Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
File: p9nJ2x4fiGAXe__cWPDvzZm5as4.mft (raw, json)
Hash identifier: cnqsIR9QdosHcVKdZDWTbHzNinpcaN8o500mjPQ0nKY=
Subject key identifier: 98:CC:D8:2E:44:69:2E:0E:77:1F:C5:75:94:1B:74:F0:A6:F1:BB:DB
Authority key identifier: A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
Certificate issuer: /CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Certificate serial: 01999E2489D76A8D31BB6274DA72C8656E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
Manifest number: 0E8A
Signing time: Wed 01 Oct 2025 05:00:18 +0000
Manifest this update: Wed 01 Oct 2025 05:00:18 +0000
Manifest next update: Thu 02 Oct 2025 05:00:18 +0000
Files and hashes: 1: lC2KQAOisVOwxCnTUOf6nl08y8o.roa (hash: /DfGXFX3mvJ80lD2tCLD0oWxnch4EP1FqZDjENG9stE=)
2: p9nJ2x4fiGAXe__cWPDvzZm5as4.crl (hash: LNA0uetm6e28jNiOTWuENexY5INM3/NFhf94b6eb7zI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:24:89:d7:6a:8d:31:bb:62:74:da:72:c8:65:6e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Validity
Not Before: Oct 1 05:00:18 2025 GMT
Not After : Oct 2 05:00:18 2025 GMT
Subject: CN=98ccd82e44692e0e771fc575941b74f0a6f1bbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a3:22:21:0d:3c:be:4d:08:83:c4:b9:63:5b:
e7:62:82:e2:06:42:60:20:11:41:97:9d:37:cc:ec:
40:92:42:50:01:5b:1a:25:3a:a5:7f:17:08:c8:5c:
db:1f:e6:a3:89:f2:bd:82:74:3a:6e:c8:7a:22:44:
48:ff:a0:77:fb:25:a0:85:a9:e9:91:3a:eb:97:cb:
64:74:ae:cf:fb:c2:5e:f8:6e:a4:99:7e:06:97:5a:
9f:eb:65:b4:34:50:99:bb:cd:e1:7b:54:4f:16:44:
bc:91:0d:a0:b1:cd:44:15:8c:c8:b8:f8:12:a3:ec:
7d:fd:20:13:4b:34:34:69:da:45:04:f1:cf:0b:f3:
c9:0a:36:3d:8e:da:16:14:6b:c6:d1:45:d0:f4:14:
89:d3:bd:f8:65:06:e1:7b:ef:51:bd:83:16:0c:c3:
8f:93:da:8a:dc:17:c6:7f:76:85:83:43:88:98:a0:
e0:a5:43:00:52:f0:81:5a:b5:95:82:ad:ad:27:32:
ba:03:d1:4f:88:d0:8e:c5:cf:31:5b:f7:49:92:05:
33:85:44:d1:8d:e1:2d:cb:c1:46:55:6c:7e:89:b0:
be:66:62:17:d1:21:13:83:8b:7f:58:63:89:62:c0:
9c:3f:c2:8f:29:43:4b:a2:09:92:e4:d8:09:c0:43:
b3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CC:D8:2E:44:69:2E:0E:77:1F:C5:75:94:1B:74:F0:A6:F1:BB:DB
X509v3 Authority Key Identifier:
keyid:A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ff:53:b9:cd:66:4c:26:a9:36:17:60:dc:b3:1a:89:63:47:
1f:76:3a:16:96:44:2f:72:ab:e4:cb:e8:6f:9a:c9:a5:90:9e:
bf:30:48:69:b2:9c:d1:fc:54:2a:f8:e5:b6:f7:3a:20:0e:cb:
0e:19:de:d9:6d:63:f8:29:6c:63:3a:42:61:d0:7e:62:9c:68:
a3:18:a4:a0:72:d5:f1:16:08:44:b1:fd:7e:08:b3:12:dd:e3:
31:f7:07:d2:f5:f5:cb:9a:01:2f:79:1a:ba:2d:9d:27:c3:2a:
43:91:f1:44:0a:20:13:2c:66:e5:7c:b4:8f:66:61:77:84:44:
c3:6d:c5:b0:bb:f7:b3:a7:4c:f8:d0:90:16:56:ed:c8:f5:be:
4e:01:2c:a6:f0:e9:94:d2:9f:58:eb:2b:aa:2e:60:e9:d0:99:
5c:3a:78:5c:fc:2a:af:73:96:62:76:d1:e4:65:07:cc:b4:55:
45:1c:d2:e9:cc:e6:a8:99:f0:61:cc:e7:1c:61:fd:b5:94:19:
d8:95:55:5b:33:2f:d0:6b:31:e9:b9:da:21:13:f5:da:10:69:
32:50:ce:45:5b:fe:59:1d:f9:1f:c7:68:a4:69:82:9e:e3:ae:
35:e9:42:79:49:8a:37:f5:4e:9f:44:7a:3f:be:94:65:eb:98:
56:72:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:49 2025 by rpki-client