Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
File: NJI6ntps8kDsh5WeHcONNh951ho.mft (raw, json)
Hash identifier: Loma6qWD/OLCmgFa0F9ZriDIg5xlzKxloz6J9p1kcAI=
Subject key identifier: 43:FA:8A:59:42:60:3C:BC:9B:61:21:DE:6E:A3:61:35:48:FB:65:FD
Authority key identifier: 34:92:3A:9E:DA:6C:F2:40:EC:87:95:9E:1D:C3:8D:36:1F:79:D6:1A
Certificate issuer: /CN=34923a9eda6cf240ec87959e1dc38d361f79d61a
Certificate serial: 0199E6076F6F3D47CE6A685D803D8387E1C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJI6ntps8kDsh5WeHcONNh951ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
Manifest number: 04E6
Signing time: Wed 15 Oct 2025 04:01:10 +0000
Manifest this update: Wed 15 Oct 2025 04:01:10 +0000
Manifest next update: Thu 16 Oct 2025 04:01:10 +0000
Files and hashes: 1: NJI6ntps8kDsh5WeHcONNh951ho.crl (hash: kZ/lWKYDMH8VkiwKbQFLZvGIVVan5qRORDKWbd0S01M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:07:6f:6f:3d:47:ce:6a:68:5d:80:3d:83:87:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34923a9eda6cf240ec87959e1dc38d361f79d61a
Validity
Not Before: Oct 15 04:01:10 2025 GMT
Not After : Oct 16 04:01:10 2025 GMT
Subject: CN=43fa8a5942603cbc9b6121de6ea3613548fb65fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:14:4a:87:ed:12:67:80:41:d5:ac:25:f4:
27:98:1b:f5:81:ef:ec:ca:8b:04:40:3f:5c:6c:e1:
9a:77:e3:8f:a8:29:b3:5a:fc:e7:bb:c3:cd:12:5f:
79:af:1d:43:da:85:e3:20:ea:ae:2b:a1:8d:e5:d8:
d5:b6:ab:1b:a4:b8:b2:3a:55:96:45:f2:e0:0a:d0:
2f:b5:40:30:06:8e:ef:b4:90:1c:d0:c9:52:11:f3:
72:02:ef:5a:04:90:04:b8:22:dc:7f:78:8c:18:83:
2e:47:37:64:3b:a3:05:7e:e0:f3:58:d9:47:77:29:
6e:4c:f0:36:6b:e5:99:03:a6:8f:0a:86:06:03:f5:
35:88:04:93:8b:df:f6:48:d2:de:eb:88:33:b8:a5:
01:4e:c7:74:af:82:15:db:23:7f:10:a2:2d:ed:66:
a0:cd:6f:a7:ca:37:31:1f:fa:68:53:97:da:8e:cd:
fd:9b:33:f5:b4:76:46:ea:39:0b:ad:27:b2:36:48:
7e:48:32:76:e8:6c:79:e6:70:bc:dc:e9:e3:3c:ec:
68:8f:cf:d0:75:0a:4a:21:af:e4:19:6a:98:de:6e:
eb:92:7f:d8:7d:39:b0:f9:02:ea:c6:fc:9d:db:ae:
ef:7a:d9:21:3a:96:a9:e5:a0:7f:c8:fb:3b:6d:55:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FA:8A:59:42:60:3C:BC:9B:61:21:DE:6E:A3:61:35:48:FB:65:FD
X509v3 Authority Key Identifier:
keyid:34:92:3A:9E:DA:6C:F2:40:EC:87:95:9E:1D:C3:8D:36:1F:79:D6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJI6ntps8kDsh5WeHcONNh951ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:23:46:b9:98:d6:1a:ba:9a:e3:56:ac:c2:d4:78:d2:23:85:
89:0d:da:4a:01:73:d9:31:d5:76:9c:f8:83:cb:58:22:f3:62:
cb:41:4e:c1:fe:45:8b:fc:ef:a6:8f:98:31:a7:b7:d6:af:fc:
1b:88:d5:e2:c4:8f:72:ba:bd:2f:e2:7a:76:b2:a2:bb:a2:ce:
a5:e5:fc:36:4e:7e:83:47:ea:5e:45:4a:27:5c:e6:6a:a2:ee:
df:2b:fb:73:f9:31:93:e0:09:27:bc:bc:c8:a5:b6:78:72:6b:
72:79:88:ac:59:15:6b:af:ae:43:dc:53:76:2e:86:71:81:9c:
75:27:3e:a1:be:a0:7d:99:2e:fb:79:ba:34:51:42:49:53:13:
78:0d:ea:db:9e:ac:90:94:c5:4d:da:27:33:e2:9d:cf:76:79:
d1:a1:d3:c5:76:09:5b:28:ad:6a:bb:f2:95:3c:dd:e5:b1:df:
3c:32:33:d5:cb:2c:d7:3c:68:e3:cc:b2:d1:ca:59:68:cd:22:
a6:87:37:b8:51:11:c6:69:5a:d8:1a:88:6d:6f:f3:95:c7:d7:
3a:43:8f:9b:7e:c7:4f:82:71:f2:79:dd:23:c8:3b:3a:7b:15:
76:c1:b2:58:42:f7:2a:d3:9f:a2:5e:23:e5:d9:be:f6:be:09:
4e:bc:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:48 2025 by rpki-client