Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
File: NxYpWi0WQ853rHom4CJke8R5Awc.mft (raw, json)
Hash identifier: rP1agpGNpO+FgS4Ti/QJ+pqGlhXMY/NZfTsd+uM14z8=
Subject key identifier: 36:EF:E1:00:54:C3:30:22:0A:67:9C:F7:B9:3D:75:DE:C4:1A:B5:D4
Authority key identifier: 37:16:29:5A:2D:16:43:CE:77:AC:7A:26:E0:22:64:7B:C4:79:03:07
Certificate issuer: /CN=3716295a2d1643ce77ac7a26e022647bc4790307
Certificate serial: 0196D69B62AECFE21591DF5BF0DBA571C51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxYpWi0WQ853rHom4CJke8R5Awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
Manifest number: 08BB
Signing time: Fri 16 May 2025 01:00:29 +0000
Manifest this update: Fri 16 May 2025 01:00:29 +0000
Manifest next update: Sat 17 May 2025 01:00:29 +0000
Files and hashes: 1: NxYpWi0WQ853rHom4CJke8R5Awc.crl (hash: FlRA1x5jDWskwReeZe+NliZP6DhV6Mm2T7RvblRJbio=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d6:9b:62:ae:cf:e2:15:91:df:5b:f0:db:a5:71:c5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3716295a2d1643ce77ac7a26e022647bc4790307
Validity
Not Before: May 16 01:00:29 2025 GMT
Not After : May 17 01:00:29 2025 GMT
Subject: CN=36efe10054c330220a679cf7b93d75dec41ab5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:0c:11:09:f1:a2:10:01:5a:51:88:d6:2e:
13:a4:13:8e:dc:f7:be:97:67:4f:ea:cf:43:7d:35:
bb:ed:67:4e:90:67:11:30:54:16:cb:f4:e8:69:4d:
87:74:c6:c7:03:ab:52:15:4a:92:ec:88:ab:be:5c:
18:eb:fd:4a:05:0d:40:30:b9:60:48:c3:80:c3:e9:
1c:cc:2e:1e:c0:f5:0d:3e:13:d9:2e:12:56:52:e4:
b3:16:e6:81:e0:a3:3f:54:63:4f:07:b9:3a:fb:8c:
8b:9b:09:f6:d0:9a:ad:fe:ca:6c:eb:22:a9:4d:23:
98:b9:2d:44:17:05:77:a9:78:6d:01:6b:98:42:09:
df:40:58:eb:c3:2f:9d:c9:fe:4e:5a:43:90:bf:8b:
a4:f4:3c:f1:dc:69:8a:8b:cc:d6:28:51:a8:f6:81:
b0:69:21:f1:77:09:85:ac:f8:e3:0f:97:fc:c2:f6:
37:d2:d1:04:69:21:84:dc:5a:5d:dd:a0:8a:c9:88:
f0:d6:f8:8a:6f:d9:1f:1d:c6:ae:80:f4:1f:e0:86:
66:8b:f0:8d:d5:4e:64:37:37:b0:d9:44:ec:fb:e4:
4c:ce:f2:6c:77:5e:5b:a9:55:c5:f1:fc:8e:e6:7f:
a2:81:f6:98:55:9d:f1:5c:1f:bc:e6:ba:2d:20:51:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EF:E1:00:54:C3:30:22:0A:67:9C:F7:B9:3D:75:DE:C4:1A:B5:D4
X509v3 Authority Key Identifier:
keyid:37:16:29:5A:2D:16:43:CE:77:AC:7A:26:E0:22:64:7B:C4:79:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxYpWi0WQ853rHom4CJke8R5Awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ee:d4:b3:81:04:9b:95:12:be:d9:d7:58:14:77:91:99:08:
a7:d6:5d:f8:ef:c6:4f:8a:c6:cf:13:b1:53:b5:22:e1:bb:a2:
b2:8f:7a:33:1f:03:da:42:1d:ca:55:97:05:c4:cb:d3:7c:4f:
88:3f:9b:31:75:38:7a:45:d8:a8:4c:aa:ab:d6:29:32:5f:3c:
27:94:c5:8d:31:ac:3e:01:dd:a5:cc:86:00:54:27:26:bf:a6:
0d:38:8f:74:1f:77:e6:e9:f0:2b:46:86:2a:6a:ad:ad:9c:d3:
62:62:7b:fc:c4:6f:dd:97:87:a0:c0:77:89:d4:aa:c6:61:dc:
7b:50:ce:56:5a:51:78:ba:5a:76:62:1c:40:0b:ff:b8:97:b7:
00:28:7c:b8:67:c8:de:ee:38:38:e9:d6:7c:ad:b0:57:c7:d8:
1b:1c:ec:ca:d3:42:67:ae:f5:9c:f9:be:cd:99:43:0c:88:df:
15:59:3b:05:30:81:eb:c6:1b:d1:28:dd:d8:2d:56:62:1b:82:
7d:8f:c3:3e:0d:19:8a:d4:27:65:5c:68:1e:b9:33:5a:a2:5b:
36:d6:02:35:d0:1c:31:0b:c9:af:73:7e:b3:16:9c:94:4b:f3:
05:62:ce:fb:17:c9:72:b6:24:4d:0d:a6:83:3b:67:0a:a0:95:
41:7b:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:20:43 2025 by rpki-client