Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
File: n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft (raw, json)
Hash identifier: NXCn+wcDkkqP1Ex4Q6TS6o3NJyx2NB/cwyxGIUwafFs=
Subject key identifier: E2:76:DE:73:E5:BF:25:C4:D8:83:E3:B8:E0:C8:14:2F:15:4E:A8:8B
Authority key identifier: 9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
Certificate issuer: /CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Certificate serial: 019970028429DD152F8485410D02D7A24BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
Manifest number: 169B
Signing time: Mon 22 Sep 2025 06:00:37 +0000
Manifest this update: Mon 22 Sep 2025 06:00:37 +0000
Manifest next update: Tue 23 Sep 2025 06:00:37 +0000
Files and hashes: 1: 1J8y1mQKbllZPdpNvAX7bscmWlI.roa (hash: jhx/+OmQQVqiCuyQX4gR49r4SoPl20ExxxakSlp8D6M=)
2: WBEZkdOtzqubY4jYGPTdt89fcs0.roa (hash: YzzD8M9BLKgLshmZ4kyXFcT1vvqCniPNKBqVVUae9sY=)
3: n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl (hash: KhyZTmYLChJhBrIwHUHbNq6mlgzS07Zrq66RbmK8HFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:02:84:29:dd:15:2f:84:85:41:0d:02:d7:a2:4b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Validity
Not Before: Sep 22 06:00:37 2025 GMT
Not After : Sep 23 06:00:37 2025 GMT
Subject: CN=e276de73e5bf25c4d883e3b8e0c8142f154ea88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7b:b0:cd:85:b3:e3:9c:06:f5:62:a0:ad:47:
07:c7:c8:62:24:5e:7e:fd:f8:f4:4b:bf:f4:a0:00:
a6:59:0c:b3:20:2b:50:7f:e6:af:0d:09:d7:f4:2f:
14:91:2a:96:7c:95:64:03:80:f6:9d:64:6d:fa:a5:
eb:2f:43:90:5a:02:c0:1c:46:96:08:60:0c:5c:e5:
1c:fd:6f:fb:8e:99:b8:d0:b1:80:bc:2d:be:57:8c:
b4:e6:14:9f:e4:84:39:80:56:0d:7a:56:fe:88:0d:
d2:d5:aa:14:42:97:b1:95:15:a6:2a:3f:e9:00:76:
df:72:d4:63:c4:35:5a:05:be:54:39:aa:39:3e:3c:
87:07:97:67:01:76:3c:d2:8c:58:48:e9:9f:4b:a7:
cf:72:18:70:fc:c5:06:12:74:ae:89:e7:06:ab:a6:
b0:65:b6:84:41:21:be:87:c3:21:9e:f4:d0:42:65:
40:af:a7:e2:21:e3:fb:d1:41:e7:52:cd:e6:59:11:
a3:10:b5:a3:9f:d5:9c:f5:1d:73:b4:d3:13:a7:db:
ca:c6:c8:69:29:24:3e:82:44:b9:0b:bc:55:57:78:
90:88:50:24:82:3c:7c:9c:23:8c:6c:36:55:ca:89:
ec:2c:98:e4:6a:55:3f:de:d0:ee:31:28:04:f1:e1:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:76:DE:73:E5:BF:25:C4:D8:83:E3:B8:E0:C8:14:2F:15:4E:A8:8B
X509v3 Authority Key Identifier:
keyid:9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:28:dd:d6:a4:da:88:e5:81:a6:ca:11:20:73:b7:c2:1f:0e:
87:dc:f0:2b:27:04:e0:4d:0e:11:25:8c:ad:e3:96:f7:c5:4b:
d9:f7:10:26:1c:15:11:1c:f2:56:96:16:68:96:ea:4f:63:2d:
78:63:b2:2d:e7:ca:d5:41:59:bc:3c:86:ed:8c:3b:6c:e6:8a:
1e:61:cc:28:c2:cc:79:11:f0:66:05:ae:17:bd:21:2d:e5:9d:
91:5a:e9:0c:f3:1f:e8:0c:57:24:fb:7a:ab:eb:03:46:64:c4:
8e:e5:24:ae:03:83:9d:43:0b:74:3d:b7:9d:d5:92:c0:e7:02:
d0:83:33:bf:32:05:9c:92:e3:4a:e9:ca:c3:43:14:09:db:ec:
20:f5:2d:b2:47:08:c8:9d:09:63:d4:20:4f:41:54:da:03:ad:
70:22:1e:ee:90:1e:e5:31:03:2e:76:72:b4:40:b2:58:e6:f0:
34:8e:d7:30:cd:ac:07:81:bc:bd:e0:04:f4:3d:a2:91:c9:87:
a9:9f:28:bf:08:fa:82:87:72:30:2a:73:00:cc:2e:39:76:3e:
fa:67:db:7a:0d:15:38:7f:a6:db:ec:a3:c8:17:88:63:5b:9b:
3c:39:c5:96:d7:34:5f:83:c9:e1:f5:22:73:ef:98:2c:d5:ce:
45:be:0d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:42 2025 by rpki-client