Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/789a81-af21-44ed-8d61-ad5558882a30/1/veB0Vd_4sPqqTInrzHnF6Qf7e6s.mft
File: veB0Vd_4sPqqTInrzHnF6Qf7e6s.mft (raw, json)
Hash identifier: RB2YJ46gQJrrPNdnr0v8G0DcRO6oG55WOcp3gxvgobY=
Subject key identifier: 15:76:7A:E3:F3:76:CA:FA:15:D2:64:E5:27:BE:21:FF:E3:30:A5:C5
Authority key identifier: BD:E0:74:55:DF:F8:B0:FA:AA:4C:89:EB:CC:79:C5:E9:07:FB:7B:AB
Certificate issuer: /CN=bde07455dff8b0faaa4c89ebcc79c5e907fb7bab
Certificate serial: 019881D5AC92FB70738A174EB3340CD48D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veB0Vd_4sPqqTInrzHnF6Qf7e6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/789a81-af21-44ed-8d61-ad5558882a30/1/veB0Vd_4sPqqTInrzHnF6Qf7e6s.mft
Manifest number: 02B8
Signing time: Thu 07 Aug 2025 00:02:00 +0000
Manifest this update: Thu 07 Aug 2025 00:02:00 +0000
Manifest next update: Fri 08 Aug 2025 00:02:00 +0000
Files and hashes: 1: _4qziCwy0-5brLbRyXE5FVM4Qcw.roa (hash: DVo7lEo2YXrAeiVBkSOW/Tj//cfB8+ZnaTMO+Oa9vp8=)
2: veB0Vd_4sPqqTInrzHnF6Qf7e6s.crl (hash: AXUcgjFHvrGHchwChfviFrz69PC9J4fG4LdiSCakEhU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:ac:92:fb:70:73:8a:17:4e:b3:34:0c:d4:8d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde07455dff8b0faaa4c89ebcc79c5e907fb7bab
Validity
Not Before: Aug 7 00:02:00 2025 GMT
Not After : Aug 8 00:02:00 2025 GMT
Subject: CN=15767ae3f376cafa15d264e527be21ffe330a5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:07:96:aa:1e:ce:8a:ad:51:86:81:ad:7a:
04:c8:99:4c:09:69:97:68:51:85:48:1d:a9:26:5c:
11:be:45:66:0d:d3:9d:71:23:4f:b0:80:7f:c2:87:
78:53:3f:dd:f5:6d:93:25:09:e6:29:9e:00:81:13:
5a:32:23:8b:ed:5b:49:a6:92:d1:e7:18:e6:fb:7f:
b1:79:0a:1d:1a:6e:33:dc:87:87:29:31:bc:59:a5:
13:79:f9:69:20:5d:32:0e:5f:b5:92:e2:d4:20:10:
cd:6a:29:ad:ee:a6:97:65:33:df:31:07:f5:36:21:
58:d9:cc:ca:fd:18:7a:bc:cc:94:28:63:e8:99:85:
83:18:4c:a1:c7:10:0b:c5:e9:f8:33:6a:28:39:33:
5e:27:25:08:37:5d:0e:2d:6e:78:de:a4:23:13:f5:
44:d4:3b:43:e5:02:8d:05:2a:2f:e4:8a:25:9a:66:
bc:c3:02:20:1e:6d:6b:9d:50:91:70:92:03:70:10:
5e:5e:d8:b4:a1:d7:27:b8:dc:f9:a5:7b:82:43:09:
87:49:d8:45:b4:3b:2d:18:f0:d7:b5:fe:1c:b4:0f:
18:7a:fe:81:15:eb:6e:5c:0c:0d:92:f8:0b:a5:a2:
c8:60:5c:8a:d1:41:c0:9e:d0:4e:7c:8a:b5:0c:ee:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:76:7A:E3:F3:76:CA:FA:15:D2:64:E5:27:BE:21:FF:E3:30:A5:C5
X509v3 Authority Key Identifier:
keyid:BD:E0:74:55:DF:F8:B0:FA:AA:4C:89:EB:CC:79:C5:E9:07:FB:7B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veB0Vd_4sPqqTInrzHnF6Qf7e6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/789a81-af21-44ed-8d61-ad5558882a30/1/veB0Vd_4sPqqTInrzHnF6Qf7e6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/789a81-af21-44ed-8d61-ad5558882a30/1/veB0Vd_4sPqqTInrzHnF6Qf7e6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f1:89:8f:f5:e9:51:aa:c8:3c:b8:55:86:f0:25:3f:37:25:
72:4c:f0:89:09:75:58:c7:15:2e:60:89:12:d1:1c:3d:50:c1:
59:5e:40:c5:93:70:0b:e5:9f:0e:4b:88:b7:f8:60:32:be:01:
aa:3f:40:22:2a:f0:05:8e:87:ed:ec:26:a6:ad:a0:4a:58:8d:
c7:37:65:c0:31:0d:af:a3:04:ec:ae:7b:3a:80:c5:f5:c4:71:
ef:37:bc:56:96:fe:95:ca:46:5a:97:b1:22:b2:34:6b:b1:ca:
c0:dd:9c:05:71:e4:e4:b7:1e:6c:39:80:bb:7e:35:ab:0b:a6:
8c:d7:53:14:03:a9:ea:2c:79:4f:ec:0b:d3:2c:75:2a:01:b5:
2a:92:10:fd:5b:c5:72:d2:0a:81:93:3c:0c:c6:d0:16:69:a3:
57:c2:16:88:f1:3d:de:79:47:92:10:41:22:a5:4a:d7:43:ca:
b9:20:db:c9:6c:c5:ff:c6:78:ca:ec:ef:5e:c7:8f:95:30:52:
bd:df:f7:2d:09:2d:85:bb:56:89:50:9c:71:fc:8b:d4:f0:32:
7c:56:ad:b6:e2:04:e1:96:d0:0d:d8:a8:e7:30:e8:05:a1:de:
2b:19:33:33:fb:93:69:44:a2:6b:40:67:91:ef:73:e5:c6:57:
c0:da:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:58 2025 by rpki-client