Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: O/kthV8rk85QUDPBNPMBnMEKayGlamhOQoboQoWsQ7c=
Subject key identifier: AA:17:E1:DD:DB:B6:73:32:51:8F:7A:F8:11:B9:41:7F:65:50:96:FD
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 01974DB290C8F7A9F965FEADE682A7F962AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 157B
Signing time: Sun 08 Jun 2025 04:00:37 +0000
Manifest this update: Sun 08 Jun 2025 04:00:37 +0000
Manifest next update: Mon 09 Jun 2025 04:00:37 +0000
Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: I8tbooCp0MFAoeagrwAd0UOQZBFnFSyT4O0k2Am2ZL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:90:c8:f7:a9:f9:65:fe:ad:e6:82:a7:f9:62:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Jun 8 04:00:37 2025 GMT
Not After : Jun 9 04:00:37 2025 GMT
Subject: CN=aa17e1dddbb67332518f7af811b9417f655096fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6b:42:ce:83:8f:73:8e:c8:a0:28:09:86:0e:
05:01:e4:06:cc:d2:db:8b:d0:cc:a3:e0:bc:26:54:
84:79:c0:28:49:65:5c:c0:70:21:25:31:26:2b:a6:
9e:58:ee:33:63:64:6d:78:72:1f:14:e7:1e:09:f8:
91:68:fe:c0:0e:bf:fd:ca:dc:8f:4f:8a:7e:43:ba:
aa:6d:6b:14:f8:e1:f0:c6:44:00:eb:c8:fd:06:22:
12:47:3d:0b:4f:2d:57:37:0d:a9:dd:0e:12:1e:34:
6f:73:46:70:bd:19:3c:29:90:c9:87:19:f9:85:45:
7b:a0:63:18:91:c1:61:3f:a4:71:ba:66:f7:1f:93:
91:b7:f1:17:fa:e1:d1:30:6b:5f:39:17:0a:e1:50:
98:50:c5:83:66:81:74:52:03:36:17:25:44:6e:78:
43:50:4f:60:8b:3b:a9:30:a7:93:4c:42:02:d9:9b:
df:15:18:71:86:fc:a8:f7:ed:b4:14:a3:2a:5c:29:
f3:17:5e:bf:ac:2d:9e:13:31:19:97:4d:fe:dd:2e:
a9:1b:ca:7a:73:8c:65:05:ab:fb:09:10:48:73:ce:
a9:e9:51:68:6b:5a:a2:84:74:7e:1d:96:81:47:d9:
a8:c9:91:b1:56:33:d8:b7:fa:81:03:45:66:f3:84:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:17:E1:DD:DB:B6:73:32:51:8F:7A:F8:11:B9:41:7F:65:50:96:FD
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a3:9c:47:90:68:4e:a7:6d:23:a7:b6:95:8d:11:c3:8e:48:
d0:eb:76:20:7d:5d:f7:17:ef:03:5e:6c:61:b0:de:09:f4:ec:
95:01:84:59:c3:02:9e:3b:b1:fd:c1:ea:9c:b4:cf:b0:01:80:
b3:65:98:4d:e8:28:6c:27:09:8c:4d:51:4b:a1:fb:e7:f1:49:
6e:54:ca:d5:27:be:68:83:06:14:50:f3:5c:3c:50:1f:ce:7a:
74:b1:fe:b7:c3:19:35:88:21:ce:13:52:55:2e:36:51:23:ea:
11:9e:c7:94:62:4b:97:75:19:cd:5c:f0:43:1a:64:77:da:60:
d0:02:e0:1a:05:fe:e0:fc:b3:79:84:bb:1c:bc:a1:42:13:56:
cd:86:7c:fb:c3:82:b5:fa:a4:56:73:90:5a:46:7a:0f:fb:8e:
a7:74:50:8e:77:b4:e1:02:86:3d:8e:37:94:b7:f6:ab:74:97:
ae:e3:ce:32:60:36:83:d0:d1:c7:9e:d9:05:57:f3:fb:23:36:
a1:66:fc:bc:70:02:33:82:b7:30:ad:30:6f:f9:76:6f:b8:27:
d2:dc:54:ee:1b:ef:21:bb:fc:67:e6:4f:01:b2:89:86:63:b6:
b8:60:4c:83:4a:3b:67:a8:55:b8:17:df:de:6a:c9:63:61:df:
b2:a3:a2:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNspDI96n5Zf6t5oKn+WKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjIxMWQ3ZjhmYTFhYWRkZWE0NDBjNTAxMjY5YmRhZjFj
YWI0NTIwHhcNMjUwNjA4MDQwMDM3WhcNMjUwNjA5MDQwMDM3WjAzMTEwLwYDVQQD
EyhhYTE3ZTFkZGRiYjY3MzMyNTE4ZjdhZjgxMWI5NDE3ZjY1NTA5NmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72tCzoOPc47IoCgJhg4FAeQGzNLb
i9DMo+C8JlSEecAoSWVcwHAhJTEmK6aeWO4zY2RteHIfFOceCfiRaP7ADr/9ytyP
T4p+Q7qqbWsU+OHwxkQA68j9BiISRz0LTy1XNw2p3Q4SHjRvc0ZwvRk8KZDJhxn5
hUV7oGMYkcFhP6Rxumb3H5ORt/EX+uHRMGtfORcK4VCYUMWDZoF0UgM2FyVEbnhD
UE9gizupMKeTTEIC2ZvfFRhxhvyo9+20FKMqXCnzF16/rC2eEzEZl03+3S6pG8p6
c4xlBav7CRBIc86p6VFoa1qihHR+HZaBR9moyZGxVjPYt/qBA0Vm84TBJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoX4d3btnMyUY96+BG5QX9lUJb9MB8GA1UdIwQY
MBaAFJyyEdf4+hqt3qRAxQEmm9rxyrRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jMzEwN2ItODE1NS00YTJhLTliNTkt
MmFkZmVjODM3MTExLzEvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jMzEwN2ItODE1NS00YTJhLTliNTktMmFkZmVjODM3MTEx
LzEvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqOcR5Bo
TqdtI6e2lY0Rw45I0Ot2IH1d9xfvA15sYbDeCfTslQGEWcMCnjux/cHqnLTPsAGA
s2WYTegobCcJjE1RS6H75/FJblTK1Se+aIMGFFDzXDxQH856dLH+t8MZNYghzhNS
VS42USPqEZ7HlGJLl3UZzVzwQxpkd9pg0ALgGgX+4PyzeYS7HLyhQhNWzYZ8+8OC
tfqkVnOQWkZ6D/uOp3RQjne04QKGPY43lLf2q3SXruPOMmA2g9DRx57ZBVfz+yM2
oWb8vHACM4K3MK0wb/l2b7gn0txU7hvvIbv8Z+ZPAbKJhmO2uGBMg0o7Z6hVuBff
3mrJY2HfsqOiVg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:40:51 2025 by rpki-client