Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File: aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier: oFfvVFXnnT3yyumulwo9Ro+hCH3oKWXQkgVR6nEGI2A=
Subject key identifier: CF:A1:47:68:89:98:B7:D1:A5:1A:CD:8C:5D:6E:C2:41:E6:B4:D7:48
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 01995A566CA9E505B554DE7FC6DB09795B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number: 148A
Signing time: Thu 18 Sep 2025 01:00:37 +0000
Manifest this update: Thu 18 Sep 2025 01:00:37 +0000
Manifest next update: Fri 19 Sep 2025 01:00:37 +0000
Files and hashes: 1: aYzSzZFLqdVEPKpQk5EWoehSNEw.roa (hash: AM/5zmNZPmTunUEdZ9JbOQ5FfrgajVTJL4TG99J5meg=)
2: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: w3q5KRiOVpgLhGwmTUfa5yIj37np9pnkozRBIX1OHZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5a:56:6c:a9:e5:05:b5:54:de:7f:c6:db:09:79:5b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Sep 18 01:00:37 2025 GMT
Not After : Sep 19 01:00:37 2025 GMT
Subject: CN=cfa147688998b7d1a51acd8c5d6ec241e6b4d748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:58:c9:37:0d:60:2d:2e:51:2f:3e:4c:14:
eb:73:25:ff:bc:d8:d7:30:7d:a0:07:9a:1b:9d:30:
08:3f:9f:72:96:07:a6:5a:a7:8a:a0:ab:0c:65:74:
33:c5:e9:18:23:cb:ef:9e:2d:7c:92:06:7f:09:af:
e8:bc:2d:91:f4:e7:87:84:97:f7:18:73:cf:20:47:
33:3a:4c:0a:95:03:02:6b:fa:46:ac:9c:36:1a:0d:
2a:f6:d1:4e:db:ed:a5:bd:89:01:59:47:9a:3c:61:
62:27:b1:02:fc:64:8d:52:29:99:75:e7:81:23:2d:
10:ee:51:05:0d:3e:5c:34:b8:ee:9c:9a:ca:8f:59:
53:b3:34:50:71:b0:fb:15:08:a9:c4:c8:64:ab:43:
a7:e7:c2:1c:39:63:02:a0:14:b5:1d:e7:6f:c4:8c:
0b:4c:97:c9:e6:f4:6d:90:67:49:ae:96:ca:27:79:
e7:5d:dc:3a:9d:8c:c4:36:f5:ca:09:77:6c:be:f0:
83:9b:b4:fc:5c:af:29:36:70:e0:b4:3b:f9:f1:83:
99:f3:c7:77:f0:83:24:10:25:00:66:b3:e4:c3:39:
0e:d9:63:34:04:d9:53:2d:7f:34:37:04:a5:fb:78:
ef:d7:3f:94:28:d5:9c:59:b9:c9:01:ae:2e:aa:e1:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A1:47:68:89:98:B7:D1:A5:1A:CD:8C:5D:6E:C2:41:E6:B4:D7:48
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1b:a9:1b:9d:65:8c:95:68:11:43:0b:68:a5:db:01:65:ed:
7a:9f:3a:d0:7f:4e:dd:af:c2:4c:fe:72:ee:5f:0f:a9:f8:8e:
e2:96:3a:79:c8:47:cb:8d:35:d7:33:d2:f0:e5:a5:31:6a:39:
40:a9:d4:de:88:13:1b:2c:73:c7:f6:53:d1:b8:b3:2a:56:17:
c7:f5:a3:22:2a:3d:bc:02:c3:4d:34:02:f0:ac:c5:b3:88:00:
54:06:96:d4:ba:dd:92:7c:8f:7f:c8:67:f8:14:ac:6b:1d:1b:
65:0f:a6:4f:92:af:4a:e4:f2:59:45:a3:83:32:37:a8:2e:84:
ac:60:d9:f7:3a:64:b6:05:f8:37:31:14:4a:52:64:d8:f6:a5:
a8:c1:d4:5a:a8:a6:0e:ea:28:13:eb:18:5c:59:47:1d:1b:f4:
f4:80:2e:8f:f4:83:aa:13:93:4e:9c:f7:6a:80:4a:d9:a3:74:
9c:8b:e9:a3:98:8c:4a:91:e9:dc:8d:38:8d:6b:95:5c:9d:76:
ee:f1:89:61:5d:7e:0c:81:5b:cd:b5:b6:45:68:3b:8e:3a:9a:
3d:19:d7:37:60:32:14:7c:5e:31:2f:20:22:18:55:1e:28:67:
9a:52:85:4d:12:d3:54:45:c4:03:ca:20:19:dc:fe:ac:25:b2:
87:a8:29:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:42 2025 by rpki-client