Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
File: nMIzEMkVpP4JXht0oGbRze5HhD8.mft (raw, json)
Hash identifier: SXuf+AGZY7kX4850CaSHWhJCUhccR9xtzxUN6RUwdXI=
Subject key identifier: 89:86:15:70:5C:31:80:8E:9D:D2:A2:C0:E5:1B:88:43:6F:E9:A0:E1
Authority key identifier: 9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
Certificate issuer: /CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Certificate serial: 0197439CC171C452EEE2DCDFF2DEF29D6BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
Manifest number: 0979
Signing time: Fri 06 Jun 2025 05:00:35 +0000
Manifest this update: Fri 06 Jun 2025 05:00:35 +0000
Manifest next update: Sat 07 Jun 2025 05:00:35 +0000
Files and hashes: 1: RmN9zhNzrcosUTM-5d1gTAjxE1E.roa (hash: uL4bwjKQw+5HAkk/uHdj99zle5Zhy8r9K/Xf1FOLrg0=)
2: nMIzEMkVpP4JXht0oGbRze5HhD8.crl (hash: zZTBF61mp+6ekJk8a78//61/69WPcwmoETEWa6CXmo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:9c:c1:71:c4:52:ee:e2:dc:df:f2:de:f2:9d:6b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Validity
Not Before: Jun 6 05:00:35 2025 GMT
Not After : Jun 7 05:00:35 2025 GMT
Subject: CN=898615705c31808e9dd2a2c0e51b88436fe9a0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:66:36:2e:8f:1a:93:32:cb:52:2e:48:b2:
a1:a7:b7:0e:c8:fd:8f:c1:e5:a0:a3:7c:40:f8:44:
c7:49:d6:fc:bc:ec:8a:62:f3:96:05:8a:0e:3a:d9:
63:47:ff:89:a8:89:6b:2f:fb:ea:ea:b8:bf:92:ee:
cb:e1:5b:b0:0e:61:7c:2a:01:8c:91:6f:0e:a9:c2:
b5:75:ab:87:d9:c2:1e:68:c2:c8:44:e2:21:5a:35:
bd:2b:3b:0b:fe:94:41:b8:b9:51:c7:b8:f7:0a:2d:
48:0f:f8:dd:19:d7:4f:a0:f4:33:72:4c:ba:0d:18:
4f:e4:a0:a8:78:89:74:fa:b0:d5:aa:6f:90:bb:a7:
d8:d0:55:bf:fb:0c:1c:e4:c1:51:34:ea:f6:b9:ee:
43:1a:9e:b7:56:58:cd:a7:17:54:10:10:90:d0:cf:
96:0a:6d:a6:a9:f7:a1:1e:54:48:82:be:d7:72:ef:
ff:a4:24:85:7d:0c:b1:c8:f0:ae:3d:07:5a:ab:6c:
74:5d:49:43:61:62:75:a5:4f:3d:ad:36:fb:d0:5a:
c1:21:3b:52:31:55:fa:0c:fa:85:09:48:62:99:6c:
52:80:c5:78:a1:70:e5:ba:50:e3:d1:ba:61:c1:d1:
33:a2:be:28:74:6c:c7:45:44:46:f2:27:ed:e2:aa:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:86:15:70:5C:31:80:8E:9D:D2:A2:C0:E5:1B:88:43:6F:E9:A0:E1
X509v3 Authority Key Identifier:
keyid:9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:aa:bd:63:65:71:a0:f2:22:ac:f1:93:8b:12:25:76:27:4f:
64:d7:33:e9:85:58:92:3a:06:a2:df:33:b4:81:ed:bf:93:3d:
c3:82:97:c4:a7:99:c7:36:c1:30:df:92:64:9a:89:8e:1c:f2:
cd:fd:64:d8:c0:5f:c5:07:9d:6b:47:36:52:e8:9c:6b:10:78:
d5:84:3c:5a:16:3d:40:cc:9e:a9:02:03:77:e2:20:23:0b:b7:
b2:d8:6d:25:91:1b:d7:b5:e4:ca:13:a6:ae:ab:72:45:56:37:
7d:b7:05:25:2e:8d:de:7d:af:8b:34:f6:c8:be:95:ef:70:0e:
b0:00:e2:7c:01:96:4c:60:bc:f7:73:9d:a6:c3:3a:e3:f7:e5:
58:f1:c7:59:45:49:52:21:d9:a6:ee:32:76:8f:ca:6e:ec:d4:
1c:ee:db:1c:ec:2f:6c:84:e7:ab:77:3d:3c:4c:5f:3a:63:36:
f0:97:82:6b:0b:46:7b:8e:cb:cf:d2:94:6e:91:3f:93:32:b9:
3d:77:54:a3:32:23:86:75:92:17:93:6d:58:57:ea:70:02:5e:
92:5a:06:7a:de:5e:9c:a2:1d:e8:95:bc:e9:53:ab:eb:87:48:
1e:f5:bb:dd:5e:95:48:6d:4d:31:6d:ff:8d:fe:bd:02:41:39:
43:0d:1e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:03 2025 by rpki-client