Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft
File: ntj8_zGTrFO7SwfEjT3SnvWI640.mft (raw, json)
Hash identifier: nZer8mh36d0QZweCP+70ozXi3ctVAZDSm19V9h1CXTU=
Subject key identifier: 30:46:AB:87:B3:36:8F:C6:AA:6A:57:16:06:E3:52:36:A8:FA:CE:94
Authority key identifier: 9E:D8:FC:FF:31:93:AC:53:BB:4B:07:C4:8D:3D:D2:9E:F5:88:EB:8D
Certificate issuer: /CN=9ed8fcff3193ac53bb4b07c48d3dd29ef588eb8d
Certificate serial: 01982A7F8F6420BBDB631C805757EE1BD46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft
Manifest number: 15F1
Signing time: Mon 21 Jul 2025 01:00:59 +0000
Manifest this update: Mon 21 Jul 2025 01:00:59 +0000
Manifest next update: Tue 22 Jul 2025 01:00:59 +0000
Files and hashes: 1: _4jzVkw7OmZ9lJwsv_vbnXpkkpE.roa (hash: 2z2Ynum4MWOgBN264LV/zt9+ZOq8rZ9Pv93EhuMN5M8=)
2: ntj8_zGTrFO7SwfEjT3SnvWI640.crl (hash: cjlor0nGxxQLl7AKvtoStCd9TFfbyR1PFkGfOCuFaUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:7f:8f:64:20:bb:db:63:1c:80:57:57:ee:1b:d4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8fcff3193ac53bb4b07c48d3dd29ef588eb8d
Validity
Not Before: Jul 21 01:00:59 2025 GMT
Not After : Jul 22 01:00:59 2025 GMT
Subject: CN=3046ab87b3368fc6aa6a571606e35236a8face94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:5e:fa:98:38:cf:ca:33:b2:c4:31:46:20:
f7:d3:d1:f8:ec:31:99:bf:14:cf:41:b4:13:fc:65:
b6:57:91:4a:28:8d:c5:a8:10:87:f2:fc:fb:31:31:
53:dc:1f:79:d5:27:de:7f:1d:f9:be:d7:e5:b5:44:
a6:aa:94:f0:8d:3c:e9:5d:c4:bb:e8:88:48:fd:82:
49:92:25:d1:b6:1d:80:73:6b:68:15:45:cd:9b:ec:
cb:30:81:b3:c7:1d:fb:2b:00:97:00:29:2b:50:d9:
e1:0c:d5:ee:3f:52:55:20:0f:ee:93:dd:2a:49:d4:
6e:8a:93:ae:db:76:38:da:4d:4a:5b:6c:bc:26:68:
0a:db:ef:ee:f2:95:97:83:82:57:5c:35:14:4c:02:
53:21:6d:e4:99:b9:32:21:aa:dd:2e:c9:d1:6b:2e:
0d:2f:85:70:c4:7f:77:96:2f:d5:35:82:17:2b:5a:
54:7d:88:b1:16:5e:66:07:ea:be:b0:42:b9:8e:31:
50:c5:c8:88:e5:9d:c9:7e:a8:6d:fd:5b:8c:69:52:
69:8b:a5:47:ae:30:67:21:65:88:43:3e:2c:bc:6f:
ac:fc:cb:96:2b:62:58:0c:ea:46:a1:9e:80:45:69:
77:ca:7f:f6:ee:80:e4:55:27:f2:90:0e:f9:69:ca:
7a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:46:AB:87:B3:36:8F:C6:AA:6A:57:16:06:E3:52:36:A8:FA:CE:94
X509v3 Authority Key Identifier:
keyid:9E:D8:FC:FF:31:93:AC:53:BB:4B:07:C4:8D:3D:D2:9E:F5:88:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8d:ec:bf:6f:fd:25:8b:3c:d3:1b:4c:c9:d9:59:1b:28:3d:
f5:21:6c:c4:de:71:10:48:dc:c8:8a:2e:c6:b0:7e:9f:fe:45:
1f:2e:0a:4a:88:0a:1a:56:ed:48:32:3c:7a:a8:e9:9a:16:01:
bb:83:cf:fc:6e:e6:44:57:c0:9f:0d:d2:54:45:ac:8a:c7:29:
af:fd:90:3c:c7:52:ec:28:b6:af:84:42:bd:55:e0:46:8a:67:
5f:1c:a6:a8:5c:bc:39:ae:46:eb:e0:35:bf:b2:05:75:ab:64:
11:96:b7:06:ce:a2:80:e1:fa:1c:a0:e3:ab:f7:aa:69:02:4f:
35:bd:f6:b6:30:78:48:00:c6:da:44:14:bd:33:4b:26:0b:22:
d0:b1:0e:8d:7b:ec:2b:35:c3:01:bf:f7:4c:75:ca:de:5c:bb:
80:6b:4b:65:9a:0a:a1:d8:75:ae:79:16:5d:13:29:72:0a:2f:
5b:c5:84:1e:b6:14:dc:30:42:e5:02:1a:de:68:4a:cd:1d:73:
c0:53:a9:9e:d6:dc:a0:43:8f:95:c1:31:df:9b:85:5e:b0:e5:
f1:84:63:99:5a:72:e7:c5:1a:9a:16:ae:12:32:cb:aa:23:a8:
80:d3:f3:16:60:35:df:ac:f4:20:d6:de:17:56:a2:19:b3:6a:
7a:11:76:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:01:20 2025 by rpki-client