Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/237d3d-bd35-4505-b6c6-78cb8f4c7117/1/nclel8Ke8WnSM3pdav0SoKwzpO8.mft
File: nclel8Ke8WnSM3pdav0SoKwzpO8.mft (raw, json)
Hash identifier: l829OxsE9wz2xI4asuN9KncszG4jjWPoy/HBiOLvSz4=
Subject key identifier: 4E:68:4E:61:AB:C9:B1:AA:62:AB:A8:87:45:83:73:10:70:65:04:04
Authority key identifier: 9D:C9:5E:97:C2:9E:F1:69:D2:33:7A:5D:6A:FD:12:A0:AC:33:A4:EF
Certificate issuer: /CN=9dc95e97c29ef169d2337a5d6afd12a0ac33a4ef
Certificate serial: 01960DC46D0588556FB8F18CCE1658671C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nclel8Ke8WnSM3pdav0SoKwzpO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/237d3d-bd35-4505-b6c6-78cb8f4c7117/1/nclel8Ke8WnSM3pdav0SoKwzpO8.mft
Manifest number: 10DF
Signing time: Mon 07 Apr 2025 01:01:38 +0000
Manifest this update: Mon 07 Apr 2025 01:01:38 +0000
Manifest next update: Tue 08 Apr 2025 01:01:38 +0000
Files and hashes: 1: nclel8Ke8WnSM3pdav0SoKwzpO8.crl (hash: 3PHLGV7+CCh2YF5mNhzSTk4rfb0afNP3K4jMo77A5Fc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:c4:6d:05:88:55:6f:b8:f1:8c:ce:16:58:67:1c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc95e97c29ef169d2337a5d6afd12a0ac33a4ef
Validity
Not Before: Apr 7 01:01:38 2025 GMT
Not After : Apr 8 01:01:38 2025 GMT
Subject: CN=4e684e61abc9b1aa62aba8874583731070650404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:7d:0a:b9:6b:21:47:a8:2b:26:04:48:95:
2d:17:66:3f:9f:e2:23:a8:64:1c:53:4a:54:2e:40:
07:63:12:f7:fc:91:12:ac:e2:55:41:bb:d3:7f:d9:
0e:00:2d:37:24:92:92:56:62:44:bc:b1:44:4c:be:
a1:99:ba:10:d6:99:e7:eb:ab:67:fe:69:7c:91:18:
37:77:83:3c:c6:d5:7b:0e:21:61:ef:6b:d8:11:0d:
00:46:4e:89:72:e2:d8:e1:ef:10:f7:07:4a:e1:7e:
10:93:cf:6c:77:6f:8a:14:05:7e:48:0d:75:ac:9e:
cb:3c:91:34:77:97:12:43:0c:6f:a3:8c:5f:43:0d:
40:71:97:6a:90:0f:63:60:a3:98:30:35:4d:4c:08:
e0:c1:96:37:5c:b5:ed:0a:ff:1e:8b:39:cd:82:33:
f7:96:22:50:fd:26:0d:1e:fe:85:6a:8d:30:69:2f:
b6:1a:09:de:56:41:2d:f1:41:ce:a2:74:2c:a9:5e:
f8:80:bc:ea:8e:c3:ed:d7:42:c9:92:f7:6d:72:8a:
93:6d:b1:58:0a:04:e1:f2:14:5e:24:be:c4:1b:3a:
11:b8:e9:87:21:9c:4f:94:50:5d:22:de:2a:dc:e2:
5a:9a:d0:4c:d9:ac:c5:1f:a3:2d:33:75:e9:a8:1e:
01:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:68:4E:61:AB:C9:B1:AA:62:AB:A8:87:45:83:73:10:70:65:04:04
X509v3 Authority Key Identifier:
keyid:9D:C9:5E:97:C2:9E:F1:69:D2:33:7A:5D:6A:FD:12:A0:AC:33:A4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nclel8Ke8WnSM3pdav0SoKwzpO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/237d3d-bd35-4505-b6c6-78cb8f4c7117/1/nclel8Ke8WnSM3pdav0SoKwzpO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/237d3d-bd35-4505-b6c6-78cb8f4c7117/1/nclel8Ke8WnSM3pdav0SoKwzpO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b2:53:9a:eb:ad:4d:71:24:97:b6:db:81:87:bd:c4:87:e2:
24:c0:59:52:1a:63:d9:83:54:2b:05:3b:cf:58:02:87:ac:fc:
6f:c1:41:60:19:5d:2b:b7:e0:8f:e6:e5:b3:3b:a4:3b:86:a3:
54:5e:47:37:35:1b:5b:29:53:ca:a2:37:33:f9:6f:1b:53:24:
2f:e7:9c:49:d7:6d:87:f0:ba:60:ec:96:ce:5d:24:ea:47:e2:
5c:75:d5:49:15:3f:64:d5:1d:f0:40:80:71:00:1e:a1:b8:aa:
13:15:2c:94:b4:59:11:99:e9:a1:f6:46:ae:b4:bf:6f:1e:8d:
5e:14:0c:bd:64:21:d1:79:24:ab:53:6a:8b:90:89:3d:5a:4e:
43:85:de:6d:d0:91:c5:71:79:a5:01:e9:49:5d:b3:f5:21:f4:
db:65:8a:fa:91:f0:22:22:1f:93:70:b6:ac:77:88:52:ec:33:
35:ff:f5:73:90:9f:29:c2:9a:fa:a3:8f:38:cd:14:90:41:96:
67:ae:07:b3:5f:fb:42:86:8e:77:d5:33:c6:42:f9:57:33:e0:
90:67:d4:bd:5e:48:e8:58:2c:7e:09:2b:d2:90:be:69:59:c0:
c3:0a:95:48:b4:f7:29:a7:c4:4e:5d:98:7c:d9:fc:ba:57:d6:
05:26:bd:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYNxG0FiFVvuPGMzhZYZxxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzk1ZTk3YzI5ZWYxNjlkMjMzN2E1ZDZhZmQxMmEwYWMz
M2E0ZWYwHhcNMjUwNDA3MDEwMTM4WhcNMjUwNDA4MDEwMTM4WjAzMTEwLwYDVQQD
Eyg0ZTY4NGU2MWFiYzliMWFhNjJhYmE4ODc0NTgzNzMxMDcwNjUwNDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn19CrlrIUeoKyYESJUtF2Y/n+Ij
qGQcU0pULkAHYxL3/JESrOJVQbvTf9kOAC03JJKSVmJEvLFETL6hmboQ1pnn66tn
/ml8kRg3d4M8xtV7DiFh72vYEQ0ARk6JcuLY4e8Q9wdK4X4Qk89sd2+KFAV+SA11
rJ7LPJE0d5cSQwxvo4xfQw1AcZdqkA9jYKOYMDVNTAjgwZY3XLXtCv8eiznNgjP3
liJQ/SYNHv6Fao0waS+2GgneVkEt8UHOonQsqV74gLzqjsPt10LJkvdtcoqTbbFY
CgTh8hReJL7EGzoRuOmHIZxPlFBdIt4q3OJamtBM2azFH6MtM3XpqB4B7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5oTmGrybGqYquoh0WDcxBwZQQEMB8GA1UdIwQY
MBaAFJ3JXpfCnvFp0jN6XWr9EqCsM6TvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNsZWw4S2U4V25TTTNwZGF2MFNvS3d6cE84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yMzdkM2QtYmQzNS00NTA1LWI2YzYt
NzhjYjhmNGM3MTE3LzEvbmNsZWw4S2U4V25TTTNwZGF2MFNvS3d6cE84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8yMzdkM2QtYmQzNS00NTA1LWI2YzYtNzhjYjhmNGM3MTE3
LzEvbmNsZWw4S2U4V25TTTNwZGF2MFNvS3d6cE84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7JTmuut
TXEkl7bbgYe9xIfiJMBZUhpj2YNUKwU7z1gCh6z8b8FBYBldK7fgj+blszukO4aj
VF5HNzUbWylTyqI3M/lvG1MkL+ecSddth/C6YOyWzl0k6kfiXHXVSRU/ZNUd8ECA
cQAeobiqExUslLRZEZnpofZGrrS/bx6NXhQMvWQh0Xkkq1Nqi5CJPVpOQ4XebdCR
xXF5pQHpSV2z9SH022WK+pHwIiIfk3C2rHeIUuwzNf/1c5CfKcKa+qOPOM0UkEGW
Z64Hs1/7QoaOd9UzxkL5VzPgkGfUvV5I6Fgsfgkr0pC+aVnAwwqVSLT3KafETl2Y
fNn8ulfWBSa9XQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:18 2025 by rpki-client