
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
File: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft (raw, json)
Hash identifier: AgS2CVZNcb5I7VSguWQfTtgmxgA4ej3rtT7jbaHZda8=
Subject key identifier: 00:2B:47:92:F8:CA:94:94:FE:2B:3D:24:4E:67:45:2D:6B:58:03:A6
Authority key identifier: 36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
Certificate issuer: /CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Certificate serial: 019B6956C16AE8A29A7E60E0F8AF4E497DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
Manifest number: 069C
Signing time: Mon 29 Dec 2025 09:00:51 +0000
Manifest this update: Mon 29 Dec 2025 09:00:51 +0000
Manifest next update: Tue 30 Dec 2025 09:00:51 +0000
Files and hashes: 1: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl (hash: oCc4qAUNCSqk89QpLGbHfeN4r+kZuO+gz9H50p+LJKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:69:56:c1:6a:e8:a2:9a:7e:60:e0:f8:af:4e:49:7d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Validity
Not Before: Dec 29 09:00:51 2025 GMT
Not After : Dec 30 09:00:51 2025 GMT
Subject: CN=002b4792f8ca9494fe2b3d244e67452d6b5803a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:7f:f6:92:30:2e:ff:82:41:ff:2a:54:7b:
56:92:9f:5a:9c:ba:31:81:39:18:e5:40:0c:ca:b6:
e4:ec:8f:c2:3c:4f:a7:49:60:93:57:16:45:a6:f3:
b8:fe:16:22:45:1d:04:68:d8:3e:f5:84:7d:27:81:
db:4d:b7:35:7e:34:ac:57:62:be:5a:87:4c:9b:96:
58:7b:ea:84:91:e9:28:86:ef:72:8e:d6:a3:5f:07:
08:8e:89:99:39:a6:21:46:8b:5b:7a:22:6d:28:44:
25:36:3e:21:6b:0d:71:ec:ad:ea:1d:b6:c3:72:11:
38:f1:c8:28:03:22:f5:e4:b1:10:2a:e8:a7:f8:ef:
94:a7:21:f4:ad:b1:b5:29:c0:b7:c9:68:fa:ab:aa:
53:eb:72:f5:74:12:98:cf:a7:63:22:17:c5:61:55:
81:8a:ab:cd:2d:62:56:49:48:0c:9f:bf:e3:13:85:
20:e9:54:39:81:a8:01:ba:83:08:78:6a:c3:db:a7:
72:5d:58:d2:c6:af:d9:5c:34:1a:f4:9c:a8:ae:11:
3d:1f:68:17:31:96:a8:b7:51:ea:dd:5d:14:30:45:
c4:4f:e1:18:06:cc:17:b4:7e:65:9b:07:81:9a:51:
44:3e:1f:df:70:01:60:58:3d:b4:39:f5:be:77:88:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2B:47:92:F8:CA:94:94:FE:2B:3D:24:4E:67:45:2D:6B:58:03:A6
X509v3 Authority Key Identifier:
keyid:36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bb:50:32:95:79:1c:54:39:42:9e:53:4c:66:fb:88:1b:45:
6c:8a:ae:68:f2:47:1e:88:7a:35:30:0d:36:d3:79:3d:15:91:
3f:72:86:58:86:f2:56:4e:83:83:7e:b9:db:f2:d2:2a:f7:cb:
3e:fd:01:6f:fa:b5:c2:51:8a:a2:70:8e:45:df:25:3a:23:92:
93:b0:9f:e9:2c:39:50:85:da:d8:8d:a4:c2:97:d6:9a:fe:48:
ba:13:cb:36:7c:93:87:4b:74:d8:28:ea:f5:c5:0c:17:42:ca:
86:ae:bf:21:7e:1e:17:14:25:51:86:b2:d9:69:65:93:93:f3:
a2:49:0d:54:ea:99:57:bb:02:b0:99:24:5e:90:86:f9:a7:df:
f4:e2:c9:02:50:b8:a6:4a:3f:12:b4:bc:cb:73:24:6e:93:75:
48:4b:91:8f:b6:6a:67:d2:bd:f4:6f:fe:ae:82:f1:40:de:bc:
b1:5d:1d:72:13:c2:09:00:bb:26:52:66:77:e9:91:bc:30:16:
15:71:7c:b9:aa:b4:95:24:38:f9:99:cf:2b:db:95:f4:49:a3:
21:31:61:77:55:c1:de:b4:80:ed:d7:28:f5:c2:0e:53:08:e2:
1d:cc:88:8e:95:38:ec:04:aa:f5:ae:2d:1a:eb:5e:3a:47:b7:
b4:be:31:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:37 2026 by rpki-client