Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
File: n3Zvv-bZVxAAITgLsFVeCjum2OM.mft (raw, json)
Hash identifier: u7u4CMYOuBtDMR2xQoS0KOj/DMsD4CmHDeT7Nqi5zjo=
Subject key identifier: 28:2B:8F:61:22:D9:2E:D0:F7:4E:3E:26:98:44:32:86:5D:90:75:37
Authority key identifier: 9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3
Certificate issuer: /CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
Certificate serial: 0198782D4ABF4AEAE7D03439341B47A89327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
Manifest number: 0321
Signing time: Tue 05 Aug 2025 03:01:30 +0000
Manifest this update: Tue 05 Aug 2025 03:01:30 +0000
Manifest next update: Wed 06 Aug 2025 03:01:30 +0000
Files and hashes: 1: n3Zvv-bZVxAAITgLsFVeCjum2OM.crl (hash: NQ5sYShFHPxzDBet7dlzfnEfQYcAhoOsjyLV1ae+6NY=)
2: nw68p4MzATkHpZnxEQJwmsW_HEc.roa (hash: 1npuAHi5i81w1SD+MRYJu+5LmG8V+WtE/rfrB9iI3FM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:2d:4a:bf:4a:ea:e7:d0:34:39:34:1b:47:a8:93:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
Validity
Not Before: Aug 5 03:01:30 2025 GMT
Not After : Aug 6 03:01:30 2025 GMT
Subject: CN=282b8f6122d92ed0f74e3e26984432865d907537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:3e:26:c8:45:53:36:76:84:39:eb:a5:35:
04:41:f4:71:88:c0:73:0c:c7:cd:33:e4:00:e5:bf:
08:44:ca:d6:24:1b:78:f9:07:51:bb:b1:81:46:71:
ac:43:8f:89:38:b7:08:22:28:23:f1:44:bb:d4:51:
b6:82:6f:f4:e8:8d:00:d3:87:1b:bd:d2:1a:e6:9d:
11:0f:7f:a5:f1:cf:0f:34:b6:c9:ea:2f:8a:1b:3c:
91:17:57:60:ca:bd:a0:9c:fe:7e:23:c2:99:ce:94:
5c:fc:e3:d8:80:3f:3f:f0:31:da:11:61:e4:02:a1:
40:46:88:06:d6:91:ed:27:41:1a:23:85:e7:93:4a:
0c:ea:1c:01:47:7c:bc:52:cc:73:99:d5:0d:15:28:
97:bd:05:b1:20:b7:01:8b:ca:89:99:70:b1:a1:b7:
8c:c9:cc:94:33:b3:e0:61:d5:70:6d:71:01:65:e8:
f5:b4:fe:4d:e7:c0:a7:19:58:ea:53:6a:9b:08:de:
fc:d9:ef:2d:90:94:00:af:e6:6f:62:77:5a:6f:f4:
ec:fa:d0:34:2d:c3:98:d8:ee:b2:78:f5:45:bd:15:
b4:09:19:e5:b2:61:c3:cf:0a:65:4e:eb:b6:3f:23:
27:13:a8:c8:c1:09:52:2f:d2:df:ae:9f:27:6d:16:
ea:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2B:8F:61:22:D9:2E:D0:F7:4E:3E:26:98:44:32:86:5D:90:75:37
X509v3 Authority Key Identifier:
keyid:9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:21:5a:50:40:bf:84:da:fe:47:00:21:b7:44:b0:79:48:87:
07:7f:76:9b:0d:47:60:1a:6c:3b:82:ff:19:19:10:c5:44:53:
1f:24:0d:2d:76:cf:9b:ea:fa:1e:d1:45:32:d9:1e:5d:56:5d:
94:53:ec:4e:b7:c7:c7:4a:7d:5d:fc:59:07:6b:75:43:c1:f3:
87:c5:a0:32:86:4c:99:33:24:cf:b1:4b:28:c1:6e:a8:63:8c:
6a:ee:44:67:7a:ca:d7:51:b9:d1:01:a1:8c:92:2f:42:39:58:
9f:54:f1:80:6f:a5:9a:e7:24:5c:7a:bc:33:e9:d5:ef:b7:ef:
b7:fa:c4:55:2d:2e:6f:e8:0b:13:25:d2:ba:37:d3:76:1c:c9:
ba:9e:be:2c:36:6f:30:b9:1b:4c:36:1d:6a:9e:23:bf:d4:11:
52:1f:a8:1c:c6:6b:f0:15:8a:03:75:34:6a:11:ac:31:ea:ac:
6c:0c:86:28:64:b2:7a:d6:f0:2c:5f:3a:f8:a1:13:88:43:20:
6c:8d:bf:db:b4:85:4e:cc:db:e7:e0:82:9d:dc:14:40:8a:03:
20:90:44:0b:ea:6e:f9:bd:29:79:1d:2c:46:59:e3:19:38:09:
a9:b8:23:bf:ef:d8:bf:72:75:9c:39:ff:ec:a3:b4:13:e7:eb:
7f:45:7d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:46 2025 by rpki-client