
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
File: nnagejNft6He1jqsxRM4rchHJnA.mft (raw, json)
Hash identifier: 3Z8L6wHrbZdqhjwPnmHeJ4zh27e5gm1g4ZvzeGSYjEE=
Subject key identifier: 5B:FA:4D:F9:50:2B:6A:1E:06:29:BB:AB:2F:32:20:B2:2D:A7:64:6E
Authority key identifier: 9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70
Certificate issuer: /CN=9e76a07a335fb7a1ded63aacc51338adc8472670
Certificate serial: 01987DF8016E757EFAA7E2809844DF4E9F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
Manifest number: 0CED
Signing time: Wed 06 Aug 2025 06:01:01 +0000
Manifest this update: Wed 06 Aug 2025 06:01:01 +0000
Manifest next update: Thu 07 Aug 2025 06:01:01 +0000
Files and hashes: 1: nnagejNft6He1jqsxRM4rchHJnA.crl (hash: roskj9cj5mSCNIz63mIE2c75oHpRFPIySo0DculoA4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:01:6e:75:7e:fa:a7:e2:80:98:44:df:4e:9f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e76a07a335fb7a1ded63aacc51338adc8472670
Validity
Not Before: Aug 6 06:01:01 2025 GMT
Not After : Aug 7 06:01:01 2025 GMT
Subject: CN=5bfa4df9502b6a1e0629bbab2f3220b22da7646e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:90:ac:b7:ae:46:17:68:c7:9c:75:30:79:
1c:7e:a7:12:42:37:22:23:27:5b:2b:2a:5a:e3:5c:
70:55:17:2c:d3:36:9d:5d:06:28:a1:bd:4b:64:b1:
43:50:8c:a4:b9:c9:2e:19:3c:48:66:c1:6e:89:51:
f3:6d:59:47:ec:8a:d6:d8:c1:dc:ff:bc:0c:02:7b:
9f:aa:1d:95:b7:b1:bd:9d:dc:ee:84:2b:08:10:80:
a0:27:45:9c:d4:85:18:0a:51:5b:25:bc:db:9b:92:
37:d4:d1:44:29:a0:aa:e2:82:29:6c:e5:47:97:5b:
28:14:08:12:d7:24:4e:b4:18:c0:ce:d3:e4:ae:b8:
9c:64:ac:50:2e:81:0c:74:34:b0:f3:15:09:f9:d1:
22:91:58:26:8b:6a:0d:1d:40:18:10:1b:83:8e:56:
3f:a0:f9:6c:ea:62:af:93:2b:24:72:2d:53:77:ef:
4f:14:1e:5b:fa:85:8d:63:f1:f2:40:e8:a7:0b:f7:
10:c4:29:c1:1b:aa:55:98:44:ed:ef:e0:c1:5c:47:
c8:44:da:cb:ed:8e:66:6c:d6:52:38:ff:b7:f3:35:
85:8f:a3:09:3c:c7:35:92:1c:8c:96:b3:7a:0d:ee:
14:d8:9c:29:82:38:79:ea:c7:87:22:12:05:8c:17:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FA:4D:F9:50:2B:6A:1E:06:29:BB:AB:2F:32:20:B2:2D:A7:64:6E
X509v3 Authority Key Identifier:
keyid:9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9c:ae:8b:5e:12:e7:a9:77:7d:11:52:fc:b3:85:3b:21:e0:
b5:9a:cc:58:e2:e1:a3:8e:0b:37:31:46:0e:1a:03:83:0d:15:
e3:e4:65:55:98:37:47:38:39:0a:fd:aa:07:5d:b9:86:ba:a3:
3f:72:52:d0:9c:b8:e3:65:57:ba:50:fa:ee:ca:85:af:35:76:
b3:fc:3d:57:3f:16:33:4d:68:0b:86:07:7f:6c:40:09:e7:13:
59:dd:47:ad:8e:4c:53:eb:4e:4c:47:69:37:7c:04:4e:d7:34:
ec:7f:fa:88:94:cd:d7:3a:1b:00:ff:f1:ab:3a:17:14:7e:85:
fe:71:49:ac:08:a8:5c:31:4c:6f:d7:38:8b:f0:38:f6:e0:c8:
45:1c:21:d5:a1:22:0d:f0:c4:04:e8:6e:0d:ae:5d:bc:52:25:
eb:b4:61:b0:09:b1:e0:cd:63:08:00:21:80:4d:45:8f:03:d4:
5e:33:a3:85:0d:46:ce:ff:61:e6:b4:08:82:7e:b4:5f:7c:0d:
ea:2b:1c:b9:74:8d:bb:28:76:5a:a1:e3:2c:c3:36:bd:81:9d:
73:73:bf:27:aa:bc:73:c6:89:17:14:18:c7:ae:81:f7:52:28:
52:0e:da:67:f9:8c:3d:7b:0d:56:7c:98:20:99:01:72:1b:7b:
e7:f1:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:04 2025 by rpki-client