Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft
File: n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft (raw, json)
Hash identifier: 1RExYr9eCeunzWK5rQ0rGhZ7V2rpzzXASvL8uQ7Sadk=
Subject key identifier: 87:0F:AB:A1:CE:69:E6:6C:13:6B:03:3A:E7:F3:72:E9:49:E0:84:D8
Authority key identifier: 9F:74:EE:DC:10:B2:A1:02:8A:6D:4B:D0:1C:74:EF:03:1B:21:71:9A
Certificate issuer: /CN=9f74eedc10b2a1028a6d4bd01c74ef031b21719a
Certificate serial: 0196AE7B1B627769E1438A52897167B25D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Tu3BCyoQKKbUvQHHTvAxshcZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft
Manifest number: 087E
Signing time: Thu 08 May 2025 06:00:25 +0000
Manifest this update: Thu 08 May 2025 06:00:25 +0000
Manifest next update: Fri 09 May 2025 06:00:25 +0000
Files and hashes: 1: n3Tu3BCyoQKKbUvQHHTvAxshcZo.crl (hash: ns+WbxYor+E3maejDBt7qOEe1sBJDLcRPFKM3wEzfmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:1b:62:77:69:e1:43:8a:52:89:71:67:b2:5d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f74eedc10b2a1028a6d4bd01c74ef031b21719a
Validity
Not Before: May 8 06:00:25 2025 GMT
Not After : May 9 06:00:25 2025 GMT
Subject: CN=870faba1ce69e66c136b033ae7f372e949e084d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:cd:bb:46:ab:cd:9a:26:e3:3b:cf:3d:7b:
3d:9f:59:7a:64:a7:da:c9:cf:90:63:8a:06:ed:ef:
e4:ad:67:ef:3a:37:1e:03:b6:ee:1b:d8:a1:37:a6:
2b:20:91:13:67:20:03:d6:32:6f:eb:79:1e:e9:fa:
4d:3b:0c:20:7b:89:73:bd:c0:ed:56:d6:09:8c:d5:
8a:2c:01:a4:e1:18:0d:32:c9:76:da:77:83:94:30:
24:32:83:6f:84:a3:0d:f5:eb:0d:4f:4d:8b:c6:43:
65:36:9c:7c:41:cc:c6:fa:89:67:ce:f2:55:b1:c8:
d5:08:0e:f9:91:7a:19:8b:45:27:3a:43:eb:b1:56:
bf:6e:99:cd:de:1b:b4:e5:06:b5:ec:0b:03:4c:34:
f9:7c:6e:2b:67:86:df:42:f5:ea:b5:1f:88:75:94:
43:7d:cb:62:34:9f:8c:15:85:a5:97:56:21:9f:2f:
85:29:38:16:fe:3e:92:38:3f:a8:b0:d8:7d:9e:60:
91:ad:d4:9e:d5:7c:c6:5d:da:58:28:c1:0c:42:c1:
e9:ed:d8:c5:45:9c:92:b0:c8:b7:7d:65:3e:e3:1a:
ee:49:65:6f:7b:73:09:ea:6f:a0:59:b2:a2:6f:60:
c8:b9:f3:7f:8b:26:76:b9:04:75:32:d1:a5:e9:d0:
29:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0F:AB:A1:CE:69:E6:6C:13:6B:03:3A:E7:F3:72:E9:49:E0:84:D8
X509v3 Authority Key Identifier:
keyid:9F:74:EE:DC:10:B2:A1:02:8A:6D:4B:D0:1C:74:EF:03:1B:21:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Tu3BCyoQKKbUvQHHTvAxshcZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e5:ab:cd:2a:15:2a:10:6e:1c:81:34:b2:ed:69:74:2b:4a:
04:77:4e:df:7a:9d:e5:ad:18:e5:09:8e:29:7a:78:c6:b8:35:
48:6c:09:aa:5c:0a:9c:81:7c:30:0b:53:71:c0:f5:8d:7b:d0:
df:11:69:6e:04:a9:a6:f1:5c:2f:ed:88:85:20:8b:9d:77:39:
be:0e:a8:8b:b5:87:6d:14:ee:12:c5:61:87:c6:86:76:8e:57:
5d:7e:e4:95:12:5b:87:e0:e5:42:6d:2a:b4:37:ae:25:6c:e4:
58:6d:f1:aa:d0:d0:41:09:ad:42:4a:0f:b3:3d:65:46:26:13:
d4:bd:92:1e:7d:9b:70:eb:74:8b:56:fd:8d:00:fd:02:0c:f2:
d8:91:58:64:3e:5c:f4:cf:a9:07:a2:6c:08:d7:46:10:9e:1c:
b9:c0:53:f4:16:34:ad:45:50:fa:18:b7:34:0e:96:3d:ce:17:
65:55:10:b5:c1:08:43:b6:3e:e8:41:91:b8:86:83:64:b8:18:
87:88:cd:4b:b4:ab:42:72:13:a4:de:9b:8d:ed:30:ec:77:e9:
6a:11:9a:d5:d1:90:cd:16:fa:33:50:c0:6d:00:97:27:60:c1:
86:b4:47:c9:4c:4c:3a:4c:b2:42:6d:c3:ed:38:2c:88:f9:c1:
53:e1:83:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZauextid2nhQ4pSiXFnsl1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNzRlZWRjMTBiMmExMDI4YTZkNGJkMDFjNzRlZjAzMWIy
MTcxOWEwHhcNMjUwNTA4MDYwMDI1WhcNMjUwNTA5MDYwMDI1WjAzMTEwLwYDVQQD
Eyg4NzBmYWJhMWNlNjllNjZjMTM2YjAzM2FlN2YzNzJlOTQ5ZTA4NGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzDNu0arzZom4zvPPXs9n1l6ZKfa
yc+QY4oG7e/krWfvOjceA7buG9ihN6YrIJETZyAD1jJv63ke6fpNOwwge4lzvcDt
VtYJjNWKLAGk4RgNMsl22neDlDAkMoNvhKMN9esNT02LxkNlNpx8QczG+olnzvJV
scjVCA75kXoZi0UnOkPrsVa/bpnN3hu05Qa17AsDTDT5fG4rZ4bfQvXqtR+IdZRD
fctiNJ+MFYWll1Yhny+FKTgW/j6SOD+osNh9nmCRrdSe1XzGXdpYKMEMQsHp7djF
RZySsMi3fWU+4xruSWVve3MJ6m+gWbKib2DIufN/iyZ2uQR1MtGl6dApXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcPq6HOaeZsE2sDOufzculJ4ITYMB8GA1UdIwQY
MBaAFJ907twQsqECim1L0Bx07wMbIXGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjNUdTNCQ3lvUUtLYlV2UUhIVHZBeHNoY1pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xNjMxMjItNzNlYi00ZDYyLWE5Yzgt
MjU0OWI1ZDMzMzg0LzEvbjNUdTNCQ3lvUUtLYlV2UUhIVHZBeHNoY1pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xNjMxMjItNzNlYi00ZDYyLWE5YzgtMjU0OWI1ZDMzMzg0
LzEvbjNUdTNCQ3lvUUtLYlV2UUhIVHZBeHNoY1pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOWrzSoV
KhBuHIE0su1pdCtKBHdO33qd5a0Y5QmOKXp4xrg1SGwJqlwKnIF8MAtTccD1jXvQ
3xFpbgSppvFcL+2IhSCLnXc5vg6oi7WHbRTuEsVhh8aGdo5XXX7klRJbh+DlQm0q
tDeuJWzkWG3xqtDQQQmtQkoPsz1lRiYT1L2SHn2bcOt0i1b9jQD9Agzy2JFYZD5c
9M+pB6JsCNdGEJ4cucBT9BY0rUVQ+hi3NA6WPc4XZVUQtcEIQ7Y+6EGRuIaDZLgY
h4jNS7SrQnITpN6bje0w7HfpahGa1dGQzRb6M1DAbQCXJ2DBhrRHyUxMOkyyQm3D
7TgsiPnBU+GDQg==
-----END CERTIFICATE-----
Generated at Sun May 11 17:59:25 2025 by rpki-client