Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
File: NwLYaw5xBmjqZtp9zRsUDeweDD0.mft (raw, json)
Hash identifier: 4xIXeGFWYuxg9pXyz5UXhjCSziQN0Jsz/KbpmCWLvJI=
Subject key identifier: 74:B7:70:46:26:72:97:63:13:25:BC:17:B8:F5:65:1B:49:72:C1:30
Authority key identifier: 37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
Certificate issuer: /CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Certificate serial: 019878D1B013D2013DCADC06FC27C3C4D499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
Manifest number: 131C
Signing time: Tue 05 Aug 2025 06:01:04 +0000
Manifest this update: Tue 05 Aug 2025 06:01:04 +0000
Manifest next update: Wed 06 Aug 2025 06:01:04 +0000
Files and hashes: 1: 1-S9axjiECoFVFbxoTLP7k8hUrKw.roa (hash: +KpSmdQY0uaMjR1ylAxprXZXg3kf0ZtjvDy8OppLqso=)
2: NwLYaw5xBmjqZtp9zRsUDeweDD0.crl (hash: NCSVSssxfFzHwR9+65WodAsylflSl8sRJF6kImiiAMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:d1:b0:13:d2:01:3d:ca:dc:06:fc:27:c3:c4:d4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Validity
Not Before: Aug 5 06:01:04 2025 GMT
Not After : Aug 6 06:01:04 2025 GMT
Subject: CN=74b77046267297631325bc17b8f5651b4972c130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:32:cb:8b:cb:68:0f:e4:e2:b9:98:e6:d7:3a:
c8:ec:73:97:c7:ba:e5:17:2f:e9:cc:5a:78:4a:41:
0a:e0:03:7e:73:b1:a6:3a:fb:36:e6:9c:d0:b4:ab:
c9:1c:27:20:c2:74:25:04:9b:2f:20:60:f1:5f:a7:
e8:aa:f4:0e:e7:08:32:19:c2:4b:d6:c2:a0:46:04:
aa:9b:db:04:e1:3a:43:08:c4:c0:9e:bf:8c:54:ee:
ed:50:c0:04:dc:2e:1b:63:d4:66:42:76:1b:b2:a4:
03:b0:b9:e1:25:4a:46:ba:1a:ee:a7:3c:34:eb:15:
d9:41:24:15:f7:d3:93:09:74:50:22:4c:69:1b:16:
1d:09:c8:e2:ee:cd:04:7b:db:4a:78:af:31:d3:b9:
ab:0f:da:06:7e:01:60:ea:74:9c:1a:4a:44:71:c7:
23:f2:cf:97:ec:cd:9b:a7:b6:65:1c:a0:8c:f3:93:
3c:90:23:77:b2:ce:93:c1:ab:0b:a9:9a:a2:82:37:
01:06:6f:95:71:d3:01:ed:ad:55:77:cb:3a:39:41:
fc:c0:96:a5:58:fa:3c:c1:cd:33:48:b1:8d:1b:0e:
77:87:e9:96:65:7e:86:8a:2f:23:91:26:d9:09:a6:
66:4d:56:d8:03:7b:af:c5:c0:38:ff:91:d1:89:33:
f1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B7:70:46:26:72:97:63:13:25:BC:17:B8:F5:65:1B:49:72:C1:30
X509v3 Authority Key Identifier:
keyid:37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7d:51:45:66:81:47:55:96:75:d0:c8:dc:af:a1:08:54:f7:
0b:6e:02:80:b0:2c:6a:d9:37:c2:a4:8c:61:3d:93:25:22:67:
8b:5e:aa:92:80:e6:75:7e:57:29:24:19:e1:32:a9:96:46:a1:
71:6e:11:5b:c8:ce:64:49:05:60:1b:9f:9a:e7:f5:58:6d:f9:
ce:70:bd:b4:87:3e:53:f4:a8:49:61:58:f7:dc:09:17:2e:da:
e7:51:6e:55:8d:32:af:4c:d3:1f:09:5f:15:f1:8c:99:05:c6:
ad:6d:24:88:d2:ad:a8:b4:35:ff:e8:10:82:71:06:24:2b:cc:
60:20:d1:a2:25:71:3b:bc:72:4f:9b:0f:7b:67:cd:57:b8:32:
6b:d6:5a:ec:7f:ce:bc:71:c9:fb:2c:eb:97:97:bb:ab:f7:42:
9d:f3:83:a7:14:88:75:39:76:d6:c5:7e:97:0a:8b:f9:19:fa:
4c:e6:a1:f7:0c:82:aa:95:d6:36:1a:d7:13:66:64:c4:a1:5f:
d6:9c:43:84:ff:a0:59:36:f7:0c:14:4e:19:2a:fd:f7:c9:9b:
e8:d6:fd:e2:3e:d5:15:a8:d8:1a:ea:08:01:d8:20:e7:d0:31:
a7:32:71:fb:39:04:af:a6:70:93:7f:de:2f:5b:9a:5f:bf:e1:
7d:2c:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:48 2025 by rpki-client