Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
File: cCFOfqyx0k4hHi8l_uStdX5sll0.mft (raw, json)
Hash identifier: 6jhj8Xf5LLFEUtG9AIi/lDlZMS/qLfgchpT2DzPSn/E=
Subject key identifier: C0:6F:D8:42:8B:B2:8F:3A:EA:F7:73:8B:11:8B:C0:5A:90:36:08:98
Authority key identifier: 70:21:4E:7E:AC:B1:D2:4E:21:1E:2F:25:FE:E4:AD:75:7E:6C:96:5D
Certificate issuer: /CN=70214e7eacb1d24e211e2f25fee4ad757e6c965d
Certificate serial: 0199036F53B52BF126551D7EFE6F261D484E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
Manifest number: 0609
Signing time: Mon 01 Sep 2025 04:00:51 +0000
Manifest this update: Mon 01 Sep 2025 04:00:51 +0000
Manifest next update: Tue 02 Sep 2025 04:00:51 +0000
Files and hashes: 1: Ur1p6KL9NTfFRBrJ7C7-zJCCRXo.roa (hash: lsHocd823a47v2/eGKZz1waiHC7kKATLJJz6RHG9Ic0=)
2: cCFOfqyx0k4hHi8l_uStdX5sll0.crl (hash: rbae5Bp14XqB/qhw8sQzPm4WDLYnsw0QPKrXzdwUxX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:03:6f:53:b5:2b:f1:26:55:1d:7e:fe:6f:26:1d:48:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70214e7eacb1d24e211e2f25fee4ad757e6c965d
Validity
Not Before: Sep 1 04:00:51 2025 GMT
Not After : Sep 2 04:00:51 2025 GMT
Subject: CN=c06fd8428bb28f3aeaf7738b118bc05a90360898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:72:4a:27:19:6b:27:3f:da:cd:b8:bd:08:
e4:02:e0:07:7d:7a:7f:f7:20:6d:cc:a6:85:06:26:
80:91:68:c5:47:ab:40:dc:f7:ac:d6:97:e2:83:1b:
e7:c9:a6:16:36:50:a6:8b:97:6a:9f:1f:ca:63:4f:
aa:58:a9:18:6e:7a:d6:cb:56:3e:b2:f0:b5:a1:a0:
14:b7:4f:da:6e:0c:36:b9:ef:32:c6:f7:a8:2e:79:
5b:d0:c5:51:88:36:70:84:3c:49:21:d3:a5:aa:9b:
f2:2e:87:42:5e:84:d1:25:83:64:10:3c:aa:0f:0e:
c6:3e:8a:d9:e6:a4:37:03:5e:17:52:f9:87:ac:f3:
a4:56:b6:b8:8e:83:e3:a1:ad:9a:84:e5:e0:e7:bf:
97:5b:27:03:ca:2f:d5:7d:6e:5f:53:1a:28:94:68:
34:97:9e:69:ed:1a:3a:ab:89:06:25:56:ec:e9:e6:
38:b7:3f:c5:da:a6:56:fc:ff:13:f6:c6:69:3b:1d:
a8:cc:be:67:c5:3d:c1:8c:c0:ff:8a:e9:fc:cb:7f:
9d:f0:48:d4:a9:6c:74:17:5b:87:97:ce:72:56:82:
38:6d:67:43:1c:53:82:c5:86:b4:06:97:35:87:ea:
48:45:d5:a7:e6:6d:1b:c0:7a:97:45:ab:45:76:a3:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6F:D8:42:8B:B2:8F:3A:EA:F7:73:8B:11:8B:C0:5A:90:36:08:98
X509v3 Authority Key Identifier:
keyid:70:21:4E:7E:AC:B1:D2:4E:21:1E:2F:25:FE:E4:AD:75:7E:6C:96:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:47:da:5e:7d:f2:39:64:8e:a2:87:49:f7:1a:9e:4b:c5:6f:
75:75:8f:7f:d8:f3:c7:f1:72:22:ba:6e:a2:73:7a:92:38:7c:
61:c3:dd:22:7f:5a:22:3c:ab:30:80:3d:4f:44:17:af:06:0e:
b6:c6:41:48:d2:d9:4b:58:6a:20:3d:c0:1b:fa:98:c9:65:a5:
3a:0d:1f:6a:b3:7f:6c:90:11:67:e2:0d:6e:87:f4:55:dd:d7:
c3:f6:60:2d:68:fa:8c:36:69:e2:7f:95:68:14:b8:38:a5:73:
e4:1a:ad:38:85:e3:5f:52:58:3c:20:a7:9f:24:7b:6a:43:82:
82:92:e9:3d:83:72:ae:95:c4:af:60:27:15:35:db:90:13:c4:
57:55:4a:b7:a3:68:05:7e:44:3d:75:90:b9:fb:09:f6:95:de:
2e:7b:d8:a6:28:7e:ca:35:0f:5c:7f:45:94:00:29:d4:88:65:
87:3f:7c:a7:01:39:56:69:09:de:33:52:45:6a:a5:64:17:1b:
d4:d2:a5:69:26:a8:68:19:c0:9e:55:1a:e5:95:5d:11:63:ad:
c3:9f:1e:36:16:a7:87:7c:24:9a:68:b7:e8:9e:d4:23:c5:13:
58:18:4a:7e:e0:3a:cb:64:fe:c6:de:81:d3:6e:09:17:cb:42:
91:6d:66:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:54:53 2025 by rpki-client