Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
File: sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft (raw, json)
Hash identifier: JLYmHyPIbCE3WiP8F8dFtuSNrZ6H1FwKHeyUtWbaZCg=
Subject key identifier: 3D:EE:2D:2B:0F:1A:BA:6A:B2:30:A9:7F:CF:7B:F7:D0:0D:19:A0:8F
Authority key identifier: B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
Certificate issuer: /CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Certificate serial: 019859EB5D0295B59153307BDAA72B637522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
Manifest number: 034B
Signing time: Wed 30 Jul 2025 06:00:53 +0000
Manifest this update: Wed 30 Jul 2025 06:00:53 +0000
Manifest next update: Thu 31 Jul 2025 06:00:53 +0000
Files and hashes: 1: sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl (hash: 9tf9BjzmtoJ3M7vut0Br5TlRP6gGxCDaTzC5/iMQBaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:eb:5d:02:95:b5:91:53:30:7b:da:a7:2b:63:75:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Validity
Not Before: Jul 30 06:00:53 2025 GMT
Not After : Jul 31 06:00:53 2025 GMT
Subject: CN=3dee2d2b0f1aba6ab230a97fcf7bf7d00d19a08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:9d:17:e6:68:b2:9d:54:ae:0c:3f:63:fa:
c6:78:fe:53:48:b8:70:6b:c2:d8:cf:b2:f5:11:47:
d1:d1:38:02:0f:4e:6c:1f:85:e0:32:f5:a2:31:c2:
f3:44:4a:80:f9:26:25:42:dc:21:b1:fb:7b:2a:9a:
9c:82:13:d9:64:06:1d:a4:2b:4a:0a:25:34:c4:e3:
c9:cb:e4:62:3f:ac:b1:71:4f:f5:d8:e1:cb:bd:0c:
12:eb:a0:25:02:14:8d:11:b8:cd:f9:62:f5:5f:f4:
3c:ef:c7:72:4b:50:c8:82:e4:9e:5e:82:0f:b4:18:
16:99:6c:15:57:e1:fc:c0:52:b6:f1:ec:53:4a:95:
67:e1:3d:e7:b9:f9:09:69:f0:d0:b2:e0:ea:d7:13:
61:99:ac:b9:1a:fb:d1:8a:bd:de:cc:4e:3e:e0:f0:
b0:be:be:c1:9f:f5:da:cd:be:d9:ca:e8:6e:70:88:
1a:b8:4b:bd:c9:5e:61:72:63:6d:8f:05:85:b1:70:
9d:b1:92:57:25:2b:32:a4:d8:bb:21:58:7f:8a:53:
aa:03:5e:9e:97:a2:74:5d:85:c6:78:03:e0:f7:4a:
cf:2d:2e:ea:09:0a:a7:53:c5:4e:e9:67:7f:38:0b:
a4:02:d4:3e:c8:5e:b4:98:01:84:b2:cc:68:bc:d1:
4f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EE:2D:2B:0F:1A:BA:6A:B2:30:A9:7F:CF:7B:F7:D0:0D:19:A0:8F
X509v3 Authority Key Identifier:
keyid:B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:68:b9:78:4a:9e:48:c0:49:0f:b6:56:59:f0:dd:33:43:bb:
3d:be:57:9a:f0:f7:51:b2:a5:b8:58:c6:41:0a:50:4c:b3:93:
d8:74:dc:95:42:eb:45:60:13:52:96:75:7c:ef:e3:11:53:94:
c8:ca:49:31:bc:69:97:f9:8b:d5:33:13:b4:47:87:7e:6f:f8:
06:47:15:5b:b9:b3:e5:02:43:88:76:44:8b:66:c7:33:f8:3c:
9f:d5:e7:f6:5e:3f:43:59:ae:02:31:b6:f8:b2:f7:53:d1:ff:
47:e7:47:86:36:5c:fd:38:51:0d:cb:29:e9:be:a3:dc:f9:bf:
e2:19:c7:20:6c:8e:d5:70:b5:81:0a:ea:0f:b3:9d:89:88:79:
1e:0a:ad:19:4f:96:2e:93:1b:a0:74:87:1e:c4:25:3d:95:e7:
ac:dc:73:dc:fb:cf:f8:f4:fb:b6:fb:22:44:14:a0:ad:a1:1d:
7f:d6:7f:c5:28:95:2f:cf:e4:f0:4a:38:3a:b1:96:a9:86:36:
45:ed:70:a5:74:b8:68:e9:64:7f:31:93:ff:1e:cc:f3:a4:4f:
40:61:ac:b6:13:a7:95:6e:bf:20:cd:16:82:dc:1f:63:8f:bb:
90:55:d0:b7:8e:a9:96:ec:32:59:54:09:0a:c0:d5:91:9d:16:
a9:55:c8:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhZ610ClbWRUzB72qcrY3UiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNTI0ZjY1NWJhM2M5Y2E1ZDk4YjA1N2MyNGMwZjA4Yjcx
OWQ0YTcwHhcNMjUwNzMwMDYwMDUzWhcNMjUwNzMxMDYwMDUzWjAzMTEwLwYDVQQD
EygzZGVlMmQyYjBmMWFiYTZhYjIzMGE5N2ZjZjdiZjdkMDBkMTlhMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnOdF+Zosp1Urgw/Y/rGeP5TSLhw
a8LYz7L1EUfR0TgCD05sH4XgMvWiMcLzREqA+SYlQtwhsft7KpqcghPZZAYdpCtK
CiU0xOPJy+RiP6yxcU/12OHLvQwS66AlAhSNEbjN+WL1X/Q878dyS1DIguSeXoIP
tBgWmWwVV+H8wFK28exTSpVn4T3nufkJafDQsuDq1xNhmay5GvvRir3ezE4+4PCw
vr7Bn/Xazb7ZyuhucIgauEu9yV5hcmNtjwWFsXCdsZJXJSsypNi7IVh/ilOqA16e
l6J0XYXGeAPg90rPLS7qCQqnU8VO6Wd/OAukAtQ+yF60mAGEssxovNFPYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3uLSsPGrpqsjCpf89799ANGaCPMB8GA1UdIwQY
MBaAFLBST2Vbo8nKXZiwV8JMDwi3GdSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZKUFpWdWp5Y3BkbUxCWHdrd1BDTGNaMUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ODY5YjYtOWM2Ny00OTJjLWIxNWUt
Mzc0NGI0OGFmMWE4LzEvc0ZKUFpWdWp5Y3BkbUxCWHdrd1BDTGNaMUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80ODY5YjYtOWM2Ny00OTJjLWIxNWUtMzc0NGI0OGFmMWE4
LzEvc0ZKUFpWdWp5Y3BkbUxCWHdrd1BDTGNaMUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2i5eEqe
SMBJD7ZWWfDdM0O7Pb5XmvD3UbKluFjGQQpQTLOT2HTclULrRWATUpZ1fO/jEVOU
yMpJMbxpl/mL1TMTtEeHfm/4BkcVW7mz5QJDiHZEi2bHM/g8n9Xn9l4/Q1muAjG2
+LL3U9H/R+dHhjZc/ThRDcsp6b6j3Pm/4hnHIGyO1XC1gQrqD7OdiYh5HgqtGU+W
LpMboHSHHsQlPZXnrNxz3PvP+PT7tvsiRBSgraEdf9Z/xSiVL8/k8Eo4OrGWqYY2
Re1wpXS4aOlkfzGT/x7M86RPQGGsthOnlW6/IM0WgtwfY4+7kFXQt46pluwyWVQJ
CsDVkZ0WqVXIqw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:54:01 2025 by rpki-client