Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
File: S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft (raw, json)
Hash identifier: mQV/C47JkGDV8sI+X7Q65/NGIec6/pJNLRqDxO8dgCQ=
Subject key identifier: F4:E1:1D:2E:B4:97:44:39:3A:08:92:02:17:BF:A3:A0:8F:9A:AB:CA
Authority key identifier: 4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
Certificate issuer: /CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Certificate serial: 0198AB0752C346ECB674B83E9A53B4E77CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
Manifest number: 0328
Signing time: Fri 15 Aug 2025 00:00:40 +0000
Manifest this update: Fri 15 Aug 2025 00:00:40 +0000
Manifest next update: Sat 16 Aug 2025 00:00:40 +0000
Files and hashes: 1: 1-Lt9NLCsO-0O5Dj-v2US9jmxXIQ.roa (hash: LmWlQzcgikgQeSr2EvN/FytTaYSjoQdRmrdKGtmELxE=)
2: S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl (hash: LToXdD0BZ0LrOnmIMMNzLwB7TmhMwhGgrWAEh+ozAwo=)
3: hrzuIDRF15oBIKXIQfgIQbF1zzc.roa (hash: JpHqRzFezYOCJs0/enWH8I+qI+ye32fJxiyuYohDsJo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ab:07:52:c3:46:ec:b6:74:b8:3e:9a:53:b4:e7:7c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Validity
Not Before: Aug 15 00:00:40 2025 GMT
Not After : Aug 16 00:00:40 2025 GMT
Subject: CN=f4e11d2eb49744393a08920217bfa3a08f9aabca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:e1:ae:1e:1e:bd:29:21:49:08:70:14:79:
55:96:8a:2a:5c:95:40:af:28:c3:06:91:8e:47:5c:
98:cd:db:36:98:2f:72:80:46:55:98:2c:25:c0:c4:
c2:14:31:79:0d:6f:49:3c:83:ea:03:9d:37:4b:80:
ae:dd:4f:4a:e3:c6:bc:43:58:62:7b:9c:bb:b4:ff:
e6:4f:91:b0:9b:b4:f2:6b:38:da:7c:f1:cf:f8:34:
b2:a9:d4:79:d8:42:52:69:16:9d:d2:51:e5:d8:e4:
c2:8b:dc:52:6a:ff:86:e2:e4:b9:8f:5e:6f:5b:06:
57:22:65:39:6f:f6:65:50:cc:da:6c:d4:99:98:b7:
6f:56:33:95:b5:77:20:01:90:7f:7a:35:05:36:ef:
ed:2e:a0:08:ef:b4:58:c6:b6:27:97:5f:6e:a8:08:
27:55:ca:cf:7a:0c:0b:56:a5:ff:df:1c:f5:4a:89:
b8:95:79:ac:b6:e1:68:02:18:2e:e8:93:87:bf:7a:
a3:4a:3a:9b:4f:23:a2:6b:04:96:66:67:29:08:23:
85:74:b6:e0:6d:94:64:63:2c:80:bb:4c:72:f7:c0:
ee:07:a5:99:1d:a5:4f:2c:88:53:bd:9e:41:76:76:
b7:a1:71:a5:69:94:a0:26:4a:a7:fe:81:8b:46:2e:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E1:1D:2E:B4:97:44:39:3A:08:92:02:17:BF:A3:A0:8F:9A:AB:CA
X509v3 Authority Key Identifier:
keyid:4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b6:c0:4e:20:2d:52:ca:6b:19:d3:8e:b4:78:20:8d:b9:17:
2d:5d:16:5f:98:33:9c:a7:7f:4f:ce:ab:3a:15:46:52:68:c4:
b5:2b:f8:5c:0b:29:fd:4d:e7:f6:0b:bb:de:10:84:4e:1f:d6:
56:19:d1:5e:45:90:73:fa:dd:80:ac:ab:ff:8a:1b:00:5e:17:
cc:c4:a7:3e:71:0d:de:7e:96:88:12:22:8c:e3:67:74:8b:56:
e5:ca:ac:8e:80:dd:fd:fa:12:c0:5a:76:4d:e7:e2:e0:e5:49:
91:77:04:3b:e7:5b:06:1a:5e:06:45:1c:2a:a8:d1:38:d2:91:
b6:1e:01:a7:13:e0:0d:01:36:5c:3d:3c:57:4a:32:23:f7:a7:
f3:b4:47:ea:34:ab:14:c8:e7:fe:8d:1c:22:2e:17:7c:49:bc:
2f:8b:b2:8b:79:72:31:87:90:a6:ef:02:19:16:dd:a6:de:b2:
ca:e7:0d:09:8b:50:24:e3:79:32:ae:a9:f2:38:8b:d5:e3:5c:
ee:71:9f:2c:e0:81:08:46:63:71:6c:f1:f6:92:37:4c:84:06:
b0:cc:06:54:a5:ff:b5:a5:55:c8:15:28:56:94:33:ec:31:47:
6a:d9:e4:51:bf:cf:ad:d6:fe:63:5e:3b:81:58:1a:b5:b3:cf:
d7:a0:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:21 2025 by rpki-client