Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.mft
File: N4Dnho-7JhcXUGKl57nhwEnL33Q.mft (raw, json)
Hash identifier: OfiJplJAmOkpUSHJfygqLohu4g4u3TLXvW5ku9YgkCQ=
Subject key identifier: 57:69:FF:53:14:EA:9D:F6:9A:B7:AD:7F:E3:BD:C2:8F:29:B0:86:FF
Authority key identifier: 37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74
Certificate issuer: /CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
Certificate serial: 0196B2C619B62CE26B4BC791DCFA85A2B3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.mft
Manifest number: 09CE
Signing time: Fri 09 May 2025 02:00:49 +0000
Manifest this update: Fri 09 May 2025 02:00:49 +0000
Manifest next update: Sat 10 May 2025 02:00:49 +0000
Files and hashes: 1: N4Dnho-7JhcXUGKl57nhwEnL33Q.crl (hash: b6EmGvJFG9a3eIbthdrFJu2LVDXELSvc8o1ubhN0I2Q=)
2: OcSDY4xELCpejKKs2G0IGY9gwlQ.roa (hash: Oy20pivsJb/qy7M/APRR4A3JhiiBdYmX7xkK6y+vDfA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c6:19:b6:2c:e2:6b:4b:c7:91:dc:fa:85:a2:b3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
Validity
Not Before: May 9 02:00:49 2025 GMT
Not After : May 10 02:00:49 2025 GMT
Subject: CN=5769ff5314ea9df69ab7ad7fe3bdc28f29b086ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:cd:0a:61:aa:35:06:81:24:dc:32:a2:4b:
a0:a0:d3:cb:b2:af:f7:78:a0:20:0e:fa:50:97:5a:
3b:d5:50:24:53:1e:19:cb:16:2f:01:85:f5:05:88:
4e:f3:38:46:83:d3:be:49:46:2f:b8:1f:d5:7f:1e:
be:7b:f0:4f:2f:76:cd:ef:f5:21:d7:f0:74:16:cd:
78:fc:2a:68:e1:15:bb:89:d6:63:23:93:2a:60:d9:
75:d8:4d:c4:26:5a:da:88:4b:d9:75:41:b2:96:ec:
a2:25:89:11:11:ba:dd:21:21:36:21:9e:4a:8b:58:
48:e8:e0:bc:db:ea:a1:ae:32:d6:94:da:4f:b8:26:
cd:6c:33:76:fa:d2:07:bc:65:7b:6f:5c:78:43:67:
87:a6:74:58:75:98:33:50:19:ac:c7:85:df:92:19:
70:bc:77:7f:aa:bb:63:1e:6b:e3:4d:4f:5f:41:22:
c2:53:21:f2:83:fd:38:ca:2d:b8:1d:96:2f:0c:e9:
eb:5c:52:28:31:a8:c5:32:76:40:5c:e3:1d:5b:9c:
16:7e:35:0a:c9:f6:2d:a6:c1:d2:68:44:6c:4f:7e:
ab:ba:68:ce:10:d6:18:d1:bd:14:c6:24:0c:33:db:
41:09:c2:9b:11:d7:e5:54:4c:ef:8b:0f:11:b2:e8:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:69:FF:53:14:EA:9D:F6:9A:B7:AD:7F:E3:BD:C2:8F:29:B0:86:FF
X509v3 Authority Key Identifier:
keyid:37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5a:80:5d:23:18:de:d3:18:e3:b0:f2:7f:8d:a2:98:07:cf:
f1:55:95:e4:d3:c4:94:d9:0d:a5:45:d6:ff:b9:9f:db:a8:bb:
c9:50:e0:48:d5:32:0c:bb:0e:82:cc:a2:1c:35:11:d6:fd:03:
8b:5a:c3:60:9d:b5:0c:77:55:3f:e8:d3:51:ce:56:36:33:41:
0f:d6:69:45:d7:04:dd:4e:ab:f5:e4:cf:bb:d5:b2:cf:9b:72:
d6:ce:58:65:3f:f6:0d:12:48:44:3b:2d:fc:ab:24:10:a3:46:
2e:6b:cb:95:82:cf:50:49:d6:93:aa:57:49:ea:5a:6d:f7:68:
88:02:18:ed:2e:2e:2d:14:b8:04:05:98:00:35:21:ad:e6:20:
2e:fd:f0:ff:ca:79:88:9b:2a:b9:16:6f:09:a0:88:af:f3:b1:
70:38:47:e1:0b:45:ef:81:bc:68:ca:fa:f8:f5:e8:c6:63:ad:
4c:31:41:26:7c:2e:07:69:09:21:c2:4f:70:5d:3f:87:b3:f9:
41:ab:0b:ea:63:39:71:a5:8a:66:b0:c2:2c:f6:b2:46:17:fe:
79:53:9a:89:00:b2:b3:a1:a4:96:e4:cc:2b:28:c1:65:ba:6b:
31:77:63:a8:2a:c1:27:f2:78:96:33:70:11:e7:9e:ee:86:a6:
ca:54:9b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:41:14 2025 by rpki-client