Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
File: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft (raw, json)
Hash identifier: hl8ZUJBAJjPASQjXnF4+zFJ6IoqkTa9urCqMZvsu1Js=
Subject key identifier: 90:1C:88:24:C0:08:83:E1:21:BA:0C:0E:46:93:30:E6:73:EB:01:09
Authority key identifier: 34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
Certificate issuer: /CN=34b960f6f19255ea39666f833ebe271761994b15
Certificate serial: 019AB47351A94C6C29991F0055D4859B38C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
Manifest number: 08DB
Signing time: Mon 24 Nov 2025 06:00:47 +0000
Manifest this update: Mon 24 Nov 2025 06:00:47 +0000
Manifest next update: Tue 25 Nov 2025 06:00:47 +0000
Files and hashes: 1: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl (hash: Ti5Uv3tVUz0Rm/aXq5ZuVqtoNOvVViysUeEiN3Uc3m0=)
2: uvlLUALpDF1wh1MewC4fR9s0Hsc.roa (hash: M16EAVQJOFd1bjjRXsF6MezxtZfD4eItTZd4rdVVcXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:b4:73:51:a9:4c:6c:29:99:1f:00:55:d4:85:9b:38:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b960f6f19255ea39666f833ebe271761994b15
Validity
Not Before: Nov 24 06:00:47 2025 GMT
Not After : Nov 25 06:00:47 2025 GMT
Subject: CN=901c8824c00883e121ba0c0e469330e673eb0109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:ab:2e:7e:e1:39:51:1c:45:ed:0c:04:c1:
80:5b:91:ed:1a:84:c7:da:bc:ec:82:42:4b:1c:30:
81:f9:94:30:3b:6b:37:5c:10:5a:d9:5f:f3:53:de:
0f:e9:e8:a3:fe:5e:ce:2f:48:a1:09:d3:05:7b:c5:
b7:d8:bf:e0:33:e6:38:78:fe:bc:cf:7b:6e:fd:a9:
52:51:7c:94:5b:db:13:79:71:1e:1e:39:fd:40:ba:
bf:1c:27:34:59:cb:a2:ea:e5:e0:27:c5:25:68:7c:
11:02:97:bc:3b:bd:5f:be:87:07:50:94:a9:e6:6b:
7e:b0:38:11:3d:2d:62:07:10:62:96:8d:07:2c:74:
f2:4b:a6:f3:70:17:2b:b9:c8:37:81:c9:44:e6:db:
46:5f:f8:32:01:eb:f2:9a:83:1e:8e:03:40:aa:39:
89:89:de:43:cc:dd:23:8c:4e:e6:9a:7c:b5:6d:23:
22:92:6d:cb:e3:49:65:6b:64:8d:c8:01:95:4d:fd:
b8:64:59:c7:de:3b:70:fb:c5:d8:09:08:b2:50:f0:
da:30:cf:67:fc:fb:4d:5c:b4:00:b3:e3:77:82:d3:
e0:40:f4:66:f6:2e:9c:d8:8c:19:dd:a3:6c:cf:45:
4f:44:7f:37:d1:7c:59:42:97:7e:7a:24:8e:c1:2e:
f8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1C:88:24:C0:08:83:E1:21:BA:0C:0E:46:93:30:E6:73:EB:01:09
X509v3 Authority Key Identifier:
keyid:34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:13:89:41:be:9c:5c:b6:d4:1f:d7:9f:b7:9a:f7:3b:69:21:
a1:fa:62:f7:f3:14:82:80:e3:55:79:3f:d4:76:2a:d8:c1:96:
72:0c:75:83:53:57:97:c9:5b:15:c8:c0:4a:27:94:07:26:af:
a1:35:c0:15:0a:cb:aa:d8:9d:a8:3c:dc:06:e4:6f:af:2a:66:
e7:e3:02:fd:c0:b0:36:3d:64:79:78:50:40:1b:d4:58:b6:ac:
66:87:53:c8:2b:58:2e:0f:dd:ee:f1:b5:72:fb:b8:68:0c:93:
3b:47:c7:91:07:8e:c9:3a:c5:42:28:ad:2e:e2:78:b4:78:b9:
83:22:d3:e5:fa:11:b9:41:fd:02:91:3c:95:15:a1:05:4d:50:
9d:cd:08:d6:8c:16:d1:5b:b2:fe:12:36:02:be:06:3a:73:a6:
52:f6:f5:27:97:59:39:14:cc:2b:0e:b4:5a:ae:84:18:88:3f:
fc:06:92:d0:30:d0:c4:59:9f:1f:93:30:cb:2e:5c:ab:b8:aa:
70:45:8c:38:5a:23:fd:f2:16:ed:10:12:99:83:e4:ae:1c:51:
b6:93:14:a6:8a:c2:13:9a:99:26:b6:40:0c:4d:4e:10:f0:5e:
81:9b:03:3e:cd:4e:31:a9:5a:09:20:3a:bb:5d:a8:e2:2e:8b:
4d:14:49:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:05 2026 by rpki-client