Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: EZzrrR3i0kkkRVJroQ/aPWVQlVJwds9yfyqjWeBCTHM=
Subject key identifier: EF:4B:9C:6B:26:B6:AC:B6:6B:BD:26:AC:5F:99:13:93:28:88:24:54
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 01965492C1C6131F30D187DAFFA182F8FC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 19:00:26 +0000
Manifest this update: Sun 20 Apr 2025 19:00:26 +0000
Manifest next update: Mon 21 Apr 2025 19:00:26 +0000
Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: ugLIjROfEFh+TAb7f0pF81vduJpKYdC+t2Oz3W3GNfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:c1:c6:13:1f:30:d1:87:da:ff:a1:82:f8:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Apr 20 19:00:26 2025 GMT
Not After : Apr 21 19:00:26 2025 GMT
Subject: CN=ef4b9c6b26b6acb66bbd26ac5f99139328882454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:18:ac:b5:b5:75:ed:28:32:e0:c2:a1:7f:a3:
37:6a:b2:6d:36:b9:03:35:6e:08:cc:d4:1e:37:89:
3c:d4:fb:3a:d9:4a:8a:99:c9:44:63:a1:bd:c0:48:
36:54:7e:ac:3f:1d:4b:36:ab:4f:ff:2a:8d:29:74:
ac:4a:19:7f:56:4d:9a:7a:78:37:ac:32:58:c0:7a:
8f:7c:59:15:47:48:59:34:d2:d6:5c:94:c1:67:f5:
70:6f:61:d1:bc:d4:8e:28:9f:80:5e:fc:4c:1d:69:
2f:2e:da:d1:67:8a:f4:53:c6:13:cf:99:93:38:d8:
98:87:4f:03:0d:9b:b1:f3:6d:bb:e8:68:4e:1e:ff:
bd:19:a3:45:f7:6b:a0:51:2b:b8:bf:61:2c:4f:b0:
e4:7f:ee:95:c2:87:f3:88:e4:79:c8:dd:1b:6f:83:
f8:9a:0b:33:3d:03:c2:21:36:e3:c4:d8:0c:70:a3:
73:b7:b4:71:f0:6c:48:26:8c:94:f0:da:90:01:b0:
53:a6:e7:a9:a2:2c:e0:1e:6b:e9:b6:c9:b0:c9:26:
55:98:af:54:1a:e5:f7:26:89:e5:eb:4d:23:d9:4e:
85:1c:9a:6c:0f:06:54:57:04:87:8e:90:5a:15:30:
cf:66:0b:71:32:9e:7f:55:b7:73:28:56:b7:18:d0:
aa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4B:9C:6B:26:B6:AC:B6:6B:BD:26:AC:5F:99:13:93:28:88:24:54
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:56:38:e1:ec:6b:67:8b:7f:f1:0e:45:1a:9b:46:9e:10:42:
33:a4:58:f2:10:1f:5f:60:7c:a6:d8:f0:4c:72:bb:48:21:e7:
57:0b:bc:2c:75:77:40:38:6a:92:3b:ad:69:9c:ac:ff:22:bc:
59:84:86:8f:62:51:10:2c:06:b2:23:dc:fd:7b:fc:9f:21:06:
85:05:41:0e:6f:c9:4e:57:d9:73:65:fe:2f:4b:e9:10:a5:2c:
71:d4:9a:25:65:b4:ce:74:47:e0:e4:d8:d1:58:8f:32:e7:82:
75:d3:ba:d4:bb:d1:76:63:07:69:9c:63:33:df:09:1e:98:c7:
a6:0f:21:61:68:24:09:18:e6:5a:af:30:5d:49:c4:3a:f8:55:
e3:14:65:aa:16:3a:e2:05:11:8d:03:fe:f3:f7:76:58:d7:db:
ce:88:4f:d5:ea:bd:ab:2a:84:73:09:56:20:cc:ba:8f:a5:14:
19:a4:6e:00:5c:c9:8a:77:16:64:ec:6e:bc:22:5f:c3:ec:ae:
41:e6:6f:e0:a5:2b:51:2f:99:85:49:2a:a9:1d:e3:50:45:9f:
53:22:e0:e3:ae:27:c8:7d:ea:53:1f:d3:c3:6e:fa:d7:7b:6b:
87:36:5a:18:84:b0:cf:9e:e7:bd:63:96:6d:c3:c0:34:10:c3:
1b:9e:37:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUksHGEx8w0Yfa/6GC+PyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjIxMWQ3ZjhmYTFhYWRkZWE0NDBjNTAxMjY5YmRhZjFj
YWI0NTIwHhcNMjUwNDIwMTkwMDI2WhcNMjUwNDIxMTkwMDI2WjAzMTEwLwYDVQQD
EyhlZjRiOWM2YjI2YjZhY2I2NmJiZDI2YWM1Zjk5MTM5MzI4ODgyNDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4histbV17Sgy4MKhf6M3arJtNrkD
NW4IzNQeN4k81Ps62UqKmclEY6G9wEg2VH6sPx1LNqtP/yqNKXSsShl/Vk2aeng3
rDJYwHqPfFkVR0hZNNLWXJTBZ/Vwb2HRvNSOKJ+AXvxMHWkvLtrRZ4r0U8YTz5mT
ONiYh08DDZux82276GhOHv+9GaNF92ugUSu4v2EsT7Dkf+6VwofziOR5yN0bb4P4
mgszPQPCITbjxNgMcKNzt7Rx8GxIJoyU8NqQAbBTpuepoizgHmvptsmwySZVmK9U
GuX3Jonl600j2U6FHJpsDwZUVwSHjpBaFTDPZgtxMp5/VbdzKFa3GNCqawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9LnGsmtqy2a70mrF+ZE5MoiCRUMB8GA1UdIwQY
MBaAFJyyEdf4+hqt3qRAxQEmm9rxyrRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jMzEwN2ItODE1NS00YTJhLTliNTkt
MmFkZmVjODM3MTExLzEvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jMzEwN2ItODE1NS00YTJhLTliNTktMmFkZmVjODM3MTEx
LzEvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVY44exr
Z4t/8Q5FGptGnhBCM6RY8hAfX2B8ptjwTHK7SCHnVwu8LHV3QDhqkjutaZys/yK8
WYSGj2JRECwGsiPc/Xv8nyEGhQVBDm/JTlfZc2X+L0vpEKUscdSaJWW0znRH4OTY
0ViPMueCddO61LvRdmMHaZxjM98JHpjHpg8hYWgkCRjmWq8wXUnEOvhV4xRlqhY6
4gURjQP+8/d2WNfbzohP1eq9qyqEcwlWIMy6j6UUGaRuAFzJincWZOxuvCJfw+yu
QeZv4KUrUS+ZhUkqqR3jUEWfUyLg464nyH3qUx/Tw27613trhzZaGISwz57nvWOW
bcPANBDDG543aQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:52 2025 by rpki-client