Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
File: nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft (raw, json)
Hash identifier: NrR8OhtIa/lDu2TlnO4srkUjila3h7/VsEMWWVeHwdM=
Subject key identifier: 19:55:24:42:72:13:70:64:DD:4B:67:EB:7E:5A:D4:FE:6E:36:6B:80
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Certificate issuer: /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial: 0199EC09A16D8A90AAD0E9C8A37A49BE1A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
Manifest number: 15D0
Signing time: Thu 16 Oct 2025 08:01:18 +0000
Manifest this update: Thu 16 Oct 2025 08:01:18 +0000
Manifest next update: Fri 17 Oct 2025 08:01:18 +0000
Files and hashes: 1: D2puN1AdZ1JNvFyB30_yGN8jQe0.roa (hash: 2k+YekT8y6pWHIhQMm8Q342e5tW1eRByVypogLnX8G0=)
2: U_LNSvlDlkkr0YEu8loP_N3lVG8.roa (hash: sfDFxTDzQkmKbFdSJOmY1OQKmiVJ1hkpwWXjIhD3ogw=)
3: nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl (hash: jSYKyE2ZM+8pTN5hxhQeirgakrIrQSAiSLG3rKJBks0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ec:09:a1:6d:8a:90:aa:d0:e9:c8:a3:7a:49:be:1a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Validity
Not Before: Oct 16 08:01:18 2025 GMT
Not After : Oct 17 08:01:18 2025 GMT
Subject: CN=1955244272137064dd4b67eb7e5ad4fe6e366b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:b2:93:57:ec:cf:1f:b5:ae:04:4a:d3:37:
bc:9d:50:32:6c:77:c5:ef:d8:ef:90:97:ad:6a:cf:
52:08:b7:dd:6c:42:1b:18:d5:25:d8:08:c5:d4:a8:
ed:a1:0f:34:a4:1a:32:62:05:cb:d2:98:5a:de:bf:
96:b7:40:9f:be:21:5e:6d:e5:ae:d2:f9:aa:6f:66:
e3:75:62:9e:89:c5:16:c2:ff:34:0a:5e:ae:18:64:
5c:1b:a1:0b:50:4a:d3:c2:50:8a:f6:c0:12:50:02:
fb:df:e8:6f:76:07:7f:49:f5:01:77:3f:ef:5a:64:
db:3f:43:9c:34:ff:90:98:b2:ba:fb:65:24:70:6e:
31:ca:ff:be:07:b9:53:24:8d:d5:fd:ab:45:74:ca:
cf:91:f3:33:b3:28:b5:2f:a0:46:d0:8a:b9:9b:20:
85:f1:b2:24:29:28:34:4c:84:c3:2a:4c:12:22:f8:
c4:43:45:1d:e0:3f:b2:37:e4:cd:45:4b:ec:04:1b:
fd:ec:91:62:d1:9d:d4:a6:0b:e9:89:63:f0:01:af:
82:21:8d:32:17:1d:7b:14:0e:93:cd:31:77:ae:b5:
24:ac:24:02:8b:37:a2:70:3f:65:72:f0:0a:92:cb:
22:d7:d1:e8:53:f5:8a:56:88:06:9a:17:a1:9f:2a:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:55:24:42:72:13:70:64:DD:4B:67:EB:7E:5A:D4:FE:6E:36:6B:80
X509v3 Authority Key Identifier:
keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c7:f7:dc:5d:a2:6d:85:be:70:e0:76:98:48:ad:53:da:6c:
ba:43:c4:34:da:c5:71:a3:69:a5:f9:dc:00:60:be:8d:60:a2:
56:7a:37:6e:3a:49:5c:05:e5:d5:e8:48:c4:d8:3e:d5:7c:e9:
6d:51:b0:2f:d8:ae:4d:69:07:a2:77:cd:2c:1b:c0:01:30:b4:
6c:6c:98:e3:18:ab:8b:7c:6c:e7:88:f5:27:49:a4:ad:30:c5:
70:93:b2:81:d6:45:43:d9:fe:12:58:01:f3:7b:28:a1:a0:f6:
dd:6b:ae:0b:b9:52:fe:c1:8a:36:8b:72:9b:bd:72:f9:fe:f7:
12:ae:57:c1:ab:34:91:16:00:5d:d5:5d:a2:a6:0c:fc:f9:95:
82:94:e8:33:b3:f2:29:b0:79:9b:2f:87:fe:be:02:dd:ab:b5:
ae:77:06:30:08:84:ee:29:57:0a:fd:36:b7:44:04:5e:16:f7:
75:b1:f5:e2:0b:68:5e:b1:33:d2:25:ed:1c:0c:3e:3f:ff:19:
94:e2:9e:a5:9e:e2:8e:52:d9:a1:73:dd:95:dc:1d:b3:0b:45:
05:8e:b9:e2:3c:12:f0:d3:c8:79:13:2b:10:96:c7:fe:77:3d:
c0:8c:4e:55:98:23:de:0f:a6:2b:58:25:14:9a:c8:17:9d:0b:
26:a2:50:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:37 2025 by rpki-client