Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
File: TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft (raw, json)
Hash identifier: KMi5b9Co/zHI5cJZ7pBAexd6WS2kA6VF7HVDDqZkurc=
Subject key identifier: B5:DA:FE:23:4B:A0:6F:5B:D4:40:27:CA:8B:6E:08:35:2C:19:F6:40
Authority key identifier: 4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
Certificate issuer: /CN=4e42466070ff8c3cc967da48e14da12df71b2671
Certificate serial: 0198ABE44564A08DC38E4CDAE7118B9303FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
Manifest number: 1635
Signing time: Fri 15 Aug 2025 04:02:00 +0000
Manifest this update: Fri 15 Aug 2025 04:02:00 +0000
Manifest next update: Sat 16 Aug 2025 04:02:00 +0000
Files and hashes: 1: TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl (hash: kRgOWI1kg3MY4D0lVbvBiSVXdfQtk6mSes5IBMbZh84=)
2: Vn0PoWq91day6d--kuy39s7CP5U.roa (hash: daOIdL4b5N4GukWwie8JBBD3OBe/sdcGSiKd1pWKhtI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ab:e4:45:64:a0:8d:c3:8e:4c:da:e7:11:8b:93:03:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e42466070ff8c3cc967da48e14da12df71b2671
Validity
Not Before: Aug 15 04:02:00 2025 GMT
Not After : Aug 16 04:02:00 2025 GMT
Subject: CN=b5dafe234ba06f5bd44027ca8b6e08352c19f640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:60:75:ba:57:ac:52:3a:55:ab:02:f3:55:
cb:63:c3:6a:97:6e:af:56:c6:80:07:d7:30:d5:00:
8a:32:06:78:c0:b8:ff:0b:75:3e:bd:3f:c0:46:96:
9c:73:d4:15:f8:7c:c1:ca:86:25:67:3c:46:7e:39:
5b:f8:bf:4b:73:da:23:46:16:91:e5:90:5b:70:65:
74:85:59:c5:22:52:54:92:f6:6c:3b:64:a5:d0:52:
40:1e:42:d6:a2:3e:66:9e:f8:66:91:49:14:94:ae:
19:8e:39:56:86:b8:ef:70:f3:dd:f1:f9:4a:ac:69:
36:03:8f:73:7c:3f:9d:ff:31:0e:a1:64:a7:d7:92:
fe:8b:b3:d9:a2:d9:14:e5:49:1c:ba:7e:fe:9f:95:
47:24:68:84:f1:7f:94:c2:99:ac:91:4f:fc:26:1b:
d3:ac:00:4e:0a:eb:2f:d0:d8:a7:d9:90:22:d6:a2:
f9:35:d4:ee:77:b6:3f:fe:95:cb:86:0c:1b:2c:ef:
ba:c1:e6:9f:14:87:b1:bf:b3:fe:6a:90:6b:6d:54:
0f:de:91:72:91:d3:bf:9c:c2:38:24:78:c8:5d:c3:
c0:ef:1e:f5:cd:7b:bb:6e:e9:81:e8:8a:0b:e8:bc:
81:3a:d4:11:4d:70:db:81:70:33:c3:2c:e1:76:bc:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DA:FE:23:4B:A0:6F:5B:D4:40:27:CA:8B:6E:08:35:2C:19:F6:40
X509v3 Authority Key Identifier:
keyid:4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6e:58:76:3d:6e:1e:76:96:b2:88:a8:d4:88:f3:e4:cb:66:
f5:b3:d6:0c:0b:84:41:50:c6:d5:a9:72:f8:7c:c3:49:7c:04:
fb:d4:6f:1c:c6:6a:d5:3b:88:97:e1:8f:77:1b:58:6c:46:a9:
2b:8c:e8:60:8f:49:fa:aa:e3:8d:40:af:ee:8c:38:eb:cd:da:
74:2b:55:f8:30:c4:04:13:78:f1:9c:0e:2e:12:33:76:b5:96:
b1:5c:e4:eb:72:3f:26:02:07:f9:e3:b3:3d:41:99:0d:07:d2:
25:98:26:cf:5c:91:15:c6:93:8d:9a:aa:b7:f3:e9:53:f9:b9:
f2:3d:b6:4e:63:19:e4:85:ab:72:1d:79:6b:6b:e4:be:29:85:
e3:da:61:f3:a4:f0:42:dc:21:9a:61:7c:a3:c8:f5:6b:0d:e3:
bb:3a:b3:6f:8c:39:07:26:88:9d:15:5a:e4:04:82:2e:d5:97:
4a:7c:53:01:93:a8:12:29:6b:dd:70:a5:34:a8:58:27:d2:7a:
8c:54:7f:98:ae:f9:df:eb:b8:db:eb:13:f4:c8:2b:d0:7f:eb:
26:18:8c:ef:df:27:aa:8e:41:86:b6:87:12:4d:44:f7:f6:b4:
cd:28:ee:1d:1d:32:b8:12:a0:1b:90:70:45:3c:0a:8d:c3:47:
da:78:e0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:54 2025 by rpki-client