Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
File: N5jHIczxJbe4Klf7Pdk7d6YqOag.mft (raw, json)
Hash identifier: pprftoSy63mCUzRKstaAGCsqmKxvVGTk0SJ8uReYrac=
Subject key identifier: 73:AA:9B:5F:D2:E8:EC:B3:4A:15:43:55:0C:24:20:B5:D2:78:B9:AE
Authority key identifier: 37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
Certificate issuer: /CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Certificate serial: 0199DB83F475695768A1251E00D2DA40E157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
Manifest number: 0B3B
Signing time: Mon 13 Oct 2025 03:01:22 +0000
Manifest this update: Mon 13 Oct 2025 03:01:22 +0000
Manifest next update: Tue 14 Oct 2025 03:01:22 +0000
Files and hashes: 1: N5jHIczxJbe4Klf7Pdk7d6YqOag.crl (hash: n8eOcp9+uIFuPl2vKaFUOnewbcshzlQIkbpNGpWGta8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:db:83:f4:75:69:57:68:a1:25:1e:00:d2:da:40:e1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Validity
Not Before: Oct 13 03:01:22 2025 GMT
Not After : Oct 14 03:01:22 2025 GMT
Subject: CN=73aa9b5fd2e8ecb34a1543550c2420b5d278b9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:6e:58:7d:59:7c:ae:8e:b4:b0:1e:2a:de:
54:43:f7:0e:38:25:e7:84:a9:95:05:d2:9d:c3:75:
24:7c:13:62:06:0d:cd:4b:57:f9:cd:75:f4:43:ba:
56:d8:ae:b5:21:2f:09:d5:fa:58:e4:d4:f6:ae:33:
bd:ab:0f:6a:5d:6e:78:26:72:7b:f0:b2:3c:b3:4b:
b3:92:7a:36:80:a5:62:17:f3:15:46:ee:c4:14:00:
77:4b:9e:ab:64:21:7c:6f:ff:e5:04:7b:0b:be:c0:
ed:52:69:ca:ff:19:e4:99:c3:3e:51:e9:03:c7:a3:
d9:d5:a3:df:5f:04:7b:6c:89:80:50:bc:6f:12:ff:
cd:93:69:98:e7:05:50:0d:fc:04:f3:96:2e:5d:29:
0c:27:54:b0:ce:15:a2:f5:64:0b:14:d3:5d:b9:97:
53:cc:66:0a:da:8a:5d:ca:eb:02:83:a5:89:bd:a1:
d9:59:94:4d:4a:0e:14:5b:fc:6d:be:17:8c:24:43:
c3:e4:0b:e6:0c:47:ff:44:5f:c8:05:59:62:7a:62:
c3:2e:5d:f9:97:f8:05:f6:75:66:9a:17:c6:d5:4d:
3e:ed:f1:96:45:b2:f1:6f:77:1e:3d:e8:55:07:5b:
20:6a:c1:92:1b:67:6a:df:b2:ab:9b:5e:7f:af:ea:
7b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AA:9B:5F:D2:E8:EC:B3:4A:15:43:55:0C:24:20:B5:D2:78:B9:AE
X509v3 Authority Key Identifier:
keyid:37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fc:d5:ed:10:9f:12:32:8b:8b:29:26:2e:65:92:e9:ae:0d:
0c:00:00:62:e4:c6:6e:cc:19:2e:1b:bd:8e:b8:f3:d6:cb:31:
ba:fb:06:36:9f:cc:dc:7f:5b:bb:7b:fc:5f:73:6c:e5:ed:d1:
16:6b:13:6b:aa:eb:e4:da:18:94:c5:1a:5b:ee:c5:54:56:b6:
da:5a:17:0c:b3:81:cf:72:05:23:e2:aa:86:e3:45:e1:77:30:
ba:0c:68:a4:6c:04:61:53:37:51:7e:d4:a9:38:3c:65:f8:93:
42:f4:95:a1:26:4e:9f:27:ff:d5:c7:e5:f9:37:d7:22:3e:0f:
a5:06:ac:6f:b0:74:e2:6a:ce:3f:3f:e5:04:67:d7:a0:76:f7:
f6:76:85:51:4e:6a:96:d8:9b:b0:8a:a5:8f:97:15:30:02:35:
7e:96:c8:35:cb:9c:de:49:eb:46:81:e6:8f:6c:85:08:d0:4f:
bf:0e:fc:34:f9:3c:40:04:cc:f3:8c:c8:7f:3a:47:81:c7:ef:
07:74:64:1d:4d:f6:7b:01:e7:c2:31:bf:55:5a:e0:41:32:88:
b2:07:e7:7a:2e:e2:16:7e:a5:5c:d6:70:6e:4b:cf:86:11:59:
48:2c:50:e5:86:42:66:b6:ed:d3:d2:e9:a2:c1:f4:45:37:a7:
cf:13:2c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnbg/R1aVdooSUeANLaQOFXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OThjNzIxY2NmMTI1YjdiODJhNTdmYjNkZDkzYjc3YTYy
YTM5YTgwHhcNMjUxMDEzMDMwMTIyWhcNMjUxMDE0MDMwMTIyWjAzMTEwLwYDVQQD
Eyg3M2FhOWI1ZmQyZThlY2IzNGExNTQzNTUwYzI0MjBiNWQyNzhiOWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKhuWH1ZfK6OtLAeKt5UQ/cOOCXn
hKmVBdKdw3UkfBNiBg3NS1f5zXX0Q7pW2K61IS8J1fpY5NT2rjO9qw9qXW54JnJ7
8LI8s0uzkno2gKViF/MVRu7EFAB3S56rZCF8b//lBHsLvsDtUmnK/xnkmcM+UekD
x6PZ1aPfXwR7bImAULxvEv/Nk2mY5wVQDfwE85YuXSkMJ1SwzhWi9WQLFNNduZdT
zGYK2opdyusCg6WJvaHZWZRNSg4UW/xtvheMJEPD5AvmDEf/RF/IBVliemLDLl35
l/gF9nVmmhfG1U0+7fGWRbLxb3cePehVB1sgasGSG2dq37Krm15/r+p7MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOqm1/S6OyzShVDVQwkILXSeLmuMB8GA1UdIwQY
MBaAFDeYxyHM8SW3uCpX+z3ZO3emKjmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVqSEljenhKYmU0S2xmN1BkazdkNllxT2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMDQwYWUtYWExMy00Y2JiLTkwZGEt
MzY3Yjg2ZmJjYmY3LzEvTjVqSEljenhKYmU0S2xmN1BkazdkNllxT2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xMDQwYWUtYWExMy00Y2JiLTkwZGEtMzY3Yjg2ZmJjYmY3
LzEvTjVqSEljenhKYmU0S2xmN1BkazdkNllxT2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPzV7RCf
EjKLiykmLmWS6a4NDAAAYuTGbswZLhu9jrjz1ssxuvsGNp/M3H9bu3v8X3Ns5e3R
FmsTa6rr5NoYlMUaW+7FVFa22loXDLOBz3IFI+KqhuNF4XcwugxopGwEYVM3UX7U
qTg8ZfiTQvSVoSZOnyf/1cfl+TfXIj4PpQasb7B04mrOPz/lBGfXoHb39naFUU5q
ltibsIqlj5cVMAI1fpbINcuc3knrRoHmj2yFCNBPvw78NPk8QATM84zIfzpHgcfv
B3RkHU32ewHnwjG/VVrgQTKIsgfnei7iFn6lXNZwbkvPhhFZSCxQ5YZCZrbt09Lp
osH0RTenzxMsww==
-----END CERTIFICATE-----
Generated at Sun Oct 26 06:44:40 2025 by rpki-client