Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
File: nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft (raw, json)
Hash identifier: tkk3toqQ3HAA8hoTbKzUpnqZhxABrnvhnH6L4XhlDa0=
Subject key identifier: F2:2A:14:CF:9E:8E:0C:D3:8B:9A:5E:0E:F5:CE:44:6B:68:03:35:16
Authority key identifier: 9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
Certificate issuer: /CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Certificate serial: 01979C0484A51040F5C74D54C88C826C8569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
Manifest number: 15C4
Signing time: Mon 23 Jun 2025 09:00:31 +0000
Manifest this update: Mon 23 Jun 2025 09:00:31 +0000
Manifest next update: Tue 24 Jun 2025 09:00:31 +0000
Files and hashes: 1: 3f3HIccO3MohgHCLC_LlaFxa7sU.roa (hash: kCeD4JlEOramRmkp3pFIST1qhopaS50IqgyTgjDtfVo=)
2: nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl (hash: W9DncLyPC76Jhr+Nf3aXjvk8IIRjdNFcCfXdolq5GFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:04:84:a5:10:40:f5:c7:4d:54:c8:8c:82:6c:85:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Validity
Not Before: Jun 23 09:00:31 2025 GMT
Not After : Jun 24 09:00:31 2025 GMT
Subject: CN=f22a14cf9e8e0cd38b9a5e0ef5ce446b68033516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:ae:06:f0:39:5d:78:00:eb:0f:ce:88:89:
e9:23:5f:65:d9:97:60:57:59:55:35:e4:a2:26:c9:
73:a2:83:81:05:c8:7d:ce:69:0b:60:6c:6e:7c:84:
0a:3f:80:0f:8f:0d:15:87:13:b1:32:b0:ef:a1:07:
4c:e2:b0:c4:ce:26:72:c7:f9:8c:5e:84:90:d1:a6:
fc:82:a2:46:19:e0:71:9b:10:f2:47:4d:21:4b:d2:
59:ac:50:e3:3a:39:c0:f5:f7:90:49:5c:03:5e:f1:
47:69:9a:c3:fb:d2:cf:f0:39:d6:1c:dd:b7:26:ca:
cc:98:50:df:a4:72:c1:99:f5:67:18:50:a0:d8:bf:
43:39:7c:35:91:40:38:07:30:55:bd:a0:0e:df:29:
37:75:2d:c3:96:a6:54:ea:76:71:86:42:12:16:2b:
9d:ca:98:58:54:91:92:52:e6:03:14:32:12:28:5e:
3c:79:af:cd:80:72:70:a4:69:2e:8f:a6:78:59:53:
96:78:24:7f:14:96:da:67:fc:7b:6f:85:cd:58:00:
2b:a8:9e:90:07:7f:92:f5:04:dd:57:eb:2d:2f:a3:
90:9d:f6:6c:fa:84:7c:d9:90:46:8e:a0:39:4c:83:
0e:c1:7a:2d:58:90:a8:23:04:aa:6c:89:44:5a:bd:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2A:14:CF:9E:8E:0C:D3:8B:9A:5E:0E:F5:CE:44:6B:68:03:35:16
X509v3 Authority Key Identifier:
keyid:9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a3:a2:c7:33:9f:e9:7a:48:0a:6d:a1:98:de:8a:9f:6d:aa:
08:bd:7f:b4:82:f3:c9:03:a6:8f:56:1f:5e:cc:c3:aa:c8:00:
0e:64:ba:69:74:2d:c6:e6:33:08:63:56:14:21:47:20:8a:50:
6b:34:92:38:a2:36:9d:cb:86:1e:c9:b8:d0:0b:58:51:fa:2e:
fd:39:bb:57:69:c2:36:60:8e:40:fb:7d:b5:95:46:f4:69:02:
e2:46:78:50:31:35:0a:1e:25:0c:32:d4:c3:fe:82:72:18:d2:
d9:60:36:f0:0c:09:f8:f5:06:f8:82:98:cf:bd:12:37:3e:f5:
b0:a6:f7:ea:5c:f9:11:d0:c5:74:ab:5d:f8:af:ce:e2:4a:88:
10:34:f9:4e:6e:73:49:16:14:37:78:5b:2a:d0:8f:da:cf:a2:
55:f8:ee:e0:b5:91:6e:8d:97:bf:7d:5a:fb:7b:cf:5b:3f:ea:
da:ea:45:ff:fc:9f:07:06:13:f9:90:f8:76:62:11:39:c3:e1:
d3:56:30:3f:71:d0:59:b4:3e:92:06:02:0d:7f:64:f7:a4:fe:
42:1e:d8:ad:82:73:65:26:b3:57:13:be:df:bf:ad:a9:8e:07:
c7:ca:78:e8:04:32:96:60:c7:8b:87:1c:b4:1a:35:e2:ca:8d:
51:74:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:37:49 2025 by rpki-client