Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
File: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft (raw, json)
Hash identifier: ed22CY/cFTeAdxY7088TWkDUxZkPeRGAuc32MqOz9Os=
Subject key identifier: A9:83:34:3A:F2:9C:DD:25:CE:A1:9E:2F:E9:3B:52:12:EC:13:05:93
Authority key identifier: F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
Certificate issuer: /CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Certificate serial: 0199A3151E41078993CBDD1B9C42BA0FBA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
Manifest number: 0A1E
Signing time: Thu 02 Oct 2025 04:01:34 +0000
Manifest this update: Thu 02 Oct 2025 04:01:34 +0000
Manifest next update: Fri 03 Oct 2025 04:01:34 +0000
Files and hashes: 1: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl (hash: J8KqTt/vJoIPJhg6ASYUVuKNu8UcMRQC9gXpFhRDdUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a3:15:1e:41:07:89:93:cb:dd:1b:9c:42:ba:0f:ba:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Validity
Not Before: Oct 2 04:01:34 2025 GMT
Not After : Oct 3 04:01:34 2025 GMT
Subject: CN=a983343af29cdd25cea19e2fe93b5212ec130593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:ea:e1:32:58:34:14:a3:3c:a5:85:c5:b1:
ff:2c:38:c8:9c:7c:c6:68:ac:e5:76:9b:ee:10:9a:
12:d3:71:87:b1:e4:48:51:16:fb:87:96:a0:88:83:
16:cf:a7:3c:e8:8e:3b:99:6c:0e:f8:24:9a:37:bf:
3f:ee:92:f1:c4:4c:46:02:f2:40:ca:fe:e9:5d:36:
77:d3:88:9e:1a:c2:cd:cf:b4:e6:d4:9e:de:c7:e3:
4e:d2:e7:4c:e3:34:ba:6e:35:43:95:e9:e0:68:6b:
9b:ee:c9:20:98:be:f0:8a:65:33:b4:ff:2a:89:9d:
d0:ed:69:53:de:69:68:40:09:b4:8c:1e:ba:d1:46:
28:0f:0c:1a:3f:28:cb:6b:16:e3:f7:d9:06:09:c5:
c3:3d:b9:38:7c:eb:21:48:cb:0d:1e:36:bd:f9:03:
0d:29:2f:cd:d4:94:5f:ef:52:ce:9c:1b:3a:42:7a:
58:f1:c5:4a:ea:68:16:a3:c1:c0:63:e9:f8:3f:27:
4b:98:e2:b0:a5:e5:8d:7c:65:e2:22:f3:31:39:7a:
11:af:3d:2e:76:da:de:a1:0f:72:de:32:10:92:05:
ff:39:ab:e9:52:d9:d0:18:3b:b0:35:ed:ae:37:f6:
14:b0:d2:58:e0:72:c5:4b:ea:57:40:da:b0:1a:93:
cd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:83:34:3A:F2:9C:DD:25:CE:A1:9E:2F:E9:3B:52:12:EC:13:05:93
X509v3 Authority Key Identifier:
keyid:F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f5:d3:f9:04:36:54:03:93:1e:e9:71:87:8b:6b:10:cd:f0:
31:76:f6:90:8a:42:97:97:d6:de:a4:4b:2a:46:80:33:cd:ff:
a0:0d:e1:1c:4a:90:cc:d7:7e:1e:bc:82:3b:7e:bb:69:67:0e:
e3:4f:aa:33:cf:c6:b1:22:19:fd:a0:70:be:05:d2:0c:3e:17:
cb:1e:b1:54:ce:fe:cb:87:d8:38:89:95:0c:26:b3:75:1b:01:
ad:10:d4:13:c4:5b:a3:6e:8f:d3:0e:ff:cc:96:98:3b:ba:21:
db:a2:72:6a:da:99:01:f2:e9:76:d2:27:9d:03:8d:47:bd:53:
15:12:76:1f:f8:ab:f7:90:93:be:bf:92:60:7b:cd:28:43:91:
a0:ea:6c:5d:c4:95:14:79:93:c9:bf:62:fc:36:42:0c:cc:5c:
de:d5:8a:98:11:37:0c:27:c8:1d:b9:de:90:25:f1:f7:ce:ca:
05:40:05:53:10:1e:e9:74:e9:1d:c4:15:34:ec:32:34:e2:ff:
2b:96:cc:1d:99:5a:c8:bf:e1:d9:c5:a2:d6:6c:4f:e9:5a:9d:
23:40:cd:4e:60:e1:d5:40:a3:d2:29:d3:e0:a1:30:08:78:04:
db:fd:37:ac:59:e9:48:29:ad:5b:19:02:26:65:bd:6e:f3:a0:
ce:f9:d4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:04 2025 by rpki-client