Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: dJybchJ7Tn1ZVCO3ooX82OMtZ/avK62LnCBCg9CA/eA=
Subject key identifier: 81:AB:20:4D:68:A8:C7:1F:CD:27:E5:2C:C5:A4:BD:D9:AB:A8:D6:78
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 019922FA35638479D5A535488D4D48417CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 07:00:46 +0000
Manifest this update: Sun 07 Sep 2025 07:00:46 +0000
Manifest next update: Mon 08 Sep 2025 07:00:46 +0000
Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: QhYvOxq72F/cAk92+zYPeTBoxgvYckhyOtkQG1eaUho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:35:63:84:79:d5:a5:35:48:8d:4d:48:41:7c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Sep 7 07:00:46 2025 GMT
Not After : Sep 8 07:00:46 2025 GMT
Subject: CN=81ab204d68a8c71fcd27e52cc5a4bdd9aba8d678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:9c:70:14:9c:da:10:3e:cf:ab:55:19:87:
0f:b1:5a:b2:45:1a:6e:b9:54:ee:02:47:41:40:f4:
41:ed:43:51:22:e7:a9:80:af:23:54:28:a4:11:62:
92:a9:03:94:a4:e5:d6:70:88:e9:66:3c:0e:92:df:
c1:ea:c1:89:6f:51:07:cf:eb:19:fe:3e:f9:c4:d0:
e5:d2:97:21:f6:81:de:47:6a:72:83:2d:86:d9:ab:
b8:49:41:db:8b:3d:5a:92:b2:3d:6e:b6:a1:87:15:
1e:10:53:f3:5d:a2:67:f6:41:85:8f:75:8d:19:91:
b7:ad:e6:37:7e:fa:4f:8a:62:de:bb:1b:a0:d5:30:
cb:75:5a:2b:b9:6a:3a:bd:f3:9b:18:55:57:0a:bd:
c4:cf:66:ae:07:78:99:60:8a:e2:db:4d:a8:5a:d1:
69:bb:c6:ab:d4:fc:b5:74:ba:02:1d:42:52:2d:83:
21:4a:e4:fe:01:e9:9a:e6:38:1d:88:20:91:c3:5b:
22:ba:59:67:2c:d2:c5:1f:eb:6a:f4:21:9d:75:10:
87:db:50:55:34:2f:3e:75:68:ce:26:67:96:e2:b9:
13:25:d8:5a:03:71:c6:ef:a5:d3:7d:61:fe:ed:e7:
d5:8a:b2:fe:86:bd:f1:56:fd:68:67:94:d1:73:0c:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AB:20:4D:68:A8:C7:1F:CD:27:E5:2C:C5:A4:BD:D9:AB:A8:D6:78
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e3:e7:b7:54:35:50:9c:4b:d5:4f:f4:77:01:11:3d:48:30:
c0:57:57:2a:c3:b6:fd:5d:af:22:51:f1:24:02:4e:00:4f:fd:
ed:9d:a9:54:46:4d:f9:4d:1b:9d:79:e5:c8:c6:53:ed:f9:b1:
d8:94:e2:9f:b6:53:90:f8:22:45:2f:b7:82:47:02:e8:87:eb:
58:6b:e9:af:a5:3e:c9:48:77:e8:01:74:df:d4:20:cc:97:0a:
0e:d7:d9:35:b7:68:99:db:b6:82:f4:81:dc:17:af:cb:46:78:
46:5a:f9:6a:f5:75:69:b4:b5:40:36:bf:90:ab:d4:89:6e:a0:
38:b8:db:1a:63:14:bb:b9:80:e6:e3:3d:74:91:38:cd:cd:9f:
91:3e:b3:f1:19:f0:4a:3c:d3:32:d3:17:55:fb:29:41:f9:a1:
27:5c:8c:2b:a5:fa:48:0c:9e:e8:c2:99:a3:6c:2e:d9:f1:a9:
b7:de:90:15:3a:ec:a1:19:e5:cd:4d:08:0e:e0:4e:78:82:8f:
f7:37:b2:67:c0:d5:59:56:8b:78:6a:50:47:b2:25:23:60:e8:
a4:25:82:e1:d0:81:1a:14:fe:a4:e5:74:60:e3:50:6b:72:27:
3f:b5:53:1f:81:8c:42:9d:34:39:a0:c4:c3:ab:e3:ce:5d:b3:
3f:3b:76:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:10 2025 by rpki-client