Manifest
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft
File: 7ACA2B768DEF8BB9544468ED5F726256C364336E.mft (raw, json)
Hash identifier: XGXrs2TZSw9CfexRQkScKo1V2n786O9Wa2vY5bPmbmc=
Subject key identifier: 18:AC:D6:DA:C6:AA:00:CD:7B:49:42:96:5F:0D:2A:61:6F:E5:7D:65
Authority key identifier: 7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E
Certificate issuer: /CN=7aca2b768def8bb9544468ed5f726256c364336e
Certificate serial: 63B9DCBB8AFD76CD637D3AABDAAEF0DDBDC06E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft
Manifest number: 022E
Signing time: Thu 31 Jul 2025 01:28:58 +0000
Manifest this update: Thu 31 Jul 2025 01:23:58 +0000
Manifest next update: Fri 01 Aug 2025 05:02:58 +0000
Files and hashes: 1: 7ACA2B768DEF8BB9544468ED5F726256C364336E.crl (hash: w/ZLHLhGdkIGdJ5BY1lSAEHSBsGb5I1EtSY6XT6DOFw=)
2: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: ruXTtDqCFR6FeRYnsf8ZXUqkN0R5+iLLKkgHPFNoB3A=)
3: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: iewdWSe6JDqXZwV+5rxPgHXeqvYSAY33S3waDnF6QEI=)
4: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: 8O1tIAno00Fq3J11voTy+bZ9nLQmODTuv88Ar+OUiVs=)
5: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: PyYnfMwZZjBynv89/LlY/K0aQ9UlxMYoLmzx/yfbs2w=)
6: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: 5N/Wd0YuxRMcEUpk/fmXDUj02n81dTqVqyb1T4P+ixA=)
7: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: KjBpGCjhgcgzyMWLAwsBFjFxOErpP8CS58MUX0jm8U8=)
8: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: Yzc/4D7Q3iiVMpceJ0SReQghPqerbs5PTmpM0kDQva4=)
9: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: 3NgMpZV5LRLe09p3vkec7ImeUr6zl+R4GEX1WforxJc=)
10: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: oZe7kx0dptbnk/pk09tmwpUTyeKrXYcrC32dA/P40Gk=)
11: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: 6Vd3A68tlmMtxQej2vYw2TTJoQXEgyQe+0Uw9Nd1As0=)
12: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: 0X6DHgcvAIZhL1S7iWw9n32W1I2GuZJRkhwdRW/ZvsA=)
13: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: wZqhyYMlFnMxPXGy2swOtIb6clVA4BnPUsg46ZKHyzg=)
14: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: ckMcxXPiF8vlvTJRQQIsDxcEVQLOX0RuZe7KgLtHzqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b9:dc:bb:8a:fd:76:cd:63:7d:3a:ab:da:ae:f0:dd:bd:c0:6e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aca2b768def8bb9544468ed5f726256c364336e
Validity
Not Before: Jul 31 01:23:58 2025 GMT
Not After : Aug 1 05:02:58 2025 GMT
Subject: CN=18ACD6DAC6AA00CD7B4942965F0D2A616FE57D65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:b8:e3:ff:78:5a:30:68:f1:f3:e0:93:2f:
1f:56:58:4d:09:5e:f6:1e:6b:91:fe:71:11:63:1a:
f5:3b:bd:48:df:39:26:e8:16:51:67:8d:46:61:79:
8a:b6:98:1a:4b:0e:60:b5:b7:f3:36:54:25:52:13:
db:15:9b:db:9c:ee:14:93:b4:bf:8e:9a:c1:12:38:
a1:97:11:7e:72:fd:34:52:7f:19:b5:c5:94:46:58:
db:60:0d:01:56:04:b6:82:38:e3:76:e4:88:26:54:
af:00:2c:0e:d1:7b:13:d6:6a:bf:39:38:04:f7:e7:
d4:be:30:92:1c:d0:3a:dc:fe:12:bb:d0:15:9b:f0:
95:92:fd:3c:0b:9e:ac:30:f1:44:4e:87:ee:c3:ea:
a4:76:26:3d:04:44:9d:4a:60:6a:17:35:be:5c:36:
00:e8:8f:2e:6a:d0:13:70:66:da:dd:32:3e:52:25:
67:23:99:72:ac:c0:97:7e:05:f4:9d:74:fa:73:04:
f4:40:fb:d2:94:76:1d:f7:8d:98:ed:14:72:1b:26:
2a:82:f7:bf:75:8a:94:75:3e:dc:5f:8b:6a:98:e1:
55:e1:01:28:16:f2:76:34:42:ae:f9:24:40:d1:5d:
9f:2a:bd:64:6b:5a:35:bc:39:44:22:c2:98:de:23:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AC:D6:DA:C6:AA:00:CD:7B:49:42:96:5F:0D:2A:61:6F:E5:7D:65
X509v3 Authority Key Identifier:
keyid:7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:09:76:c5:a3:a5:da:82:c6:76:5a:6e:9b:e0:45:cf:42:ee:
00:0b:e5:39:33:22:0e:b8:17:96:a7:39:b7:84:5d:c4:be:de:
bf:a9:1c:54:07:e9:4f:2b:77:f4:2e:1e:d0:29:3c:91:90:12:
26:ac:ca:14:52:f2:99:f0:0b:19:f4:65:21:05:39:b9:2d:c0:
bf:eb:0d:fa:72:67:82:b6:24:2a:9d:94:0f:ed:29:32:11:25:
df:b6:4e:0e:37:b9:a8:44:76:ae:78:e2:74:5d:66:3b:e6:62:
d8:45:f5:85:4e:36:03:8d:16:69:02:b0:d4:5b:67:3f:7c:d1:
35:d2:92:23:73:0b:fb:69:f0:33:8b:b4:ee:44:ce:4b:ed:73:
56:ec:21:e4:00:c7:cd:f0:25:d2:98:47:ae:fa:ca:94:6f:57:
83:8a:b4:37:38:8d:9a:79:29:fb:54:36:a8:3e:29:42:54:05:
9a:77:6a:be:8f:2a:a5:06:5f:39:10:9c:1e:84:f9:60:06:4a:
95:95:27:34:88:22:f2:c7:24:5c:c5:17:97:dd:e6:d4:db:d7:
9a:8e:60:cd:10:46:98:2d:4e:e8:83:8d:93:65:d7:08:0e:10:
b8:62:65:dd:86:11:f8:d2:b3:49:b8:df:a6:ea:27:60:2a:01:
db:df:11:f3
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUY7ncu4r9ds1jfTqr2q7w3b3AbhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FjYTJiNzY4ZGVmOGJiOTU0NDQ2OGVkNWY3MjYyNTZj
MzY0MzM2ZTAeFw0yNTA3MzEwMTIzNThaFw0yNTA4MDEwNTAyNThaMDMxMTAvBgNV
BAMTKDE4QUNENkRBQzZBQTAwQ0Q3QjQ5NDI5NjVGMEQyQTYxNkZFNTdENjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkZrjj/3haMGjx8+CTLx9WWE0J
XvYea5H+cRFjGvU7vUjfOSboFlFnjUZheYq2mBpLDmC1t/M2VCVSE9sVm9uc7hST
tL+OmsESOKGXEX5y/TRSfxm1xZRGWNtgDQFWBLaCOON25IgmVK8ALA7RexPWar85
OAT359S+MJIc0Drc/hK70BWb8JWS/TwLnqww8UROh+7D6qR2Jj0ERJ1KYGoXNb5c
NgDojy5q0BNwZtrdMj5SJWcjmXKswJd+BfSddPpzBPRA+9KUdh33jZjtFHIbJiqC
9791ipR1Ptxfi2qY4VXhASgW8nY0Qq75JEDRXZ8qvWRrWjW8OUQiwpjeI0g7AgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUGKzW2saqAM17SUKWXw0qYW/lfWUwHwYDVR0j
BBgwFoAUesordo3vi7lURGjtX3JiVsNkM24wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl
cG8vbmxuZXRsYWJzLzEvN0FDQTJCNzY4REVGOEJCOTU0NDQ2OEVENUY3MjYyNTZD
MzY0MzM2RS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Vzb3JkbzN2aTdsVVJH
anRYM0ppVnNOa00yNC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y
c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x
LzdBQ0EyQjc2OERFRjhCQjk1NDQ0NjhFRDVGNzI2MjU2QzM2NDMzNkUubWZ0MBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB
BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQBPCXbFo6XagsZ2Wm6b4EXPQu4AC+U5MyIOuBeWpzm3hF3Evt6/qRxUB+lP
K3f0Lh7QKTyRkBImrMoUUvKZ8AsZ9GUhBTm5LcC/6w36cmeCtiQqnZQP7SkyESXf
tk4ON7moRHaueOJ0XWY75mLYRfWFTjYDjRZpArDUW2c/fNE10pIjcwv7afAzi7Tu
RM5L7XNW7CHkAMfN8CXSmEeu+sqUb1eDirQ3OI2aeSn7VDaoPilCVAWad2q+jyql
Bl85EJwehPlgBkqVlSc0iCLyxyRcxReX3ebU29eajmDNEEaYLU7og42TZdcIDhC4
YmXdhhH40rNJuN+m6idgKgHb3xHz
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:13:09 2025 by rpki-client