Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: DJc2C5Cgtyi+nRDOSy10Q55wOWgWL8RCZt5StcnHAgU=
Subject key identifier: 0D:6B:7C:F5:14:BE:34:64:D7:A3:F5:42:C9:03:49:F1:1F:CD:58:8C
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 019A7112C8194B5830E44A0E41BDE6817608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: gDuenG+74/TOSy+AlktrtiFnQ29vs0K0ZjTKMXMJlvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c8:19:4b:58:30:e4:4a:0e:41:bd:e6:81:76:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=0d6b7cf514be3464d7a3f542c90349f11fcd588c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:5c:61:4f:71:ca:a2:d4:98:bd:20:8c:a0:
90:54:5e:35:b8:d1:ff:e5:64:0a:17:60:9f:68:7d:
0d:cc:9e:64:c1:4e:97:31:da:ea:38:26:cf:b4:02:
8f:f8:47:44:04:23:ea:a2:20:7b:8c:e9:87:34:20:
8e:b6:3f:07:f1:9c:44:c8:9f:e4:49:1e:10:ea:c6:
de:65:39:f0:f0:f3:ec:58:19:76:d0:ae:26:dd:c2:
39:89:61:4a:31:fd:fd:ff:e2:91:ae:06:b9:3a:91:
de:d2:b3:2b:32:64:52:22:33:ce:95:42:e3:9b:d5:
9d:9f:1c:76:b7:54:85:a1:0c:2a:d9:ca:7a:61:cd:
3f:5b:80:b6:ab:bb:af:44:57:4f:13:34:88:54:77:
08:e6:2f:b7:38:41:4b:60:64:19:e4:65:a2:5b:c0:
72:08:f8:83:60:dd:2c:93:11:c7:7b:5c:65:24:d1:
6e:33:19:a4:4a:54:e3:0c:5d:0d:84:cd:78:c4:6d:
63:70:35:92:bf:bc:49:34:75:53:67:53:98:b3:04:
9b:43:67:2c:74:4a:c3:f9:5b:3c:e2:fc:4b:6d:bd:
94:37:da:3b:67:ff:82:37:e2:a1:b6:96:3f:d7:56:
02:8d:61:1a:de:1c:a0:e0:85:e8:cd:09:f0:b1:f1:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6B:7C:F5:14:BE:34:64:D7:A3:F5:42:C9:03:49:F1:1F:CD:58:8C
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:88:58:15:c1:ad:4c:78:3c:f2:e7:f6:7c:d8:f0:6a:cc:db:
34:2d:04:89:d4:46:ef:d7:72:88:d2:ed:1c:f1:46:f8:39:d0:
52:36:d2:8c:9f:7f:99:df:a0:5f:7e:7f:f0:43:59:7d:60:ed:
e5:98:74:e5:b9:99:ce:0a:d2:95:15:17:ad:eb:7a:c6:94:e9:
01:2d:08:4c:f8:80:bf:16:fa:8b:ff:21:2e:5d:a3:8f:4c:17:
5a:5f:a7:af:e5:0f:ea:34:31:c4:91:c1:65:21:98:32:b9:ad:
95:68:f6:6c:2e:f4:99:7e:8a:4f:28:f3:07:db:da:e3:d2:98:
5f:cd:70:8a:cd:73:bd:c8:fa:97:ab:38:53:68:82:12:1a:67:
f6:7d:f0:14:40:5d:a6:f4:70:1c:f7:c8:dd:e2:37:2b:02:40:
d4:37:a1:df:9c:11:fa:37:f1:08:5f:e8:ca:56:a7:c9:8a:3d:
62:e1:6c:84:37:8a:cd:7e:ce:14:b9:29:c0:45:3e:dd:6b:2e:
57:66:2a:d4:47:ce:f0:c0:89:2a:f8:0a:f0:21:80:fe:46:cf:
d1:31:9f:40:aa:0f:7d:78:f3:76:86:71:49:ab:67:c9:ff:d7:
6d:43:97:15:61:58:0d:4e:44:bd:44:5a:5a:eb:db:85:4b:0e:
cf:0c:97:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEsgZS1gw5EoOQb3mgXYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjIxMWQ3ZjhmYTFhYWRkZWE0NDBjNTAxMjY5YmRhZjFj
YWI0NTIwHhcNMjUxMTExMDQwMDQ3WhcNMjUxMTEyMDQwMDQ3WjAzMTEwLwYDVQQD
EygwZDZiN2NmNTE0YmUzNDY0ZDdhM2Y1NDJjOTAzNDlmMTFmY2Q1ODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMBcYU9xyqLUmL0gjKCQVF41uNH/
5WQKF2CfaH0NzJ5kwU6XMdrqOCbPtAKP+EdEBCPqoiB7jOmHNCCOtj8H8ZxEyJ/k
SR4Q6sbeZTnw8PPsWBl20K4m3cI5iWFKMf39/+KRrga5OpHe0rMrMmRSIjPOlULj
m9Wdnxx2t1SFoQwq2cp6Yc0/W4C2q7uvRFdPEzSIVHcI5i+3OEFLYGQZ5GWiW8By
CPiDYN0skxHHe1xlJNFuMxmkSlTjDF0NhM14xG1jcDWSv7xJNHVTZ1OYswSbQ2cs
dErD+Vs84vxLbb2UN9o7Z/+CN+KhtpY/11YCjWEa3hyg4IXozQnwsfHMDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1rfPUUvjRk16P1QskDSfEfzViMMB8GA1UdIwQY
MBaAFJyyEdf4+hqt3qRAxQEmm9rxyrRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jMzEwN2ItODE1NS00YTJhLTliNTkt
MmFkZmVjODM3MTExLzEvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jMzEwN2ItODE1NS00YTJhLTliNTktMmFkZmVjODM3MTEx
LzEvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtohYFcGt
THg88uf2fNjwaszbNC0EidRG79dyiNLtHPFG+DnQUjbSjJ9/md+gX35/8ENZfWDt
5Zh05bmZzgrSlRUXret6xpTpAS0ITPiAvxb6i/8hLl2jj0wXWl+nr+UP6jQxxJHB
ZSGYMrmtlWj2bC70mX6KTyjzB9va49KYX81wis1zvcj6l6s4U2iCEhpn9n3wFEBd
pvRwHPfI3eI3KwJA1Deh35wR+jfxCF/oylanyYo9YuFshDeKzX7OFLkpwEU+3Wsu
V2Yq1EfO8MCJKvgK8CGA/kbP0TGfQKoPfXjzdoZxSatnyf/XbUOXFWFYDU5EvURa
WuvbhUsOzwyXlA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:19 2025 by rpki-client