Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
File: 7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft (raw, json)
Hash identifier: HIYz9S6FQXFk0xAs6nI9pYBdlcCN2FfLamg/5iBWhog=
Subject key identifier: 73:42:5C:64:E9:F1:E5:0F:9E:18:14:7A:D1:6A:46:2C:CB:9F:73:4B
Authority key identifier: EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4
Certificate issuer: /CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
Certificate serial: 0199DD3B48EA63DD684150158C8C2FDE7AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
Manifest number: 1253
Signing time: Mon 13 Oct 2025 11:01:13 +0000
Manifest this update: Mon 13 Oct 2025 11:01:13 +0000
Manifest next update: Tue 14 Oct 2025 11:01:13 +0000
Files and hashes: 1: 7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl (hash: 6reuiQWBvyiiockRykayo327k7cqrRvFYHFaZKE1QTw=)
2: Kg5-kVb-CT-Szk4qOylrOgMLHdQ.roa (hash: 7y1Phnt9QqKkLbO9DEolnM5Y/dYlEmphmiuZ26bJCXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:3b:48:ea:63:dd:68:41:50:15:8c:8c:2f:de:7a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
Validity
Not Before: Oct 13 11:01:13 2025 GMT
Not After : Oct 14 11:01:13 2025 GMT
Subject: CN=73425c64e9f1e50f9e18147ad16a462ccb9f734b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:0c:64:a3:e6:46:9f:6e:f0:f7:a5:ca:95:
a4:82:d6:b6:e2:31:16:bc:a4:f6:f4:30:b9:ad:07:
62:dc:a8:e3:35:4a:8e:7e:b2:9c:94:b2:16:47:f5:
98:ce:53:bf:0d:60:f6:51:2f:e5:13:3b:30:49:97:
28:23:fc:e4:b3:3b:4d:b1:08:83:12:dd:29:78:ba:
e3:3e:d4:69:4d:26:52:31:bb:35:03:2d:ae:eb:43:
76:a8:67:5d:99:9c:89:26:4a:97:45:1a:32:bc:38:
03:eb:a0:6b:77:c0:41:4f:ea:a0:85:79:a9:d8:df:
c5:ab:6c:11:5c:d0:a5:5e:b7:ae:28:8a:4c:02:5c:
3f:b1:14:ce:9f:52:eb:bd:d2:8e:24:78:25:79:25:
52:f2:77:c9:3a:43:52:42:f4:db:46:15:13:08:4c:
30:5b:a4:2d:5b:6f:f2:bb:d7:f5:e7:35:52:3a:d5:
37:63:42:79:62:cb:2a:0e:8c:6d:6b:b1:ac:94:79:
d9:81:de:a8:15:1f:fe:58:22:3b:81:b5:1b:30:95:
a2:a2:71:c8:ed:d5:72:9d:f6:aa:02:2c:c2:ce:dc:
b0:87:43:ae:61:98:b6:70:fa:25:78:89:7f:29:db:
d8:ac:32:56:9e:35:e6:f1:cf:b9:8f:1b:ff:4f:27:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:42:5C:64:E9:F1:E5:0F:9E:18:14:7A:D1:6A:46:2C:CB:9F:73:4B
X509v3 Authority Key Identifier:
keyid:EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f1:85:be:86:b5:ce:c1:c2:35:29:30:f6:52:76:b7:3d:f7:
66:9e:71:a0:e1:21:09:9f:f7:01:93:d2:36:29:47:6e:ab:6f:
29:7d:ee:e3:0c:97:56:51:e8:85:e2:ab:a5:72:f4:25:3b:6c:
5b:a0:4c:17:82:26:01:cd:c4:2e:ad:da:33:bb:a0:5c:ab:93:
5e:9e:52:da:19:a8:e6:22:da:f1:60:c8:58:5a:1b:bf:b0:fa:
7f:df:dc:5f:09:4c:98:36:bd:0a:c6:b1:57:fb:b8:4b:9f:0a:
e2:9d:ca:c6:b4:10:77:c1:fc:0d:bc:68:87:31:c4:20:73:13:
60:09:0b:f9:8e:3d:0d:d6:9b:3e:bc:27:23:32:f5:c2:93:19:
81:d8:f8:a4:1d:4a:f3:86:04:a8:81:03:c8:2f:c8:ae:61:49:
7e:c5:40:de:df:92:0c:01:f5:19:27:ce:db:b4:2e:36:34:48:
d4:5c:61:9d:64:07:6c:66:21:81:a8:1a:1a:0b:ed:c3:b3:30:
bf:e5:3d:59:df:99:51:55:7d:0e:e6:5e:21:22:5f:06:0a:7a:
3b:0c:80:79:ce:69:02:41:d0:de:93:03:50:6e:06:ce:ba:98:
9e:03:61:5a:e5:4c:91:62:22:98:1d:7f:d4:a1:45:88:a9:18:
94:e7:79:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:08:23 2025 by rpki-client