Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: UGTVrZHT2Zv9UfwvKvdtdBwhjW2j6+1wgisn0ckeoBI=
Subject key identifier: B5:5A:47:A5:44:99:D4:8D:55:E0:D9:25:7B:0A:69:06:2B:AB:B4:08
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 0199FB45B21D7805CE2F31DB9B400252AE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 07:01:12 +0000
Manifest this update: Sun 19 Oct 2025 07:01:12 +0000
Manifest next update: Mon 20 Oct 2025 07:01:12 +0000
Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: 4vl3DQ8eCndsJsf0k6J6CigcK1G4FQtKjW++yYhAdyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b2:1d:78:05:ce:2f:31:db:9b:40:02:52:ae:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Oct 19 07:01:12 2025 GMT
Not After : Oct 20 07:01:12 2025 GMT
Subject: CN=b55a47a54499d48d55e0d9257b0a69062babb408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:28:b7:1d:44:10:54:dc:03:41:e3:09:ad:
57:3f:be:a7:89:19:5b:8c:fa:f9:d0:29:d2:32:49:
ce:99:79:37:04:03:db:69:09:47:3b:10:e9:c3:a7:
d6:ba:97:a4:f1:33:38:06:99:4d:5a:85:79:8c:f6:
2f:b3:04:52:a3:b5:45:6b:47:c5:fa:28:c6:97:d7:
7b:41:41:dd:e6:c6:6c:27:40:9d:a9:60:32:bd:37:
79:c4:7e:e0:4b:e9:77:a7:2a:46:15:e9:e3:19:6a:
40:d9:b3:e2:c1:43:9c:42:b6:5a:23:8f:85:9a:70:
c0:f7:d4:79:c9:5a:dd:c5:ae:25:56:e4:70:5e:b6:
b3:a4:fd:af:0a:3c:7d:9b:3c:bc:f7:ad:82:8a:ce:
91:cf:ce:ce:38:50:07:d1:2e:77:8c:0d:e9:3c:68:
50:e1:e6:2b:20:47:87:a9:47:56:b7:b8:a8:4d:a8:
b0:f9:5f:73:a4:9e:33:2b:ad:1e:7f:4e:90:a9:1e:
0d:8e:c6:05:85:81:06:49:fd:5a:3e:19:00:40:da:
69:36:80:20:03:48:79:f1:8f:20:49:5a:ce:13:58:
c9:c5:c1:2f:f0:3d:8a:e7:b1:43:68:6c:1d:e5:49:
9c:86:58:50:c1:ac:2d:30:2f:70:e9:bd:42:2f:bb:
ed:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5A:47:A5:44:99:D4:8D:55:E0:D9:25:7B:0A:69:06:2B:AB:B4:08
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4e:47:a2:32:8a:94:78:c0:34:34:6f:6a:ad:5a:9a:a4:30:
ff:b9:b4:0d:fe:c5:7f:9c:0c:7c:40:d9:b8:87:15:e1:06:f5:
f9:ea:18:f4:7f:fd:23:86:c9:c9:f3:d8:cf:0a:db:90:67:a1:
f1:fe:92:05:d9:e9:1f:73:58:7d:b2:76:19:cb:06:8b:28:cb:
78:03:93:63:bc:dd:20:c1:6e:1a:1d:75:59:20:e5:6c:7f:0e:
f7:ce:e3:b3:8a:ec:4f:2d:58:2e:e1:29:6a:26:0c:ab:d9:56:
46:dc:bf:f1:ab:e4:3b:ae:46:d7:eb:04:e5:93:ee:86:d1:a0:
5d:af:45:d4:e0:41:ca:1a:0c:1b:53:e8:8e:81:30:6d:80:a8:
41:9e:ae:22:c3:7a:87:34:32:46:67:3c:97:b2:08:ff:7d:82:
63:89:99:1d:8b:88:7d:f8:81:c4:92:76:6d:18:2e:d8:ea:f9:
1f:79:b5:d3:b2:2a:a5:40:6c:11:f0:1c:8a:f1:da:ae:85:11:
c3:c4:82:bd:9c:e4:6c:40:9f:96:c6:c9:7e:b3:ea:ad:64:92:
2c:a8:b4:82:8a:ba:c5:a2:64:21:66:f0:80:83:1b:96:e7:df:
03:dc:16:1f:fb:2f:a2:38:80:16:c9:e9:7d:8e:f6:b8:3d:a2:
b0:bf:58:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:21 2025 by rpki-client