Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.mft
File: NdB1rqTOzB1391EfQdd8pTMCpvY.mft (raw, json)
Hash identifier: /VYxu4c3MwzRlRIJ9psa+VO3FBz7RDsc9Gq126NougM=
Subject key identifier: 6D:1E:39:2B:CD:4B:DD:E4:07:76:ED:13:01:2D:F7:C1:3B:C2:7F:BD
Authority key identifier: 35:D0:75:AE:A4:CE:CC:1D:77:F7:51:1F:41:D7:7C:A5:33:02:A6:F6
Certificate issuer: /CN=35d075aea4cecc1d77f7511f41d77ca53302a6f6
Certificate serial: 0195A2E7F8C7FC877F125FCFA93372FCAA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdB1rqTOzB1391EfQdd8pTMCpvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.mft
Manifest number: 08F7
Signing time: Mon 17 Mar 2025 07:01:06 +0000
Manifest this update: Mon 17 Mar 2025 07:01:06 +0000
Manifest next update: Tue 18 Mar 2025 07:01:06 +0000
Files and hashes: 1: NdB1rqTOzB1391EfQdd8pTMCpvY.crl (hash: WktwJ0eQYavmaoVHjEmh1qm9kiEFN1KCmQLhq9EHC7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:e7:f8:c7:fc:87:7f:12:5f:cf:a9:33:72:fc:aa:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d075aea4cecc1d77f7511f41d77ca53302a6f6
Validity
Not Before: Mar 17 07:01:06 2025 GMT
Not After : Mar 18 07:01:06 2025 GMT
Subject: CN=6d1e392bcd4bdde40776ed13012df7c13bc27fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:bd:c2:70:8d:b3:08:9a:35:90:a0:b5:8c:
bd:87:78:82:7a:be:92:9c:9a:d9:ec:e3:bc:0c:5b:
7d:23:48:ad:74:8f:cb:83:ae:b9:65:68:a8:2e:b4:
df:32:f6:65:41:41:70:22:bb:1b:df:06:c0:99:fe:
6f:e3:8e:ba:81:6b:bf:99:57:7e:e7:4c:48:a1:03:
9a:49:16:5c:8b:3a:82:c9:c2:f0:84:84:96:01:ce:
a4:e8:4e:6f:b8:fa:7d:24:f6:2c:8e:51:66:6a:cc:
70:95:37:56:14:e6:d4:75:68:98:97:f6:68:d3:e4:
40:9e:41:24:06:c8:86:60:83:d4:3b:f4:e0:04:b3:
a9:89:15:6a:28:d3:8c:3c:0b:83:81:4f:46:cf:07:
f9:77:6e:19:ad:a5:4d:ca:2a:25:29:70:9d:8f:22:
97:6c:24:5f:e3:cf:2d:bc:3e:13:17:53:19:69:70:
5a:12:27:f4:01:09:02:5b:7e:0b:2e:c7:aa:73:7f:
69:c8:f2:f9:4c:c3:e0:57:c2:16:15:35:e5:d7:8d:
45:cd:3b:e8:e2:06:7a:68:f6:88:e8:22:33:b0:b1:
93:11:4a:a7:b5:55:2d:11:17:83:23:fb:5f:0f:cb:
64:93:37:e1:91:e1:62:b1:07:ff:78:10:2a:a1:00:
6f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1E:39:2B:CD:4B:DD:E4:07:76:ED:13:01:2D:F7:C1:3B:C2:7F:BD
X509v3 Authority Key Identifier:
keyid:35:D0:75:AE:A4:CE:CC:1D:77:F7:51:1F:41:D7:7C:A5:33:02:A6:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdB1rqTOzB1391EfQdd8pTMCpvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e6:70:37:ae:bb:de:a2:cb:c3:88:5e:63:55:b0:cd:83:1f:
3c:91:58:d4:43:72:28:55:cd:48:1d:66:91:a4:1c:fb:27:aa:
97:25:86:7e:8e:82:0c:81:42:35:21:fd:a4:2f:78:f2:fb:e4:
1b:9a:1e:b3:7b:3b:14:6d:7d:fd:44:9b:d9:2f:5d:89:a8:14:
10:80:7d:b5:c4:be:8d:44:e3:70:36:8b:0c:66:d6:85:0d:80:
e3:09:58:d2:03:d7:09:f0:f8:ee:19:09:c5:dc:84:54:01:26:
7c:86:e3:ae:4c:88:f8:7a:fd:c9:be:8f:d5:75:9b:dc:5a:20:
ed:9d:c4:1e:6f:d5:e9:52:79:f3:ba:94:d8:d2:b0:53:18:ae:
cc:9c:37:ea:df:a7:d1:5d:dd:bc:23:7e:3f:68:cb:0e:93:4b:
1e:64:0c:fd:bf:52:e0:09:7f:79:40:2f:1e:21:93:7e:04:62:
ec:3a:e2:c3:12:d2:1d:42:6c:c1:92:17:72:fc:2f:0b:ef:82:
90:8e:e3:cd:9e:70:85:62:1f:35:df:1b:56:0e:8d:a0:fb:46:
19:aa:79:a7:6a:08:3a:06:37:42:ae:ca:c9:92:37:9c:05:71:
34:48:84:15:94:c8:b5:49:e6:ab:6f:7e:92:6c:4e:46:57:03:
df:fc:85:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWi5/jH/Id/El/PqTNy/KpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDA3NWFlYTRjZWNjMWQ3N2Y3NTExZjQxZDc3Y2E1MzMw
MmE2ZjYwHhcNMjUwMzE3MDcwMTA2WhcNMjUwMzE4MDcwMTA2WjAzMTEwLwYDVQQD
Eyg2ZDFlMzkyYmNkNGJkZGU0MDc3NmVkMTMwMTJkZjdjMTNiYzI3ZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtua9wnCNswiaNZCgtYy9h3iCer6S
nJrZ7OO8DFt9I0itdI/Lg665ZWioLrTfMvZlQUFwIrsb3wbAmf5v4466gWu/mVd+
50xIoQOaSRZcizqCycLwhISWAc6k6E5vuPp9JPYsjlFmasxwlTdWFObUdWiYl/Zo
0+RAnkEkBsiGYIPUO/TgBLOpiRVqKNOMPAuDgU9Gzwf5d24ZraVNyiolKXCdjyKX
bCRf488tvD4TF1MZaXBaEif0AQkCW34LLseqc39pyPL5TMPgV8IWFTXl141FzTvo
4gZ6aPaI6CIzsLGTEUqntVUtEReDI/tfD8tkkzfhkeFisQf/eBAqoQBvIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0eOSvNS93kB3btEwEt98E7wn+9MB8GA1UdIwQY
MBaAFDXQda6kzswdd/dRH0HXfKUzAqb2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRCMXJxVE96QjEzOTFFZlFkZDhwVE1DcHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85ZmZiZDktMWIyOS00NDI5LTg5NWQt
Y2FmYzUwZTRmNTM0LzEvTmRCMXJxVE96QjEzOTFFZlFkZDhwVE1DcHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85ZmZiZDktMWIyOS00NDI5LTg5NWQtY2FmYzUwZTRmNTM0
LzEvTmRCMXJxVE96QjEzOTFFZlFkZDhwVE1DcHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+ZwN667
3qLLw4heY1WwzYMfPJFY1ENyKFXNSB1mkaQc+yeqlyWGfo6CDIFCNSH9pC948vvk
G5oes3s7FG19/USb2S9diagUEIB9tcS+jUTjcDaLDGbWhQ2A4wlY0gPXCfD47hkJ
xdyEVAEmfIbjrkyI+Hr9yb6P1XWb3Fog7Z3EHm/V6VJ587qU2NKwUxiuzJw36t+n
0V3dvCN+P2jLDpNLHmQM/b9S4Al/eUAvHiGTfgRi7DriwxLSHUJswZIXcvwvC++C
kI7jzZ5whWIfNd8bVg6NoPtGGap5p2oIOgY3Qq7KyZI3nAVxNEiEFZTItUnmq29+
kmxORlcD3/yF5g==
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:44:19 2025 by rpki-client