Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.mft
File: nebkJy4s44e0zASxQ_czCdcTYps.mft (raw, json)
Hash identifier: Um7cGhpXZcgOk3lsOUZ9qPFO4tpuD4XWZdEbKVt1Iog=
Subject key identifier: AD:7A:E9:8D:D0:6C:04:3C:A8:D4:02:C8:C5:F7:51:19:4C:FD:3F:A9
Authority key identifier: 9D:E6:E4:27:2E:2C:E3:87:B4:CC:04:B1:43:F7:33:09:D7:13:62:9B
Certificate issuer: /CN=9de6e4272e2ce387b4cc04b143f73309d713629b
Certificate serial: 01955B06088AAE3E0ACB37B7DA0E49D573AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.mft
Manifest number: 147F
Signing time: Mon 03 Mar 2025 08:01:16 +0000
Manifest this update: Mon 03 Mar 2025 08:01:16 +0000
Manifest next update: Tue 04 Mar 2025 08:01:16 +0000
Files and hashes: 1: nebkJy4s44e0zASxQ_czCdcTYps.crl (hash: JEjtb2oIcLmYdPZzTbiRIvBLzBWLMJOWB/t1ir0WUTU=)
2: wdWrYhgAvtXz2L_2rHuOQnR2pys.roa (hash: 9W7x5fPDoemvxBWf8HTErYR3bguqLTiKRDIt4wIvQlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:06:08:8a:ae:3e:0a:cb:37:b7:da:0e:49:d5:73:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de6e4272e2ce387b4cc04b143f73309d713629b
Validity
Not Before: Mar 3 08:01:16 2025 GMT
Not After : Mar 4 08:01:16 2025 GMT
Subject: CN=ad7ae98dd06c043ca8d402c8c5f751194cfd3fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:2f:29:63:be:cb:b6:2f:d2:7e:1d:b5:70:
6b:b8:46:2a:1d:a0:7c:4c:02:47:dd:e9:11:c0:37:
4d:11:a4:bf:a4:54:25:c7:cb:b3:f0:2a:18:1f:d2:
dd:a5:46:04:50:f1:1d:64:36:af:62:cf:1c:fd:eb:
5a:ce:32:36:f1:5d:93:02:5d:c3:52:c0:05:b4:d8:
a7:77:1d:f8:b3:d3:73:94:17:fc:6c:a4:04:ad:81:
12:df:7b:61:0d:87:d2:dd:66:39:50:3c:f6:20:7d:
7c:13:36:fc:c4:d2:fe:c4:78:c2:97:19:e6:c1:ce:
e8:b2:19:51:33:9f:e0:a4:0c:25:47:ff:e6:99:97:
c2:9c:bb:5d:e4:75:27:a8:33:fe:eb:8c:ae:3a:01:
07:55:e5:76:12:4d:4b:eb:94:86:f6:6a:75:14:d7:
51:c0:9b:66:78:e0:94:7f:0b:69:b5:a6:49:b7:bc:
86:9d:c6:46:5e:36:d8:02:6f:ac:df:c9:8e:4a:fa:
ac:8a:86:9f:5f:e7:c4:48:bf:42:82:73:26:ca:41:
ea:1e:cd:be:12:96:8c:93:43:a4:2d:ab:40:93:73:
7f:67:93:f5:99:37:23:be:c1:a2:0b:f3:85:c3:85:
67:2b:94:60:58:a1:f4:62:f7:70:bf:c4:4c:36:ea:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7A:E9:8D:D0:6C:04:3C:A8:D4:02:C8:C5:F7:51:19:4C:FD:3F:A9
X509v3 Authority Key Identifier:
keyid:9D:E6:E4:27:2E:2C:E3:87:B4:CC:04:B1:43:F7:33:09:D7:13:62:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bb:f4:40:f6:23:2c:23:db:70:51:48:ee:9a:a0:74:10:21:
56:3b:32:f8:3c:c0:e1:83:68:b0:a3:19:04:21:e3:53:22:db:
2c:53:3e:20:dd:1f:68:33:c0:54:08:65:28:75:b2:cb:4c:86:
f2:16:22:90:33:b3:1a:80:52:35:83:b3:35:62:a8:5a:65:13:
44:d9:39:16:8c:7f:f6:58:76:ca:14:94:d1:28:f5:f9:81:ef:
b4:81:59:91:89:e8:b4:6e:25:53:f3:83:e2:00:29:7a:94:6a:
f0:5f:e9:45:d3:1b:93:68:c2:ec:9c:69:d3:f0:b8:48:88:3e:
9a:d8:e8:7f:86:93:28:20:d9:6c:6f:58:7c:08:7b:88:7b:f1:
92:a5:66:9a:7e:ad:81:9f:9b:3f:ee:97:b2:5d:83:b4:52:f1:
dc:fe:62:4d:dc:2c:02:cf:48:f8:c3:12:d6:6f:9f:93:4c:c9:
67:c6:29:e8:b6:a4:23:22:71:9f:c6:45:cb:b1:94:80:54:ac:
fc:f3:d0:a0:4c:41:7b:c7:61:b8:1f:0b:33:8a:82:26:fd:21:
b5:92:a4:21:43:02:8b:b8:76:77:02:82:34:3c:14:75:de:4d:
48:dc:69:8b:de:ab:11:d5:ca:75:8d:9f:2b:39:a7:fc:0f:bb:
9e:94:f0:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVbBgiKrj4Kyze32g5J1XOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZTZlNDI3MmUyY2UzODdiNGNjMDRiMTQzZjczMzA5ZDcx
MzYyOWIwHhcNMjUwMzAzMDgwMTE2WhcNMjUwMzA0MDgwMTE2WjAzMTEwLwYDVQQD
EyhhZDdhZTk4ZGQwNmMwNDNjYThkNDAyYzhjNWY3NTExOTRjZmQzZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow8vKWO+y7Yv0n4dtXBruEYqHaB8
TAJH3ekRwDdNEaS/pFQlx8uz8CoYH9LdpUYEUPEdZDavYs8c/etazjI28V2TAl3D
UsAFtNindx34s9NzlBf8bKQErYES33thDYfS3WY5UDz2IH18Ezb8xNL+xHjClxnm
wc7oshlRM5/gpAwlR//mmZfCnLtd5HUnqDP+64yuOgEHVeV2Ek1L65SG9mp1FNdR
wJtmeOCUfwtptaZJt7yGncZGXjbYAm+s38mOSvqsioafX+fESL9CgnMmykHqHs2+
EpaMk0OkLatAk3N/Z5P1mTcjvsGiC/OFw4VnK5RgWKH0Yvdwv8RMNurVLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK166Y3QbAQ8qNQCyMX3URlM/T+pMB8GA1UdIwQY
MBaAFJ3m5CcuLOOHtMwEsUP3MwnXE2KbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmVia0p5NHM0NGUwekFTeFFfY3pDZGNUWXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNDdjOWEtMDE5Ny00NzYyLTg1MjMt
N2JhZDViYWU1MWU0LzEvbmVia0p5NHM0NGUwekFTeFFfY3pDZGNUWXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zNDdjOWEtMDE5Ny00NzYyLTg1MjMtN2JhZDViYWU1MWU0
LzEvbmVia0p5NHM0NGUwekFTeFFfY3pDZGNUWXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbv0QPYj
LCPbcFFI7pqgdBAhVjsy+DzA4YNosKMZBCHjUyLbLFM+IN0faDPAVAhlKHWyy0yG
8hYikDOzGoBSNYOzNWKoWmUTRNk5Fox/9lh2yhSU0Sj1+YHvtIFZkYnotG4lU/OD
4gApepRq8F/pRdMbk2jC7Jxp0/C4SIg+mtjof4aTKCDZbG9YfAh7iHvxkqVmmn6t
gZ+bP+6Xsl2DtFLx3P5iTdwsAs9I+MMS1m+fk0zJZ8Yp6LakIyJxn8ZFy7GUgFSs
/PPQoExBe8dhuB8LM4qCJv0htZKkIUMCi7h2dwKCNDwUdd5NSNxpi96rEdXKdY2f
Kzmn/A+7npTwiA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:10 2025 by rpki-client