Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
File: NbdnbT6rzEXogFTIuEBH7ocyvHM.mft (raw, json)
Hash identifier: bOcy8ZApbdQOGD/H2HSw0JyBI88If23HHvn9a2abAaA=
Subject key identifier: B9:41:DF:4F:12:DF:2F:C1:C3:3D:1D:56:C2:52:CD:2B:BE:30:66:A5
Authority key identifier: 35:B7:67:6D:3E:AB:CC:45:E8:80:54:C8:B8:40:47:EE:87:32:BC:73
Certificate issuer: /CN=35b7676d3eabcc45e88054c8b84047ee8732bc73
Certificate serial: 019A2F329CB04F2842386CD22B753B1973A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
Manifest number: 03F0
Signing time: Wed 29 Oct 2025 09:00:37 +0000
Manifest this update: Wed 29 Oct 2025 09:00:37 +0000
Manifest next update: Thu 30 Oct 2025 09:00:37 +0000
Files and hashes: 1: NbdnbT6rzEXogFTIuEBH7ocyvHM.crl (hash: wYBGpp8yE0t9rGaXOg20eUuIBzxmEcgeOItcTK+Xufc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:32:9c:b0:4f:28:42:38:6c:d2:2b:75:3b:19:73:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b7676d3eabcc45e88054c8b84047ee8732bc73
Validity
Not Before: Oct 29 09:00:37 2025 GMT
Not After : Oct 30 09:00:37 2025 GMT
Subject: CN=b941df4f12df2fc1c33d1d56c252cd2bbe3066a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:68:46:64:7c:be:e5:c5:ec:7f:8e:e2:0b:07:
1e:93:36:36:84:b8:ce:aa:59:f6:4b:55:61:00:ac:
16:d7:87:76:b8:cd:53:8d:73:3b:20:ff:26:76:3a:
9e:3f:02:fd:49:82:27:b9:20:b6:42:e9:d9:a9:49:
de:d6:4a:45:cc:b3:44:a3:6c:66:d1:8f:20:e8:d4:
b9:09:77:02:82:ce:ff:c2:bf:36:23:df:4f:b2:d7:
ef:70:62:c0:b8:d2:54:21:fc:74:0b:f5:40:79:26:
e7:4e:e0:4f:08:25:39:25:81:a7:ba:20:7f:c0:d1:
66:87:2c:33:ba:e2:ae:42:cb:97:ef:be:6a:1e:19:
45:49:d6:4f:5b:92:69:ef:e0:bb:95:9f:2e:e1:58:
c7:68:6f:19:49:a0:bf:9d:97:65:bc:3f:69:af:47:
d5:36:f2:e3:2d:33:dc:67:07:a8:8b:60:89:30:64:
95:c5:35:0c:98:c2:b0:42:6c:8b:6a:df:da:ba:32:
20:c4:98:8d:e6:43:06:42:c2:4a:f7:53:9d:c5:a9:
4b:77:65:99:73:9b:6c:03:72:d7:72:fe:cd:79:87:
7e:e0:cf:d1:ec:53:ac:da:c1:18:f1:cd:71:09:5b:
05:dd:d0:27:4c:cc:ba:40:10:72:43:d1:38:d8:0f:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:41:DF:4F:12:DF:2F:C1:C3:3D:1D:56:C2:52:CD:2B:BE:30:66:A5
X509v3 Authority Key Identifier:
keyid:35:B7:67:6D:3E:AB:CC:45:E8:80:54:C8:B8:40:47:EE:87:32:BC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:91:6f:8a:ba:1c:f9:2c:49:3b:65:e7:47:8f:ab:08:55:7d:
f3:8c:b3:ef:b7:a3:1c:d4:e5:d3:6b:d7:80:95:b3:ba:72:3d:
c4:73:31:e1:0a:25:71:ab:8b:64:42:02:7a:63:d9:a8:ed:83:
38:e2:af:55:df:2d:f3:d0:71:0e:a6:15:70:23:c0:09:ff:94:
20:be:36:91:63:cf:2d:3b:f7:15:40:f7:f0:79:bb:2f:92:d2:
5f:5a:28:96:fd:47:42:6a:1b:0f:2c:1c:31:20:1d:e0:6b:38:
20:eb:77:d1:fa:7e:dc:e3:82:29:42:28:dd:82:7c:b5:cb:94:
57:b8:f9:9b:4e:6f:00:01:de:48:4d:aa:fd:de:de:63:23:5b:
ae:7f:56:4e:27:49:d6:8e:ad:e8:14:40:f1:72:e6:92:6d:09:
ab:39:09:0b:2a:49:a3:cb:7a:0a:f8:a2:b3:cc:d5:de:f4:43:
20:7e:98:78:5a:a3:ac:d0:6e:66:5a:3c:70:3f:91:ce:d4:80:
f6:a5:31:fa:19:bc:62:d3:54:61:e9:02:76:92:af:e9:24:07:
7c:38:ad:e2:c8:34:7c:ab:c8:e0:e6:5a:3a:0c:85:e3:9e:95:
b3:8d:a1:62:fc:5d:c5:24:c4:b1:4b:9f:ac:63:f6:22:a2:ec:
5d:7d:b1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:47 2025 by rpki-client