Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
File: R600-MIKUHPoYIIcjAm_dXmibQs.mft (raw, json)
Hash identifier: QtMEoBGG+u28b59jTI7n82AH1vURU2MvoD1XDlPY8is=
Subject key identifier: C6:A2:3B:D6:27:7C:79:7E:8F:D1:DA:7A:EA:A7:26:0B:2E:03:43:F3
Authority key identifier: 47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
Certificate issuer: /CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Certificate serial: 0199C18CC9D8FECA79D96F386A99057DD33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
Manifest number: 1630
Signing time: Wed 08 Oct 2025 02:00:53 +0000
Manifest this update: Wed 08 Oct 2025 02:00:53 +0000
Manifest next update: Thu 09 Oct 2025 02:00:53 +0000
Files and hashes: 1: R600-MIKUHPoYIIcjAm_dXmibQs.crl (hash: 2VrLwljZ6hVvi/Vr7sWCaAlasUKX70vDpsQlbpQ4l/0=)
2: jbn0uNt62cbm-5uAutTNS6KIeT0.roa (hash: JjRHfVTqZW3BM/UoOGJBXI5IB1+oYeNHfz6C/Sa7drI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c1:8c:c9:d8:fe:ca:79:d9:6f:38:6a:99:05:7d:d3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Validity
Not Before: Oct 8 02:00:53 2025 GMT
Not After : Oct 9 02:00:53 2025 GMT
Subject: CN=c6a23bd6277c797e8fd1da7aeaa7260b2e0343f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:52:9a:b9:78:b2:bf:64:a7:74:58:a8:e8:21:
b9:70:5c:11:d2:df:dc:0e:91:15:28:f1:29:05:48:
2d:e0:2c:8e:8f:ab:cc:58:31:52:1f:72:af:76:f6:
5e:21:af:e3:bd:4a:fe:f3:64:7f:96:78:92:5b:2a:
a2:ee:c7:2c:f9:7d:cc:d0:9d:31:81:1b:21:46:ea:
6d:86:26:ec:c3:c5:bc:f4:70:48:77:2a:fb:55:a5:
4a:82:0e:fd:99:28:6c:00:05:b2:64:88:35:d8:e0:
ca:cc:c2:68:c7:d0:5a:8d:77:bb:6e:00:97:40:7e:
46:de:be:8a:91:9a:67:34:d7:e0:48:13:f6:3d:da:
90:c4:bf:c4:3d:f4:07:00:2e:e7:1d:46:b0:90:51:
0a:58:5c:84:e0:45:cb:ea:2e:b8:d7:69:21:6a:f1:
4e:84:29:cd:0b:75:43:e6:54:b5:c4:4b:49:6e:7e:
f5:e7:b8:6b:da:4b:28:a9:8e:e9:8b:e0:cd:a2:17:
f7:f6:91:13:43:b0:d5:6e:3e:a7:91:bc:4f:ae:e9:
ef:b6:9f:24:f2:70:30:51:10:f4:53:1b:48:34:57:
7f:3f:b4:79:54:ec:e3:66:ef:5a:31:fb:f6:3b:1b:
1d:07:6d:6d:49:89:03:32:9a:44:44:fd:0a:2c:d7:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A2:3B:D6:27:7C:79:7E:8F:D1:DA:7A:EA:A7:26:0B:2E:03:43:F3
X509v3 Authority Key Identifier:
keyid:47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:57:93:28:eb:0b:d7:4a:a0:55:e2:90:b6:4e:aa:5c:5e:b8:
de:1a:10:bc:af:0a:08:5d:d8:d5:01:cd:2a:8c:07:ec:f6:fb:
d8:6a:55:eb:12:70:3c:d9:65:06:16:53:16:06:a7:24:62:db:
f7:d2:cc:cd:b9:e3:ed:a6:17:f8:b5:58:5c:cb:14:ac:fd:40:
b3:d3:b9:ab:25:5c:df:1a:e8:a7:60:68:5d:75:e0:84:67:18:
52:15:0c:db:fa:7b:b0:6e:56:0d:20:f4:ac:c4:97:a1:90:1c:
ae:b1:77:1d:37:71:02:b1:98:39:04:4c:f5:ac:e0:36:92:05:
bb:90:00:f4:ba:4f:69:f8:0f:83:70:58:ab:92:2e:cc:a8:4c:
d0:73:7d:73:30:e8:90:41:64:b0:03:46:3c:94:87:f2:b7:5e:
69:08:5e:13:99:37:a4:12:d2:1c:21:6c:34:ee:fe:78:0f:f4:
d4:62:38:2b:e5:99:aa:17:01:eb:d0:c7:87:58:65:be:86:40:
96:bf:03:b2:6d:4d:8d:71:68:79:65:42:c0:59:27:29:67:c7:
2d:29:96:44:7c:e6:e8:dc:7d:d2:2f:00:42:6d:6a:36:f2:a2:
3d:c5:cd:da:d1:b6:36:f0:57:15:2d:51:56:e2:e2:00:2b:8f:
be:e0:7e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:54 2025 by rpki-client