Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
File: sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft (raw, json)
Hash identifier: 7NbpPOhDLCNVeKp2F/pqgy8hasxbR51w65KQKyh8Y/s=
Subject key identifier: 90:EB:A6:A2:05:D5:44:A0:CB:51:30:AC:85:13:CC:D4:D6:0E:04:97
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 01980897E93A2DDCDF3ABBF572352BE957B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
Manifest number: 0CA8
Signing time: Mon 14 Jul 2025 11:00:30 +0000
Manifest this update: Mon 14 Jul 2025 11:00:30 +0000
Manifest next update: Tue 15 Jul 2025 11:00:30 +0000
Files and hashes: 1: ANXnYTqKTr9oV5Alzmy-G7Z1jr4.roa (hash: Gt/XD54HF++DivzLiOI9eyUVujLtao+p/hKCG9urNc0=)
2: C7MhaPZbslU0VnJ9f8aWGwMPQ1s.roa (hash: N2sOMWlDByUi7A5K2JVccMDH9oIH2ZkyI/wL4WYAlVY=)
3: sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl (hash: y1O0jpPXgjJE5sSBqTLriItJp3jAsQ3ImUguh0jb2ts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:97:e9:3a:2d:dc:df:3a:bb:f5:72:35:2b:e9:57:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Jul 14 11:00:30 2025 GMT
Not After : Jul 15 11:00:30 2025 GMT
Subject: CN=90eba6a205d544a0cb5130ac8513ccd4d60e0497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:44:20:5a:4f:c8:a7:2f:cf:7f:62:c7:57:
5c:fc:f1:22:d8:27:4e:81:60:b0:47:03:54:04:b6:
58:7f:a9:bd:26:2f:c3:a4:db:bd:74:a6:96:5b:e0:
f5:e9:bc:ad:b1:72:15:68:ba:67:02:97:b3:78:7f:
5a:bf:41:ec:f3:07:5a:0f:10:67:5a:32:8b:58:61:
3a:45:2f:50:70:09:55:48:4d:d3:75:f9:c3:9c:50:
11:ab:10:70:aa:08:a7:6e:a5:bc:b5:41:cf:70:0a:
b4:1e:00:ba:ff:d3:e4:c0:b0:31:48:6a:67:d2:c2:
a7:75:93:31:09:a6:84:62:99:79:45:a8:43:ec:fd:
c2:e4:3f:67:67:e9:94:02:7c:6d:2d:fd:bf:a0:1e:
94:4c:eb:c4:a7:d1:5e:f8:11:0f:c7:a6:79:07:4c:
77:e3:27:5f:7d:ae:f1:b7:7f:f5:c7:48:f2:48:17:
6a:d7:e6:74:b3:ac:c5:fc:95:03:93:f8:3f:37:bf:
63:86:2e:10:e4:99:4b:72:32:65:4b:12:57:76:17:
88:13:e0:00:a1:a7:54:45:83:01:7f:fc:37:1a:dd:
2e:42:d1:23:58:9a:cc:a5:56:f7:f2:b0:12:65:fc:
27:c1:b4:11:8c:71:30:14:9a:1f:ea:3b:51:da:32:
86:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EB:A6:A2:05:D5:44:A0:CB:51:30:AC:85:13:CC:D4:D6:0E:04:97
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9e:58:d1:b4:c1:d7:e9:ed:ec:95:0d:ae:dd:85:1a:5c:be:
a7:0d:65:85:43:a0:d4:00:96:a5:34:f1:96:48:80:ba:48:e6:
8d:f5:01:ef:09:18:7f:25:6b:19:f9:52:d6:08:76:51:b7:e2:
76:dc:e4:bb:80:77:c2:06:5c:d2:4d:c2:a7:ad:d3:20:a6:55:
6f:69:f1:97:5c:c5:35:36:b5:bd:21:e4:0c:7b:d0:8e:c4:5c:
0c:f1:5c:65:47:76:56:8c:ec:92:57:98:e2:e3:90:54:cb:ff:
41:8e:db:ca:77:17:26:db:ae:9a:51:8e:44:c1:5b:df:c3:30:
d8:30:67:67:e2:57:c5:6a:2e:60:aa:c4:71:46:8f:29:67:77:
94:22:35:cf:b9:59:35:43:16:62:c9:2a:14:92:16:70:fb:c0:
d1:5f:1c:bc:c5:47:c6:39:14:d5:8f:2e:49:1b:40:08:e6:e2:
10:2e:42:ae:10:3c:95:c1:ba:ad:27:c1:96:9b:9f:65:c5:b6:
9b:25:65:5b:d3:31:6a:f4:e2:44:d6:da:6b:fb:b1:0b:5d:6a:
9f:d9:87:27:ad:4c:b6:83:d7:03:24:53:93:85:63:05:a2:c5:
12:53:da:82:73:43:42:d9:43:2e:a7:96:83:8b:00:81:6c:1c:
c3:d5:c3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:21:27 2025 by rpki-client