Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/NvVXeSqri72ebeTuxtJ4V3AfM00.mft
File: NvVXeSqri72ebeTuxtJ4V3AfM00.mft (raw, json)
Hash identifier: ZmVp32eezjoi4EjaUTphLfSmvnM+jFg5ZtRnPLhRxr0=
Subject key identifier: 14:60:95:8B:39:67:91:FE:D7:5F:BA:3A:7E:DA:F7:CA:07:A4:7D:5A
Authority key identifier: 36:F5:57:79:2A:AB:8B:BD:9E:6D:E4:EE:C6:D2:78:57:70:1F:33:4D
Certificate issuer: /CN=36f557792aab8bbd9e6de4eec6d27857701f334d
Certificate serial: 018CB3F31E0F09C05288A11A67BAA2016F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvVXeSqri72ebeTuxtJ4V3AfM00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/NvVXeSqri72ebeTuxtJ4V3AfM00.mft
Manifest number: 0A26
Signing time: Fri 29 Dec 2023 05:01:43 +0000
Manifest this update: Fri 29 Dec 2023 05:01:43 +0000
Manifest next update: Sat 30 Dec 2023 05:01:43 +0000
Files and hashes: 1: NvVXeSqri72ebeTuxtJ4V3AfM00.crl (hash: 0R1aHZqcPJgPFxC2tuICQacAwgtTPoRL5uHZolEHdsM=)
2: rAxgo8YZXn2qYtk62k70vi1KllU.roa (hash: RVneDvaDE2PodjGs/rtxPmx2/3dhavip9M+9iiol9Oc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b3:f3:1e:0f:09:c0:52:88:a1:1a:67:ba:a2:01:6f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f557792aab8bbd9e6de4eec6d27857701f334d
Validity
Not Before: Dec 29 05:01:43 2023 GMT
Not After : Dec 30 05:01:43 2023 GMT
Subject: CN=1460958b396791fed75fba3a7edaf7ca07a47d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:90:7a:e2:9b:85:a4:29:9c:35:11:2b:49:
f0:4d:3f:62:e8:42:72:a1:f7:30:a6:6f:fa:4c:97:
c6:80:4e:2a:2d:17:fe:6b:ae:fd:54:d0:35:33:1d:
e3:f7:55:fe:dd:ea:08:d6:d6:50:ea:89:4f:ac:71:
9a:bd:52:bb:4b:40:08:26:f2:a0:7e:14:24:20:fe:
55:34:27:94:05:f3:76:48:fe:5e:53:39:6b:65:e8:
a6:fe:7d:bd:34:30:be:11:0c:06:a5:b4:db:3a:e1:
ab:a5:40:4a:23:51:db:19:09:88:42:38:cc:d7:d6:
62:3d:5d:4f:fd:92:f0:38:1c:8f:c1:bf:93:78:dc:
89:fe:d4:3d:45:cb:7f:8e:e2:cb:9e:bc:16:28:cb:
ab:2c:2c:ba:5d:cd:bf:1f:ab:37:90:13:45:d5:3c:
a9:84:ff:e9:cc:8d:01:48:e5:2b:57:13:46:5d:c8:
9c:b5:8e:91:be:26:4a:3e:1b:49:e0:32:57:da:a2:
de:84:89:77:1b:54:8b:cc:3f:c9:1b:4c:5a:fa:da:
0e:34:61:07:59:f5:88:54:80:f4:a6:0c:3b:e2:72:
4e:9a:e5:46:b3:aa:55:5e:c2:fc:e9:03:47:36:33:
06:f4:ac:ac:91:24:b8:b5:73:71:cc:85:46:45:cb:
a4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:60:95:8B:39:67:91:FE:D7:5F:BA:3A:7E:DA:F7:CA:07:A4:7D:5A
X509v3 Authority Key Identifier:
keyid:36:F5:57:79:2A:AB:8B:BD:9E:6D:E4:EE:C6:D2:78:57:70:1F:33:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvVXeSqri72ebeTuxtJ4V3AfM00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/NvVXeSqri72ebeTuxtJ4V3AfM00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/NvVXeSqri72ebeTuxtJ4V3AfM00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:38:67:c5:85:6c:03:c7:c8:b8:a6:12:9d:9e:75:a9:32:dc:
3d:db:92:a2:43:1e:52:0a:eb:11:8c:db:5e:1c:24:73:d9:1c:
09:95:c6:82:20:cc:82:c6:c3:48:c0:f3:19:7a:9e:6e:f9:fa:
b8:6e:64:6e:f0:97:23:5c:3d:a9:bd:aa:e3:5b:df:b9:90:5b:
f1:68:04:34:f0:ac:96:18:af:9c:5c:b2:0a:4e:65:a6:41:90:
13:e6:ce:29:03:d3:d1:48:95:ac:3f:50:35:a2:1d:91:6c:a2:
c3:0c:48:e0:06:cb:ca:61:21:b1:aa:9c:1f:63:4f:61:2d:5c:
b6:06:53:b2:b2:d1:66:a5:0d:ad:86:b3:55:c9:0b:f8:10:3c:
67:0b:77:60:45:0a:72:69:a6:9b:29:d9:a6:2f:2a:e2:4f:ce:
82:35:ea:f9:16:16:f4:48:4a:3e:5b:0a:e0:41:b5:ea:7e:e6:
e6:80:c2:5d:df:e2:38:62:3b:ad:93:12:74:84:2d:c0:ec:0a:
e0:c4:d5:ea:d3:14:2b:13:18:25:a8:5e:c7:07:5b:b5:ef:5b:
7e:65:cd:fd:0b:0b:01:cb:cf:c1:f7:b9:dc:6a:c1:24:d1:31:
06:da:e5:8b:bf:4b:54:4b:3b:6e:a4:3d:87:c4:d4:60:35:73:
08:03:31:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:32:24 2025 by rpki-client