Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
File: oInHIR6wy6D9k84xaziVOM4aywA.mft (raw, json)
Hash identifier: 9gEcF+ASWPyLER6faVDi6a+10DADsZUSLfW4VSB+LBA=
Subject key identifier: CC:9C:9C:89:AF:EF:F5:DB:A8:61:24:32:1C:E7:88:A3:FD:38:06:03
Authority key identifier: A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00
Certificate issuer: /CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
Certificate serial: 019836F0D3778E30BA8CB8F0DB30A5F36E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
Manifest number: 0E67
Signing time: Wed 23 Jul 2025 11:00:09 +0000
Manifest this update: Wed 23 Jul 2025 11:00:09 +0000
Manifest next update: Thu 24 Jul 2025 11:00:09 +0000
Files and hashes: 1: 07n12IDxKPAxIxs90Uxv2kiE_p8.roa (hash: onmuGRswCBPJXmNtk3krWUPKECPDIYJbgKGbyF0Mw3c=)
2: oInHIR6wy6D9k84xaziVOM4aywA.crl (hash: OajDNTldAM3GRQWXs2dNU2v49JFHdFhxMKDcN2eB5NE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:f0:d3:77:8e:30:ba:8c:b8:f0:db:30:a5:f3:6e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
Validity
Not Before: Jul 23 11:00:09 2025 GMT
Not After : Jul 24 11:00:09 2025 GMT
Subject: CN=cc9c9c89afeff5dba86124321ce788a3fd380603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:58:c1:ab:cd:ef:16:60:18:32:cb:91:fc:
1b:b7:fe:9b:47:c3:b7:04:41:5e:45:5f:22:ae:7c:
2c:ca:55:83:90:0c:ea:81:1a:f8:54:9f:57:ea:d2:
20:33:b1:b5:b5:61:ed:9e:17:d9:87:8e:08:cb:ee:
83:af:45:f7:a8:b8:a0:cc:f6:69:85:09:e4:a8:88:
1a:fc:34:74:07:b2:34:bb:d8:e8:83:74:c7:83:cc:
d6:e2:0f:94:33:59:70:d9:65:2f:4c:43:5e:d4:86:
c4:36:fe:e3:5a:b4:f2:6f:82:9e:b0:69:8a:de:72:
b6:75:fa:d3:85:5d:0d:09:a0:00:a8:fc:f3:26:c6:
32:82:d3:e3:f8:32:98:3b:2f:aa:8f:61:3b:ff:ba:
f7:75:53:3d:00:a5:06:68:da:1b:38:d2:79:3f:b6:
1c:a4:ff:e1:4b:d8:21:d0:d1:94:a0:1b:85:85:e6:
d1:37:86:4c:e7:8d:c2:b2:ad:bb:9d:47:f8:7c:de:
04:ae:80:be:33:f3:d3:3c:aa:be:21:0f:34:c4:4c:
c1:34:13:10:27:f7:50:22:43:69:ba:e8:31:ee:81:
f0:ae:f4:96:ec:74:7e:1c:38:b6:97:95:96:6d:74:
4d:16:de:23:f3:53:05:2f:24:da:5f:c6:5a:70:82:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9C:9C:89:AF:EF:F5:DB:A8:61:24:32:1C:E7:88:A3:FD:38:06:03
X509v3 Authority Key Identifier:
keyid:A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1b:8b:a5:1a:b7:d7:93:3a:03:bd:4f:ce:a0:99:49:64:39:
1a:f2:11:bf:b4:e2:37:5e:cd:84:3c:c5:d5:44:2d:e9:b4:45:
aa:82:6d:1e:77:e1:b2:76:7f:89:89:09:4b:55:33:a2:62:a7:
7a:2c:8b:64:d5:b9:c6:2f:fd:28:d1:9d:76:5d:fa:cf:30:12:
53:71:c6:e9:45:f6:59:9c:ae:28:b9:3e:e9:d3:e0:40:7b:5c:
04:10:e4:a4:e8:c2:83:34:8f:b3:00:84:5e:f5:99:82:31:a5:
1d:a0:22:ae:fd:4e:94:df:8f:f2:60:64:13:3f:49:37:57:25:
03:98:f2:8a:08:a8:5d:2d:bb:82:bc:fb:87:d6:b4:66:57:0b:
cf:2a:2c:03:70:82:97:72:90:5f:2d:7e:10:ad:92:50:7c:1e:
27:e7:cf:72:b0:7b:b3:b7:f5:c3:d2:4f:76:2b:91:5a:a3:c3:
9e:b8:b2:96:c7:ff:98:83:55:4d:0d:07:f9:b0:af:c4:17:59:
ad:5e:28:0e:f5:b5:41:ee:d9:be:b5:29:14:d8:66:3a:56:fd:
b4:d8:33:fc:5f:62:79:00:99:f4:91:fe:eb:14:88:31:42:56:
c3:9e:92:67:32:c6:6d:c3:df:0a:63:09:e7:c8:69:d5:c2:93:
39:70:b2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:41 2025 by rpki-client