Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
File: iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft (raw, json)
Hash identifier: UVCrmqURVfcbCd+ioTChzfKWJ97Ms7kN2b5EJ/5GLYo=
Subject key identifier: 3E:75:0E:5A:AA:D9:12:84:AE:3A:77:0F:BA:47:36:0F:AE:41:96:DC
Authority key identifier: 88:72:7F:AD:5B:5C:06:85:2E:1D:AF:A0:71:CE:47:67:A7:99:E0:50
Certificate issuer: /CN=88727fad5b5c06852e1dafa071ce4767a799e050
Certificate serial: 01987D1CA0FE3FEFD3C482882DE726C119F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 02:01:24 +0000
Manifest this update: Wed 06 Aug 2025 02:01:24 +0000
Manifest next update: Thu 07 Aug 2025 02:01:24 +0000
Files and hashes: 1: iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.crl (hash: HtXIgA+2BlHUO6FAEljjNv3KcwuZ/AcuRG35NkXDzT4=)
2: y26WpZEldCdiwpqodYBCZ3hzMbM.roa (hash: Q1+h8XgN41jDqcPqF4sdoSdNWkaGt5GnKBqYH1YkYlc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:a0:fe:3f:ef:d3:c4:82:88:2d:e7:26:c1:19:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88727fad5b5c06852e1dafa071ce4767a799e050
Validity
Not Before: Aug 6 02:01:24 2025 GMT
Not After : Aug 7 02:01:24 2025 GMT
Subject: CN=3e750e5aaad91284ae3a770fba47360fae4196dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:18:c0:00:a8:10:12:fa:5f:58:13:ce:78:
10:14:d2:16:60:ea:be:10:3e:89:8c:7b:02:60:07:
2c:73:68:57:15:a9:e1:0a:30:e4:23:cc:93:79:08:
2d:ae:1b:f7:04:cc:ed:1e:53:11:44:03:80:fe:c0:
38:33:4f:37:3b:be:84:04:53:a6:bb:15:20:1b:5b:
6d:f2:1e:ca:b5:36:08:e7:2d:f1:01:bb:f5:1a:05:
85:b9:7d:0b:b7:40:a3:e4:47:56:b4:71:e2:db:c8:
17:ae:16:1f:44:3d:82:12:a2:f8:ba:79:49:ac:6e:
4e:09:ea:44:a2:97:b4:13:4b:4f:00:eb:b0:e5:cc:
9b:b8:fe:25:07:2b:41:a2:fd:c6:dc:54:38:a9:49:
94:fb:aa:fc:40:95:8c:78:5b:41:25:9b:de:39:36:
0f:96:b5:8e:da:ac:71:34:d9:f7:02:d5:45:8a:ed:
95:d1:2a:c9:50:c3:0f:95:54:f5:41:61:66:65:9d:
0d:ae:2f:57:49:e6:97:37:97:9c:e0:4b:e4:2e:1c:
23:6e:02:fd:b9:05:d9:c6:a5:16:95:23:89:69:a5:
49:48:94:03:7c:dd:ae:6f:76:2e:fc:6d:ea:36:a8:
bd:bf:4f:98:02:ff:f3:f7:df:fe:58:ba:41:06:0f:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:75:0E:5A:AA:D9:12:84:AE:3A:77:0F:BA:47:36:0F:AE:41:96:DC
X509v3 Authority Key Identifier:
keyid:88:72:7F:AD:5B:5C:06:85:2E:1D:AF:A0:71:CE:47:67:A7:99:E0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c9:39:fd:64:cc:d9:1b:d7:97:28:c0:4d:af:7e:d1:5a:29:
89:38:8b:f0:5e:6b:bc:bf:d1:42:90:6d:5a:5a:1c:74:d0:66:
6c:bb:68:44:60:43:60:d5:4d:2d:b3:33:a5:60:8b:eb:6d:46:
6b:fe:5b:c9:25:d3:88:df:a8:63:16:ea:36:fe:bc:a4:08:a0:
0b:ee:63:88:9c:24:0e:6e:2a:97:93:0d:ae:8f:8b:7c:40:27:
36:4e:ff:a0:b1:9b:90:e9:c0:53:ff:4d:0c:c8:60:b9:9d:43:
a0:ff:8e:92:cb:ea:dc:ae:f9:eb:34:02:b7:b6:44:4c:fa:73:
64:47:4d:ee:38:81:62:5d:6d:81:98:82:40:72:2e:0c:79:11:
41:9e:29:b3:53:39:d9:a2:6e:41:6e:75:60:60:1a:4a:f0:82:
30:35:3f:a2:5d:97:db:3b:8c:87:62:e2:1e:32:99:f8:94:d3:
02:7f:f3:ae:75:3b:88:98:58:99:89:4e:e7:19:48:f4:5d:ab:
e7:32:6c:91:1f:4a:db:cf:77:ec:e6:b5:b7:5e:5f:17:51:77:
b2:35:e5:4f:f6:40:3b:8d:40:a4:c1:eb:f0:41:34:5b:d5:7c:
08:c9:b1:e5:bf:c0:ca:b9:7c:3a:92:d8:ba:7b:68:eb:55:92:
b1:bf:b8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:30:18 2025 by rpki-client