Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
File: 1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft (raw, json)
Hash identifier: JOJoIIiTaSWP9kUBHeIyM1j5fRB4iYOD0GF4N0WfFQY=
Subject key identifier: 89:49:89:DA:7D:5D:49:BD:3B:A1:4D:49:E1:F8:23:6D:86:25:BE:DC
Authority key identifier: F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
Certificate issuer: /CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
Certificate serial: 01990D1774D28D1AA5C4F4D8EEAA8B0F41E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
Manifest number: 1193
Signing time: Wed 03 Sep 2025 01:01:04 +0000
Manifest this update: Wed 03 Sep 2025 01:01:04 +0000
Manifest next update: Thu 04 Sep 2025 01:01:04 +0000
Files and hashes: 1: 1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl (hash: SydX6bqkxtJH1ne41rdefnOUCMZWIkLtIsbZ9jYFQIA=)
2: 7AjGLQsJj7KXSqBNNqiLp45yitU.roa (hash: z05Ju9vFqoh0JjoPd8SpAqwh3plkGnHfuFRv3k0ibgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0d:17:74:d2:8d:1a:a5:c4:f4:d8:ee:aa:8b:0f:41:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
Validity
Not Before: Sep 3 01:01:04 2025 GMT
Not After : Sep 4 01:01:04 2025 GMT
Subject: CN=894989da7d5d49bd3ba14d49e1f8236d8625bedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:d4:7f:25:ea:6c:6c:37:c9:eb:e5:71:11:
cf:49:0a:25:c5:89:37:7d:69:1e:67:10:2e:37:56:
42:9b:f9:2c:d8:15:5a:eb:69:55:a7:06:80:c9:ea:
fa:7a:9e:01:ed:e6:e5:9f:4f:b2:a2:00:5a:bc:0a:
1f:5d:ff:7d:7b:66:84:45:bd:2c:54:23:6e:59:e6:
80:cd:eb:58:3a:68:40:08:c8:09:da:d0:39:0d:56:
1d:4d:3e:f3:c0:5d:18:79:11:27:cd:8a:ac:82:19:
92:cc:de:af:da:e4:4c:48:08:01:fa:22:ec:7f:16:
50:88:a9:57:6e:bf:b2:a4:a2:53:29:a5:3f:48:9b:
a8:ec:1f:fb:c2:2a:81:dc:36:69:cc:f6:d7:46:c8:
fd:1a:ce:37:6c:ad:90:36:61:fd:3c:fd:5c:25:33:
af:fd:80:3a:3e:23:71:81:cd:c4:f5:91:37:43:7a:
2a:83:40:fa:4a:60:01:60:4d:b8:d6:bb:bb:92:5b:
f2:0f:81:19:82:2b:4f:c8:98:22:e0:29:77:57:fb:
70:56:81:0a:15:4e:7d:f4:6a:b8:23:c4:c6:78:fa:
ef:cd:6a:60:64:2e:e5:df:f2:46:16:a7:94:2b:fd:
92:ff:c6:c5:38:c7:1b:28:ec:be:58:2c:22:5d:98:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:49:89:DA:7D:5D:49:BD:3B:A1:4D:49:E1:F8:23:6D:86:25:BE:DC
X509v3 Authority Key Identifier:
keyid:F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a4:01:e8:04:1d:8d:d9:c2:f7:62:cf:c8:17:94:f4:9c:0c:
c5:d1:0c:70:ee:be:79:6a:ec:b9:8b:70:d2:3b:7e:cf:77:dd:
8a:ae:b8:c0:c8:35:43:39:f0:cf:7b:db:ae:3f:17:67:f5:db:
1b:58:14:f4:ea:97:32:5e:b8:96:95:99:24:7a:ee:39:32:c7:
f7:e0:49:51:3a:ed:23:e7:e9:a5:45:79:5b:16:4d:70:c4:00:
31:a7:71:a8:32:35:1f:58:bb:5d:65:11:40:82:d3:53:70:2b:
c5:42:44:2a:2b:02:5b:49:da:ec:06:66:eb:f3:52:9f:39:25:
f0:45:07:ac:d4:66:5a:eb:99:a3:ee:b0:9f:42:a8:9e:d2:b3:
28:e0:61:1f:f5:7b:f3:81:da:1f:6d:16:34:83:32:35:83:0d:
12:b2:70:de:30:91:f7:0f:79:ab:1a:5c:c7:3c:ba:9b:7a:ae:
11:9a:cb:36:fd:eb:ce:b9:ab:01:bf:5a:b1:3c:70:53:db:3e:
67:19:7e:16:d7:79:65:11:ac:0b:22:ac:47:f1:25:5d:79:41:
ed:85:85:2b:df:35:50:35:2b:b8:60:72:74:d6:ae:36:52:58:
bc:34:f5:ea:1a:4d:a1:aa:2b:ef:b5:3b:e6:03:5f:c4:be:3e:
ef:d5:be:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:09:54 2025 by rpki-client