Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft
File: z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft (raw, json)
Hash identifier: DY1xG7elG0Te6QVjowlM+JyTzMRiOoX3xWu2aIDWWtw=
Subject key identifier: 3D:28:4F:A1:A8:23:27:87:C5:4A:22:53:4F:7B:7C:93:52:7E:21:6C
Authority key identifier: CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
Certificate issuer: /CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Certificate serial: 01979B9691459F04AECC1138BEA5654601C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft
Manifest number: 15B0
Signing time: Mon 23 Jun 2025 07:00:25 +0000
Manifest this update: Mon 23 Jun 2025 07:00:25 +0000
Manifest next update: Tue 24 Jun 2025 07:00:25 +0000
Files and hashes: 1: z-qNvyFYi18Mlkcc6jO1TtEJF-g.crl (hash: BizMNhxOoeeDZCJbRKQlHY3PQ1YvMuwgU8wNULMBGkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:96:91:45:9f:04:ae:cc:11:38:be:a5:65:46:01:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Validity
Not Before: Jun 23 07:00:25 2025 GMT
Not After : Jun 24 07:00:25 2025 GMT
Subject: CN=3d284fa1a8232787c54a22534f7b7c93527e216c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:f7:db:4f:f6:ff:1d:ab:cd:4f:10:30:79:
e4:5c:84:9a:88:59:ed:54:dd:49:f9:c1:28:ab:15:
d5:d6:7c:42:96:3d:d6:1c:64:43:34:4c:fb:1a:79:
2d:ec:f0:cb:ad:4a:98:da:c5:2e:32:94:54:25:49:
44:f4:23:5e:49:70:10:4e:96:de:ac:cb:29:ba:d0:
1e:93:8d:a4:33:68:97:48:f9:27:4f:89:7d:50:ec:
3f:f2:a7:7d:bb:ee:66:31:d9:5c:d6:23:06:e5:10:
ed:ed:59:46:1c:84:2d:fe:78:75:76:69:46:d2:ea:
6c:d6:4f:ed:ca:d6:a9:dc:6f:97:05:0a:83:ea:6b:
a6:2c:21:50:d2:85:76:f2:b0:18:dd:00:ad:82:8f:
80:c8:5d:8f:46:f7:8f:e3:7e:95:ed:02:cd:89:de:
da:9b:93:11:56:16:6f:86:78:73:99:a5:f4:00:3c:
e9:d0:9c:98:ce:47:8a:24:65:0f:39:e8:cf:da:cd:
c9:91:a4:d4:2f:0a:0a:6d:27:ff:7c:89:31:1c:6b:
86:e9:21:3f:b4:d1:50:08:de:f1:43:03:b0:e9:4e:
34:1d:50:27:ee:32:07:6a:bf:00:cd:a1:01:37:60:
ee:62:ba:f4:cd:11:5f:44:72:52:c8:82:d1:7d:f8:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:28:4F:A1:A8:23:27:87:C5:4A:22:53:4F:7B:7C:93:52:7E:21:6C
X509v3 Authority Key Identifier:
keyid:CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:18:e3:39:a1:ea:bd:42:17:94:66:b1:93:22:a3:e9:40:10:
7c:e5:67:20:c2:c9:31:0f:7a:e2:59:91:99:8b:d0:33:86:b1:
8b:4b:ed:00:ae:8f:5b:2d:87:d2:6d:46:3e:93:6c:55:97:98:
6e:32:73:d4:f8:d4:60:5b:a2:3a:60:d5:e6:06:7b:89:f1:b0:
84:00:b1:4c:19:ab:09:5b:bc:10:7e:d5:86:b2:22:55:9a:2b:
0a:df:3e:31:93:c8:2a:86:05:a6:17:09:1b:a9:81:72:f6:9a:
c7:21:41:29:54:e6:f6:ee:84:6b:3d:9d:05:f8:43:0b:3c:77:
52:41:06:83:09:e2:83:d5:4f:ce:84:cc:b4:48:01:cf:01:28:
01:26:85:0f:ce:85:b6:21:b3:6f:59:48:16:b9:d8:94:80:a7:
8a:62:7b:28:54:77:d6:61:54:6d:a6:d2:5c:37:26:d7:16:00:
0b:08:7c:ee:fa:11:89:e6:cc:61:01:6a:95:9e:54:0d:1c:b8:
ef:9d:5b:4d:13:c7:42:f6:8e:6f:65:bf:c7:68:ec:a4:64:17:
e6:de:68:cf:58:fb:89:9c:59:23:7a:ad:5b:de:8f:13:f8:38:
25:fb:a0:5d:25:7e:02:1c:be:7a:3c:22:d8:c5:dc:76:aa:04:
8a:34:23:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:31 2025 by rpki-client