73:02:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Jun 28 19:01:00 2025 GMT
Not After : Jun 29 19:01:00 2025 GMT
Subject: CN=cc2c269fff397fd9667e7ef800386512f258cfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:41:e7:72:4e:ab:8c:f8:c7:28:cb:d9:06:
cd:f9:44:01:fd:fc:5c:23:71:5a:68:5f:be:2b:fb:
18:7e:0d:d5:fd:6d:8c:f3:9f:b9:da:d7:26:06:35:
77:b0:e4:38:ae:21:6e:4f:d5:db:dc:94:0e:98:8a:
61:1a:e0:b0:82:79:21:e3:d1:ec:36:54:24:08:57:
75:dd:dd:39:46:97:32:a5:5d:15:8e:44:22:89:4a:
90:20:57:c3:c7:28:0c:ca:11:29:a3:eb:a5:8f:b4:
80:ad:33:eb:1e:68:6a:39:20:49:82:6d:db:aa:62:
37:88:ad:ac:4d:6e:6e:dc:fd:ee:d7:2f:5d:f3:63:
23:12:79:dc:87:f5:50:91:58:bf:27:03:ac:d9:10:
8c:a3:04:a4:49:8b:c1:67:dc:6a:dc:fa:75:a0:f5:
12:1e:cc:4d:92:3c:69:43:48:87:a2:b4:3a:93:9a:
09:54:75:bc:50:d3:3b:59:7e:88:6e:b3:8e:98:aa:
31:fd:ad:16:f7:20:e5:20:7b:ce:63:9c:a8:ef:b6:
95:b6:1e:8c:4f:09:f2:fa:56:dd:8f:8a:91:fa:45:
8c:3e:ff:09:80:bf:e7:0b:ab:cb:27:05:b7:68:69:
07:d7:7e:68:57:4d:26:d4:84:0f:09:82:54:19:1b:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2C:26:9F:FF:39:7F:D9:66:7E:7E:F8:00:38:65:12:F2:58:CF:BA
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:48:70:c3:26:3c:fb:6c:9d:0f:d7:76:3d:c0:56:c9:c4:b1:
87:64:78:bf:fa:de:9a:32:07:be:29:4a:d5:42:25:52:b3:86:
35:bd:71:8d:ea:fa:08:78:d4:3f:a5:61:a7:10:85:d1:bd:bd:
c2:57:c9:35:45:2c:19:38:ff:31:3b:fe:b4:35:a2:06:aa:05:
9e:c9:08:7f:a8:f3:72:d0:64:83:9d:8c:0e:76:a6:10:81:6f:
67:f3:a3:1a:02:e8:d5:d6:55:1a:46:96:03:84:84:e0:c1:b4:
cc:7f:39:93:41:9c:76:d0:5b:a0:bf:a6:fb:d2:f5:c3:85:48:
78:05:03:a6:58:0f:cf:ce:70:a8:c8:fd:fc:b3:89:1b:03:c1:
a2:d6:b9:eb:9b:1e:70:90:cf:18:62:eb:00:95:5e:3a:ed:16:
eb:97:2b:6c:f8:15:d6:be:bd:33:95:0f:a8:6f:5e:0c:9c:ef:
44:1b:20:f9:6d:1d:cb:3b:ab:fc:df:59:8c:7e:7e:d1:1b:40:
f1:84:ee:7b:de:ce:23:74:3e:2c:de:8e:8d:7c:7d:f5:1a:bb:
80:60:7a:a6:cd:96:8e:49:80:9c:c0:31:3a:18:92:ef:fb:82:
20:17:d4:a2:59:33:9f:9f:4b:0b:d6:29:f0:b1:11:f9:a2:53:
c4:79:5c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:18 2025 by rpki-client