Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
File: ZdqE27TGoS08m44ht3MEVooD21A.mft (raw, json)
Hash identifier: TV5Eq3Ipm1Nfqs1pqA/dsxvIOpJmio6K71vyOA0F6fI=
Subject key identifier: 4F:49:B8:FD:66:27:7F:5E:BE:46:E5:C3:A2:31:EC:56:2E:A6:C0:F2
Authority key identifier: 65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
Certificate issuer: /CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Certificate serial: 0198F5465B7007C9876357A525A025C688E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
Manifest number: 165F
Signing time: Fri 29 Aug 2025 10:01:25 +0000
Manifest this update: Fri 29 Aug 2025 10:01:25 +0000
Manifest next update: Sat 30 Aug 2025 10:01:25 +0000
Files and hashes: 1: ZdqE27TGoS08m44ht3MEVooD21A.crl (hash: uYN251g+v/dxhkMzhEnH6/vUJSMb5/Ekoe0hx0MPvps=)
2: _rRQdKAM7uxfZ2rXreMkfx0DeSU.roa (hash: 1S9r9dgtBtjJtT3hRQaeliv6L2sNDV6BEV+j0Jy6Qn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f5:46:5b:70:07:c9:87:63:57:a5:25:a0:25:c6:88:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Validity
Not Before: Aug 29 10:01:25 2025 GMT
Not After : Aug 30 10:01:25 2025 GMT
Subject: CN=4f49b8fd66277f5ebe46e5c3a231ec562ea6c0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:33:fd:be:7c:19:0f:8d:13:3f:b4:11:f1:
7f:37:cf:4c:d2:8d:77:6f:6f:75:b8:b7:fa:a1:6a:
4b:ae:ff:d8:67:be:ee:49:65:5d:c8:30:da:2f:0b:
68:fb:df:3e:a2:87:70:19:8c:63:b4:86:6a:47:a2:
fb:4a:51:20:93:da:02:76:58:94:5b:d4:df:36:80:
d8:98:17:a8:9a:3a:d6:a3:fa:d6:4a:c9:bd:b9:a7:
e8:21:bb:88:7f:c3:d8:a5:66:c6:b3:3c:11:ab:32:
23:7b:3e:e3:a0:22:75:2c:05:0b:c8:38:f6:64:98:
51:1a:84:6d:20:b2:ce:83:1a:15:df:c8:c2:5a:71:
54:80:d0:8d:dc:9d:50:0e:df:f1:3f:39:15:54:d9:
5e:61:dc:58:99:c1:ab:94:fb:f1:33:de:07:1c:26:
94:d3:d7:ee:be:a5:dd:e5:c4:61:f4:9f:db:b3:0a:
3c:32:4a:79:02:cf:58:7f:5e:8e:c4:7e:7b:29:c9:
37:2b:3f:b5:0b:53:8e:f0:e8:97:5e:20:07:9a:07:
05:bd:d2:e7:66:ea:88:c3:6f:94:97:66:2a:36:b4:
8e:7e:38:73:55:c8:f1:da:2e:aa:5f:22:a1:d8:03:
9d:eb:45:2d:91:6e:fd:ac:8d:86:43:04:d6:47:61:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:49:B8:FD:66:27:7F:5E:BE:46:E5:C3:A2:31:EC:56:2E:A6:C0:F2
X509v3 Authority Key Identifier:
keyid:65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6a:a6:9c:55:71:69:8a:b2:dc:11:10:27:7f:14:59:ce:14:
42:3d:bf:c9:c2:6c:6b:e4:27:8a:9d:4e:aa:ae:83:c3:bc:d2:
46:1f:29:a6:47:13:34:61:1b:49:3a:f7:2a:9a:1e:b8:c2:a6:
02:1f:4b:ce:83:e6:0e:11:94:4c:5d:b5:33:e0:a5:00:f6:a7:
74:7a:17:d6:c9:9d:1d:7b:fe:93:72:bb:0d:d5:42:e9:00:01:
b9:03:d1:cf:d7:d5:56:b7:21:76:20:ae:31:d5:ab:7a:3c:a8:
9d:fe:08:a8:72:19:8b:c6:f9:3b:c7:2c:7c:8c:72:a0:0c:f4:
b3:93:b2:e7:ae:60:f4:c4:8d:b9:33:84:89:2e:7c:b4:f9:f0:
d8:81:ee:c8:88:62:46:40:07:46:8f:14:2a:96:d3:bc:d2:a9:
63:76:be:5d:2b:19:10:58:4a:9e:a3:25:c4:4c:03:e8:39:a5:
6d:94:00:9e:66:51:fd:af:b4:1c:ec:a1:c2:a1:0f:26:91:a7:
f1:90:8f:0b:b5:e7:f9:d0:30:82:0b:42:13:e2:8d:ec:df:ab:
bf:71:09:39:bb:b6:05:e8:03:27:11:59:f1:7a:63:29:fa:5e:
5c:6b:97:fd:30:46:9b:d7:bf:6b:ac:e6:84:fc:31:a5:30:f7:
50:4b:0a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:52:18 2025 by rpki-client