Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.mft
File: KaA5l7KPWbCAMciYQH3V5RN93bE.mft (raw, json)
Hash identifier: 11U2D/ENsYKq0ldTRpSlF5G9HT6j9FbucttDROO9c3A=
Subject key identifier: CB:36:93:41:BE:09:DB:49:8E:B3:86:62:EA:EF:25:2B:B8:99:20:E4
Authority key identifier: 29:A0:39:97:B2:8F:59:B0:80:31:C8:98:40:7D:D5:E5:13:7D:DD:B1
Certificate issuer: /CN=29a03997b28f59b08031c898407dd5e5137dddb1
Certificate serial: 01992C34AEBD9D0A3BCE46650EF56374D1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaA5l7KPWbCAMciYQH3V5RN93bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.mft
Manifest number: 1362
Signing time: Tue 09 Sep 2025 02:01:14 +0000
Manifest this update: Tue 09 Sep 2025 02:01:14 +0000
Manifest next update: Wed 10 Sep 2025 02:01:14 +0000
Files and hashes: 1: KaA5l7KPWbCAMciYQH3V5RN93bE.crl (hash: SqH/2g/Am7V+t7Mn+6rP32f3MktONV1G4flAIsqLKN8=)
2: TFGcxJc1hz5sSLNvCaBuhb3JcFY.roa (hash: IVGRn6jYdKaVvVkrmcrSKzMRsOoEhE2vOI0riR6WQTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:ae:bd:9d:0a:3b:ce:46:65:0e:f5:63:74:d1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a03997b28f59b08031c898407dd5e5137dddb1
Validity
Not Before: Sep 9 02:01:14 2025 GMT
Not After : Sep 10 02:01:14 2025 GMT
Subject: CN=cb369341be09db498eb38662eaef252bb89920e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:b9:cd:9a:b7:cb:6c:54:e8:b5:1b:58:c4:
b7:7c:3c:ae:d8:be:a5:30:04:8b:c0:d4:c4:15:ed:
6b:5f:e1:7b:a6:a2:02:3a:d8:17:de:ae:e3:32:95:
2a:46:70:83:a8:b7:d2:ca:c2:cf:0b:f6:eb:ae:3c:
2b:c5:8f:9f:f6:e4:57:9c:a7:2a:3d:d9:19:2b:1e:
31:74:7a:04:f7:d6:09:39:92:28:3e:4c:27:d6:61:
49:8f:d7:f1:1c:f2:15:4d:2f:32:d0:18:29:3f:6c:
1f:72:1b:d0:e9:8f:41:bb:43:47:04:23:62:34:e1:
59:89:ed:b3:79:00:ab:85:3f:31:0e:d6:e6:2a:03:
78:c0:af:38:c2:49:71:ab:d1:bd:90:ed:5b:c9:1f:
7e:58:31:b9:9f:eb:4b:f5:21:a8:a5:6d:8b:89:3b:
95:59:fc:45:ff:b6:43:5d:d2:33:b5:13:72:3d:9b:
ac:33:9e:73:1a:71:10:7a:a8:03:ce:fc:06:91:eb:
c1:f6:3e:fc:25:3d:bb:b2:fc:ce:45:e9:6c:5f:29:
83:4b:09:34:dd:5e:61:f6:3a:00:0c:9b:e5:da:2a:
0e:53:25:57:1a:6d:de:7b:18:51:ea:8e:21:68:64:
6b:4e:8b:64:be:da:af:61:10:94:69:42:0a:d7:9a:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:36:93:41:BE:09:DB:49:8E:B3:86:62:EA:EF:25:2B:B8:99:20:E4
X509v3 Authority Key Identifier:
keyid:29:A0:39:97:B2:8F:59:B0:80:31:C8:98:40:7D:D5:E5:13:7D:DD:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaA5l7KPWbCAMciYQH3V5RN93bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b7:84:5b:b3:68:d0:b2:94:09:33:be:de:22:b1:b2:ec:f6:
e7:4b:b6:8b:ab:81:91:81:62:5a:81:91:97:5d:26:48:ec:4c:
85:99:58:ff:a0:6c:cf:b2:4f:50:c4:63:83:a5:06:e2:6c:0c:
0d:dd:08:e7:02:31:65:61:25:4a:9d:14:47:b1:55:a4:70:ae:
87:67:fc:92:84:1e:1f:8d:ed:d4:3a:f4:d7:6e:d9:ac:52:93:
13:f1:8f:a1:53:39:b2:26:5f:dc:3b:45:6f:00:08:51:7c:13:
f0:ea:d7:0d:5f:bf:85:e6:67:43:fe:bc:50:9e:b6:6d:20:15:
6e:2b:21:ae:cc:5b:ac:c6:7d:90:34:d0:59:ad:ef:1c:ca:90:
87:a1:e0:45:22:6f:cd:d7:1f:0e:e5:ca:3c:54:ff:a0:e2:02:
df:59:a5:25:38:b6:c2:21:cf:7d:d9:df:71:5b:aa:53:8a:8c:
57:54:9e:24:d5:f1:d4:2c:37:a5:6e:71:b4:ab:89:c8:35:bf:
ff:27:0b:1f:bb:ff:95:ed:a3:3d:84:c0:fb:ce:b4:2a:1b:5f:
ad:85:37:54:d0:4a:dc:02:65:55:16:b5:bb:1c:29:54:ec:86:
e0:54:f7:ba:45:40:f1:22:4d:7b:af:14:83:15:71:8e:96:eb:
d7:62:1d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:43 2025 by rpki-client