Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
File: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft (raw, json)
Hash identifier: cLCNwkCYEtJmPpEdbh4JeFONlgYxz3Y+R81QJNe+T58=
Subject key identifier: 5F:85:B9:DC:74:A2:22:C0:0E:2D:B3:B6:6B:FE:E0:50:69:2B:CF:A7
Authority key identifier: 77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
Certificate issuer: /CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Certificate serial: 01979BCD57F01B8F32778B0C126806419837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
Manifest number: 0D24
Signing time: Mon 23 Jun 2025 08:00:15 +0000
Manifest this update: Mon 23 Jun 2025 08:00:15 +0000
Manifest next update: Tue 24 Jun 2025 08:00:15 +0000
Files and hashes: 1: DaccjHojB95-TCoADZK32YMFyKo.roa (hash: ihqtrBhocSRh86RahK6DG9qn8vgDTCS7AhN7/gul0Fs=)
2: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl (hash: VbrdJjY7d5T7sYawR+jadhUSZHY9jEUSBo4y7DWnlLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:cd:57:f0:1b:8f:32:77:8b:0c:12:68:06:41:98:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Validity
Not Before: Jun 23 08:00:15 2025 GMT
Not After : Jun 24 08:00:15 2025 GMT
Subject: CN=5f85b9dc74a222c00e2db3b66bfee050692bcfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:82:d2:d1:ff:a5:16:42:14:d4:09:4c:8e:
8f:96:64:88:59:66:b1:d7:5f:82:fc:78:be:46:5d:
3e:a2:ed:1b:c4:27:d7:0e:84:97:9b:28:e1:04:f3:
99:d3:08:86:a2:84:49:21:6d:9d:41:36:ac:a1:51:
39:63:eb:a1:8d:6f:d0:ab:7c:a0:19:65:62:f2:db:
2b:93:18:e0:25:42:91:a9:36:47:ab:c2:5d:cc:ba:
3a:76:ae:ff:15:e9:5f:45:eb:7c:c4:cd:22:2c:ae:
a3:4a:3f:09:b6:3b:55:bd:b4:e0:3b:1b:a4:ad:47:
63:0c:18:f4:2f:5b:01:3c:9d:04:c6:c3:51:d6:4e:
68:df:3b:d4:15:55:64:16:77:1d:fd:e8:02:e2:74:
c6:83:ec:41:de:a3:df:7d:7d:36:3b:6c:e1:b3:78:
88:27:68:d4:60:07:f3:72:70:66:88:54:62:c3:5f:
1f:c1:3b:11:8d:d6:f4:17:44:47:0e:4b:6b:b2:49:
73:07:91:eb:8e:24:b2:42:ab:f1:2c:85:34:7e:dc:
e6:65:33:67:6c:52:e4:5c:0b:d0:f8:b4:24:ef:86:
b1:92:ee:fb:8e:13:66:ec:6d:65:18:c2:2f:fe:08:
4b:b2:23:ba:b9:96:41:2a:2b:e6:41:6e:23:54:31:
9d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:85:B9:DC:74:A2:22:C0:0E:2D:B3:B6:6B:FE:E0:50:69:2B:CF:A7
X509v3 Authority Key Identifier:
keyid:77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fd:28:56:25:d0:93:ee:9a:a0:b9:4a:72:6e:b5:87:6a:bd:
89:37:c4:bb:4c:e0:96:23:77:53:c1:7a:35:00:12:e2:30:a2:
cb:12:3e:2e:9f:ee:68:5d:66:71:06:13:a4:c8:c8:fb:0a:d0:
2c:3e:b6:fd:d2:3b:f5:32:0c:ad:95:ef:cb:1e:48:27:39:8e:
58:53:1f:e7:c7:c1:1c:aa:95:87:4b:4d:83:d5:65:b9:60:70:
2a:c0:c2:75:09:75:54:b0:e2:fc:e6:e5:1d:a6:93:f2:fe:d8:
0b:9a:5b:f3:0e:f2:02:59:1c:86:f0:06:a7:51:3c:26:d1:c4:
d0:6d:e1:56:f5:fc:1f:f3:14:11:4a:80:a9:ca:9e:49:3f:e4:
49:6f:e5:d9:76:80:ea:d6:0b:7f:5b:ec:2a:d3:85:a0:ca:a7:
d7:23:26:a4:b7:4d:c8:7b:f5:7a:5e:d8:c9:eb:af:19:d9:3f:
a8:ec:05:b8:12:70:1d:26:45:3e:fb:27:34:b1:ea:e0:00:3f:
07:91:0c:6d:07:38:16:4c:34:42:59:bc:0d:9b:2c:94:40:77:
ed:c0:8f:d3:62:eb:8f:ce:82:b8:e7:8c:fe:f3:9b:2f:8c:f0:
7b:02:dc:b3:49:2e:64:16:b8:9d:2a:7f:04:48:80:ec:2e:1c:
a1:9d:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:44 2025 by rpki-client