Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
File: vDWQTiTbDpkElaNEXnfRE27WGNc.mft (raw, json)
Hash identifier: ATCxjnMtt4LBKO4cyO/Xm2u1j3jK9JZD80qO/f1sqrU=
Subject key identifier: CC:29:24:22:E2:1E:3D:FD:A5:AA:30:67:B2:7E:2E:74:35:AB:13:86
Authority key identifier: BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
Certificate issuer: /CN=bc35904e24db0e990495a3445e77d1136ed618d7
Certificate serial: 01980303CFE4E412D7198FDC883B3804F296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
Manifest number: 024E
Signing time: Sun 13 Jul 2025 09:00:38 +0000
Manifest this update: Sun 13 Jul 2025 09:00:38 +0000
Manifest next update: Mon 14 Jul 2025 09:00:38 +0000
Files and hashes: 1: S3rIqyOOkT-ZHrzoqIUi7vRzSaA.roa (hash: vV/S9dlPHB29RWZp9b9UA4u9RcBkLlolZiEQTtGd6xo=)
2: vDWQTiTbDpkElaNEXnfRE27WGNc.crl (hash: bufyoofRl7XTNZSesfeFb0t8wtFnVZnRyjAkLDiNeS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:03:03:cf:e4:e4:12:d7:19:8f:dc:88:3b:38:04:f2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc35904e24db0e990495a3445e77d1136ed618d7
Validity
Not Before: Jul 13 09:00:38 2025 GMT
Not After : Jul 14 09:00:38 2025 GMT
Subject: CN=cc292422e21e3dfda5aa3067b27e2e7435ab1386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:bd:bf:a7:b5:0d:fb:1e:7d:fa:17:e6:02:
cf:aa:34:78:1b:af:67:ac:69:8d:a4:a8:bd:44:50:
09:9a:33:cf:7a:66:0b:1f:a6:67:ab:49:0b:0e:62:
3d:66:18:19:74:a6:c5:e8:08:9f:2c:36:c9:81:40:
7c:4d:84:75:fd:99:23:2c:d5:29:1e:df:32:fc:14:
6d:b2:85:f5:65:11:5b:b6:a7:5e:68:89:92:7a:ec:
05:0a:49:72:ad:16:96:98:cc:09:3a:2b:78:c0:df:
10:9b:68:f9:5a:42:42:91:f1:03:23:b5:28:eb:cf:
45:4d:93:22:34:74:11:4a:15:75:26:87:c9:ac:d9:
c2:f9:e3:05:7e:53:82:f4:1b:6f:14:28:8d:e3:55:
04:33:67:2f:96:5e:32:4c:22:03:1a:c0:8e:0f:e2:
6c:cb:ae:20:a7:3d:84:f1:e4:a7:26:6d:7f:a9:e4:
d9:62:bd:93:2c:0f:7b:cf:3f:88:92:05:43:32:b9:
75:fb:29:1d:c6:14:0b:52:d2:2c:de:59:11:50:08:
01:d3:f6:8a:d1:8d:51:80:04:82:90:dd:36:4b:96:
a1:d0:bf:3f:9f:fa:ad:e8:f8:7f:a0:d6:f0:9d:a2:
b3:14:6a:ad:47:53:b4:35:8c:78:d1:01:0c:df:5d:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:29:24:22:E2:1E:3D:FD:A5:AA:30:67:B2:7E:2E:74:35:AB:13:86
X509v3 Authority Key Identifier:
keyid:BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4c:8f:b2:4d:95:94:33:d4:4a:5c:35:26:4f:ae:0b:be:ec:
cb:06:bb:c5:fd:00:eb:dc:91:23:93:03:72:56:ef:c5:1a:53:
2e:3a:9d:1b:2f:e2:90:17:b7:e2:59:8e:24:d1:d9:4a:f9:9a:
38:94:5d:20:ac:9e:ec:a8:de:6e:4f:b2:f4:18:c8:cc:dd:dd:
01:0e:72:87:d3:33:2a:93:9c:ef:6b:4c:98:95:6a:3a:85:fa:
08:ec:94:f5:54:fd:f1:5b:35:8c:bb:58:6e:4c:42:81:07:aa:
ab:5d:97:f9:3f:9f:30:f1:0b:13:d5:32:92:ad:b5:c8:85:8e:
9b:20:6d:96:34:c8:ab:71:ba:36:e6:c3:81:b5:fe:b8:c2:51:
28:19:14:6a:0c:8e:b3:c0:3e:8d:12:e3:9b:b1:9f:24:3e:d2:
3f:1a:ed:51:57:a2:0d:a8:15:8b:6a:d8:9d:5a:14:17:61:57:
f9:49:a4:cf:92:91:62:94:a2:97:25:28:88:ec:09:35:c3:fa:
45:7a:1c:c2:46:c8:05:f8:a1:7c:f3:0d:a8:63:52:6f:e2:54:
c8:c8:b2:66:91:74:dd:86:9a:fd:4c:1b:f9:70:3a:32:5f:10:
5b:ca:aa:ec:81:dd:aa:a1:cb:6b:8c:16:00:31:0d:af:95:41:
ff:bd:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:09:30 2025 by rpki-client