Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
File: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft (raw, json)
Hash identifier: Q12r+9Jx//dFX9qVX4lbqF5N2eSBxNvl3OOm1+j2YBE=
Subject key identifier: 78:FD:1F:F2:EE:E5:E4:54:B0:A4:EE:A7:51:65:DA:71:89:19:C5:49
Authority key identifier: 63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
Certificate issuer: /CN=637115f728f97d16e0d124963764088120205ae0
Certificate serial: 0198EA8B016C7E2443B587DB1E93F9A52349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
Manifest number: 0620
Signing time: Wed 27 Aug 2025 08:00:34 +0000
Manifest this update: Wed 27 Aug 2025 08:00:34 +0000
Manifest next update: Thu 28 Aug 2025 08:00:34 +0000
Files and hashes: 1: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl (hash: 9HoiC96769+3wrV9yYHTjHQt4UzBVzJIp9c0702u0BY=)
2: bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa (hash: rZgNK/vUggsFadv3q4dKfzKV95jK84/8a/5X5Aa/1YA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ea:8b:01:6c:7e:24:43:b5:87:db:1e:93:f9:a5:23:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637115f728f97d16e0d124963764088120205ae0
Validity
Not Before: Aug 27 08:00:34 2025 GMT
Not After : Aug 28 08:00:34 2025 GMT
Subject: CN=78fd1ff2eee5e454b0a4eea75165da718919c549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:7c:74:66:00:46:ea:9b:98:26:ae:40:3d:
ea:74:b9:fa:fd:b9:bd:4b:e8:f5:e2:70:e1:cb:37:
d5:08:df:49:8b:30:93:fd:db:60:54:4e:f2:ce:73:
bf:8a:b6:82:86:f8:7b:46:ee:96:6f:1a:d3:45:d4:
5b:19:2c:6d:b8:6f:14:02:50:86:d6:3d:4a:b7:f1:
a3:5f:dd:e5:a4:4e:43:27:74:11:50:a8:da:e4:e5:
e4:98:da:13:e1:63:b4:bd:a1:ec:74:e9:c0:84:c6:
04:91:f2:8d:f3:3f:64:7a:44:5c:88:0d:7a:1d:0d:
e1:70:be:e9:13:70:a5:82:e0:10:d1:9c:98:f7:b2:
4e:0f:5c:2f:ca:94:44:1d:6b:c6:31:46:76:83:ee:
2b:91:45:67:b5:da:96:b4:37:ba:33:1f:7b:7e:16:
6f:fd:5a:42:c9:e0:03:37:ef:9a:e5:30:c9:91:13:
a0:9e:4b:7a:e5:89:ce:63:e5:52:3e:a7:68:e2:bc:
e0:46:b7:87:2d:af:9d:86:be:fb:37:fb:24:84:f6:
89:1c:64:55:5a:54:0f:05:e6:52:44:b7:8c:be:8d:
ed:0d:07:c8:f5:ba:46:88:9e:9f:55:ce:49:b2:07:
df:2a:d7:33:dd:05:3f:3f:4a:f2:72:1c:50:aa:8d:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FD:1F:F2:EE:E5:E4:54:B0:A4:EE:A7:51:65:DA:71:89:19:C5:49
X509v3 Authority Key Identifier:
keyid:63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d7:5d:b9:98:0c:23:60:40:5d:62:13:97:87:de:9a:db:de:
00:7b:ea:ff:7d:6f:1f:20:65:42:b5:45:81:a5:db:47:8c:77:
db:87:0c:f7:93:3e:5c:bf:78:62:cd:06:65:ab:a4:ea:b1:25:
b3:72:42:c7:3c:98:85:e6:64:b2:48:f7:a2:a6:4a:71:53:f1:
a8:63:c6:b0:22:8a:46:36:61:4e:49:95:b5:df:77:9e:08:b1:
d7:6b:9e:e4:9e:7c:9f:03:f9:3f:73:56:2e:a5:4d:50:33:0f:
51:48:77:20:db:e0:55:8b:47:af:a4:a0:8d:30:e8:4d:47:e4:
7a:a9:38:b7:93:fb:52:42:85:0e:4d:b7:0e:3e:40:68:d3:af:
db:4e:e8:cd:b3:f9:68:4a:9b:58:79:44:96:71:6d:5b:1c:de:
c2:fd:26:39:e9:8f:4c:18:05:ad:c7:b9:84:64:a9:aa:f9:99:
b4:6e:ec:9d:b1:e9:47:27:a6:af:07:55:be:79:e9:cb:47:55:
38:af:a0:ac:74:85:b0:71:78:f1:e9:5a:5a:fb:42:2a:68:1c:
bc:85:84:8a:06:a8:03:d2:5a:76:c1:08:f7:16:ee:7e:1f:63:
89:d8:19:9a:1e:e2:aa:90:1d:76:ea:43:f0:ae:d6:b7:e5:9f:
b6:9f:b3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:15:20 2025 by rpki-client