Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.mft
File: NTcZltxVWphATH7nEu4pP_YEU4M.mft (raw, json)
Hash identifier: oFVarS22ReUxPFe2qdTEj/FnHGGcTca8MeVBHYChUak=
Subject key identifier: 94:E7:6F:E7:13:D9:51:08:D4:7A:A7:4E:6C:98:45:FA:85:FB:64:71
Authority key identifier: 35:37:19:96:DC:55:5A:98:40:4C:7E:E7:12:EE:29:3F:F6:04:53:83
Certificate issuer: /CN=35371996dc555a98404c7ee712ee293ff6045383
Certificate serial: 019320ACF46EF3D9C78175CDADC3CC2E4FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTcZltxVWphATH7nEu4pP_YEU4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.mft
Manifest number: 1055
Signing time: Tue 12 Nov 2024 14:00:25 +0000
Manifest this update: Tue 12 Nov 2024 14:00:25 +0000
Manifest next update: Wed 13 Nov 2024 14:00:25 +0000
Files and hashes: 1: NTcZltxVWphATH7nEu4pP_YEU4M.crl (hash: KxqSuc4VpgnYh+108ZxlRJKQyxIHkXkMuMR4TK8T6rM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:ac:f4:6e:f3:d9:c7:81:75:cd:ad:c3:cc:2e:4f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35371996dc555a98404c7ee712ee293ff6045383
Validity
Not Before: Nov 12 14:00:25 2024 GMT
Not After : Nov 13 14:00:25 2024 GMT
Subject: CN=94e76fe713d95108d47aa74e6c9845fa85fb6471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9b:d7:b5:4e:67:74:74:d8:68:b7:94:16:fc:
45:82:b4:38:da:23:81:43:2c:00:03:5b:d9:60:03:
2f:5e:36:0e:21:51:3e:0c:4e:4d:78:66:e7:61:92:
f0:a0:8d:e4:75:26:68:da:ea:df:17:6c:7c:8d:ea:
b0:28:de:89:94:e4:42:4a:c4:b7:0e:ef:51:2f:bd:
e4:53:17:47:05:ea:60:06:5e:61:ec:b3:e9:21:2d:
16:de:24:a3:02:2c:78:c3:30:e2:5a:a3:b6:d2:48:
a9:18:71:17:c2:68:ef:6e:1a:84:11:6f:92:af:9f:
55:c7:a6:d1:21:8d:c4:f2:f3:c5:4b:da:f4:34:27:
98:ca:ac:93:32:58:74:02:55:16:83:77:80:10:13:
27:f1:01:96:14:77:43:2f:ae:6b:22:f8:41:db:68:
19:fa:b2:f0:18:d7:8e:9f:6a:85:4b:37:02:96:de:
bd:48:3d:ce:b4:eb:e1:99:ac:84:4f:56:ba:55:16:
b9:af:bd:23:3c:11:5f:0c:86:93:61:ca:8e:6f:c5:
85:de:8a:6b:b3:4d:57:46:86:7e:28:f8:e8:98:4b:
31:36:ee:3d:11:0c:73:87:10:36:6c:65:7f:be:e6:
d3:a7:39:4b:3e:1e:de:ce:b3:5d:ce:56:3b:99:4f:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E7:6F:E7:13:D9:51:08:D4:7A:A7:4E:6C:98:45:FA:85:FB:64:71
X509v3 Authority Key Identifier:
keyid:35:37:19:96:DC:55:5A:98:40:4C:7E:E7:12:EE:29:3F:F6:04:53:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTcZltxVWphATH7nEu4pP_YEU4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:02:f3:95:be:6a:48:fb:b8:8a:26:75:bc:a6:75:d1:0a:c5:
69:4b:e8:a6:7e:f8:46:f2:a9:1e:a5:c1:f9:1f:c6:60:5e:f1:
8a:79:1f:e5:f6:36:6a:9c:4c:fc:93:a0:9c:3b:38:31:f2:dd:
8c:ef:79:bf:8d:61:6e:f4:9f:44:8d:35:ba:d4:90:e8:f9:e5:
b9:6a:4f:ee:01:24:46:17:c4:19:d6:84:2d:41:ed:02:11:33:
79:09:4c:6d:7f:69:7b:1d:85:b7:95:5a:08:4b:66:99:27:6c:
7a:8a:55:e3:26:15:ff:26:1a:f0:d6:02:ed:3b:2f:e5:fb:68:
2f:8a:28:0f:2c:0a:0a:14:64:40:4b:b0:8e:ed:0d:84:5e:2e:
08:0a:f3:d2:3a:03:3c:02:94:e4:39:61:f7:a5:66:2a:da:2b:
b9:8b:65:99:36:78:9c:1e:aa:b5:06:9f:66:2e:6e:3b:34:90:
d1:20:bd:88:1a:5e:77:d9:46:14:d3:78:e2:87:38:54:de:46:
8d:f0:e4:c2:b3:20:de:a4:a5:26:d4:56:ad:8d:c3:86:cb:0d:
cc:db:30:35:b6:eb:71:c9:0e:5d:c3:8c:93:e2:29:cf:ac:98:
11:0a:67:e1:f7:77:c9:e1:63:bb:28:e2:dd:fe:52:9b:5e:f9:
50:97:60:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:38:57 2025 by rpki-client