Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
File: ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft (raw, json)
Hash identifier: TrE6LE5pC2aiZTDNfY4O8QFWuQxQiV54wEmrFbDgdLs=
Subject key identifier: 05:03:B4:C2:CF:34:3B:C2:E1:F8:E3:E7:8D:23:90:F0:E3:F6:85:EB
Authority key identifier: 7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
Certificate issuer: /CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Certificate serial: 019873E1CD864442910746C56019893A31D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:00:34 +0000
Manifest this update: Mon 04 Aug 2025 07:00:34 +0000
Manifest next update: Tue 05 Aug 2025 07:00:34 +0000
Files and hashes: 1: W5t6K8mhaeB1jcBRnZnKCObRLXo.roa (hash: vlPvYnrh67Sac6G89vl74L5sy1jyV/vOZ0tMCXQKGc4=)
2: ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl (hash: oQERobT+WRVp7nKBYIGwjb0dfCZLt551tpbyuce1uEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:cd:86:44:42:91:07:46:c5:60:19:89:3a:31:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Validity
Not Before: Aug 4 07:00:34 2025 GMT
Not After : Aug 5 07:00:34 2025 GMT
Subject: CN=0503b4c2cf343bc2e1f8e3e78d2390f0e3f685eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:f8:bd:f9:d9:c0:90:1f:b8:6c:2e:13:ab:
4c:88:6b:ac:76:1f:18:4a:1f:f9:98:3e:bc:2e:b6:
7e:67:70:9a:7f:75:e6:ee:c2:b2:24:dc:9c:10:65:
68:35:c2:0f:ec:74:83:fa:79:32:17:3b:1d:7b:f8:
0a:75:7e:7b:b6:a7:10:5d:82:0d:80:4f:31:fe:8b:
22:ef:78:d2:68:f2:e3:2c:97:2e:f2:80:ae:26:b1:
11:5a:66:28:74:35:e0:93:c7:16:fe:e4:98:df:f2:
51:bc:02:0d:67:29:24:aa:dd:19:e6:01:9d:84:69:
9d:32:4f:f3:c9:9b:e8:0d:c2:27:3f:9a:ad:3b:e7:
62:a5:49:b5:8e:41:72:93:81:a7:5c:7d:61:db:f4:
1d:49:77:97:df:c6:28:2e:3c:fa:95:4d:86:59:f4:
ff:f3:6b:28:d0:fb:5b:03:95:a4:c5:58:44:e0:1b:
1d:bf:b9:6d:46:2a:e4:ff:42:05:4a:b5:a4:c8:d5:
c2:23:21:f4:e9:0c:2f:7d:5e:77:78:62:ff:bf:0b:
21:d6:3b:01:30:ef:32:0d:45:7e:16:51:09:8d:59:
a1:ff:ea:5f:9b:d8:08:8b:eb:47:6f:c5:97:38:0c:
7f:57:c1:b4:47:4a:dc:93:36:94:0f:e4:32:ac:c7:
6e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:03:B4:C2:CF:34:3B:C2:E1:F8:E3:E7:8D:23:90:F0:E3:F6:85:EB
X509v3 Authority Key Identifier:
keyid:7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:98:4f:f6:63:d1:78:d4:40:a9:4b:30:e5:49:82:ec:ce:49:
fa:d7:f2:28:c6:87:cc:82:2e:69:46:04:b1:4a:dd:29:fd:0f:
7c:fb:1e:e6:85:7c:7f:f6:85:fc:9c:41:2d:c9:81:68:10:8a:
c0:89:70:99:ae:a0:21:ad:44:2d:51:da:70:56:51:42:fc:ca:
01:bf:46:f5:ab:10:83:c2:fd:18:88:83:a6:07:d2:d6:61:64:
c4:a9:87:25:c5:e0:f4:5b:56:5f:3e:fe:b7:d5:ef:80:7b:63:
e4:08:32:dc:d3:25:e9:66:94:c0:7d:84:d9:7c:83:d5:4e:ea:
99:a1:d2:9a:00:2d:22:39:39:89:5f:bc:46:7e:e4:0b:3e:0f:
0c:34:bc:6c:67:4e:23:30:22:72:10:ac:6e:fa:34:ff:c8:41:
03:65:d6:02:e5:81:68:a7:50:f7:d0:36:4f:4d:74:cc:1c:c0:
d0:94:ee:9b:2c:7e:2c:fd:b0:9d:3e:5f:a3:59:ce:e1:a6:32:
c8:5b:e2:f1:47:79:cf:ca:0e:50:7f:72:4a:83:b7:cc:e8:9a:
01:9c:19:46:ca:42:7e:2c:7b:74:b2:bf:95:4f:7d:3b:8e:7b:
c7:69:ee:3a:f8:bd:fc:60:7f:9d:3f:02:2a:d9:d9:8d:20:f4:
07:73:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:41 2025 by rpki-client