
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
File: NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft (raw, json)
Hash identifier: ENQ0tyJOi4MqFX8d5lEAYIkMYomZj6bEXOWNJ66FRtE=
Subject key identifier: 27:C0:E3:89:D5:65:AA:15:19:B3:D8:8F:93:F4:57:12:FC:CC:32:1B
Authority key identifier: 37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
Certificate issuer: /CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Certificate serial: 0197331733F66C3F1D1297884638A8B5B4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
Manifest number: 1571
Signing time: Tue 03 Jun 2025 00:00:48 +0000
Manifest this update: Tue 03 Jun 2025 00:00:48 +0000
Manifest next update: Wed 04 Jun 2025 00:00:48 +0000
Files and hashes: 1: NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl (hash: jR9oWHQvkAp6MAsZOiuI/9aC7/iAnJ1eCZ5SQBehhKc=)
2: P1xjhgcrB_82E1dr812SN7zD2jw.roa (hash: 1Ps5EidA8vmNxrrB6k3QxJd8xmqPpWh99eg7n4cVK7o=)
3: q3oH4WqBy89nlHf_ohkPgGYaYoc.roa (hash: /Ya4Ak12mdvsioIt2KLsqtGYRCnDo04vhdOQ06CJDUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:33:17:33:f6:6c:3f:1d:12:97:88:46:38:a8:b5:b4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Validity
Not Before: Jun 3 00:00:48 2025 GMT
Not After : Jun 4 00:00:48 2025 GMT
Subject: CN=27c0e389d565aa1519b3d88f93f45712fccc321b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:03:61:3d:41:6f:31:33:bb:1a:97:97:79:
c5:af:ac:25:ee:7d:5f:34:a4:73:9c:ab:37:65:b1:
74:60:47:0d:58:5e:7e:7b:8a:be:5d:24:c5:fb:8c:
33:d3:d5:21:ef:8d:65:88:bc:1b:41:58:59:f0:8d:
74:a8:9a:70:62:bd:51:67:27:3d:40:de:70:b0:7d:
87:2f:80:d0:ff:3b:32:c3:86:4a:09:2a:10:5c:24:
cb:c6:de:5d:9d:fa:3c:78:2e:40:37:07:bf:26:19:
76:a6:fc:06:32:89:fd:47:c8:c5:b6:53:83:89:ac:
6e:c2:e5:ff:9c:05:d5:1e:d9:da:db:88:b3:60:c1:
c8:4d:0a:3a:19:0e:d5:a1:fd:05:8f:9e:d5:b5:b2:
60:d9:77:d5:fa:82:3e:44:76:57:a0:78:84:e6:b9:
4f:78:18:d0:5e:a5:df:ef:75:fc:25:bc:15:d7:53:
c0:51:62:19:dc:d5:a2:11:3d:6c:07:04:e9:f3:84:
88:00:cd:c2:65:33:75:fe:0c:56:52:c3:90:92:9f:
74:c9:71:a1:ee:ad:a5:a3:a1:09:f8:f5:8c:47:27:
64:a3:23:a1:cb:1f:aa:c9:de:98:d4:ae:a1:5c:a4:
69:60:dc:90:51:02:3f:0f:5b:52:bc:98:5e:41:68:
1c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C0:E3:89:D5:65:AA:15:19:B3:D8:8F:93:F4:57:12:FC:CC:32:1B
X509v3 Authority Key Identifier:
keyid:37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e8:2d:0e:35:4e:14:32:59:06:ea:4e:86:00:ec:45:e5:f4:
d9:21:af:cb:72:ee:9b:42:7b:1b:7d:c8:a4:78:71:45:c0:5b:
20:00:e8:74:cc:91:6b:71:a0:42:ee:bf:6d:af:37:a3:9e:6a:
c8:d8:78:b6:15:29:81:d7:68:0d:af:d0:f8:12:fd:c6:3f:07:
68:4e:3c:cf:91:50:ac:27:5b:94:12:34:f0:37:b5:15:3d:5c:
45:4f:5e:88:c5:60:92:ee:06:09:2b:b8:c9:a0:39:32:17:f8:
c7:ba:01:33:11:fa:d6:1a:87:a4:77:ce:72:82:bd:7a:68:fe:
54:78:94:2b:9f:d7:ca:81:27:d6:74:ca:3b:37:09:6d:4b:06:
50:c2:32:73:5f:57:84:b3:6c:85:2d:58:36:7e:bc:05:50:60:
14:00:87:2f:aa:7b:49:4d:a6:76:74:37:d6:a3:e2:0f:80:b6:
8c:20:fc:b9:8a:a2:b7:b7:ce:a2:21:d0:75:3b:5a:6a:31:53:
3e:51:2c:9b:1e:1f:43:f5:85:c7:a9:9c:cc:4a:6b:87:9d:15:
b1:5b:e5:c7:3d:ed:ab:9a:70:99:3a:bc:b6:20:a1:82:0e:b9:
e9:31:7c:b6:fd:5a:1d:a2:8e:ea:0f:74:4e:1a:1f:ca:cb:e5:
dd:a7:84:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:53:42 2025 by rpki-client