Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
File: a9wGwwC61lEu6H_dJAEF8u8n1eA.mft (raw, json)
Hash identifier: zo8OW/KvQEMgX3XBj6v63SBG3OjCwcwNtkpEp6FpfHQ=
Subject key identifier: B4:1C:7A:07:47:A2:11:9E:B9:A8:26:67:8F:A0:9C:2F:02:BC:40:75
Authority key identifier: 6B:DC:06:C3:00:BA:D6:51:2E:E8:7F:DD:24:01:05:F2:EF:27:D5:E0
Certificate issuer: /CN=6bdc06c300bad6512ee87fdd240105f2ef27d5e0
Certificate serial: 01987D89DFAD378079E9F99257B38F416A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9wGwwC61lEu6H_dJAEF8u8n1eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
Manifest number: 05B5
Signing time: Wed 06 Aug 2025 04:00:44 +0000
Manifest this update: Wed 06 Aug 2025 04:00:44 +0000
Manifest next update: Thu 07 Aug 2025 04:00:44 +0000
Files and hashes: 1: a9wGwwC61lEu6H_dJAEF8u8n1eA.crl (hash: zQH0SQgdi5QpRj3XO58xtAmcDyyOhM+BtifVpvJQ5/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:df:ad:37:80:79:e9:f9:92:57:b3:8f:41:6a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bdc06c300bad6512ee87fdd240105f2ef27d5e0
Validity
Not Before: Aug 6 04:00:44 2025 GMT
Not After : Aug 7 04:00:44 2025 GMT
Subject: CN=b41c7a0747a2119eb9a826678fa09c2f02bc4075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:2f:0b:c0:ba:78:10:ea:70:b1:82:16:6b:
93:0a:fa:d4:cd:e0:59:81:8a:78:28:21:e6:0b:17:
dd:a4:20:eb:6e:95:fb:f4:4e:89:ec:81:fa:9e:32:
42:b7:a2:50:ad:94:5e:0a:26:e2:76:5e:dc:b2:5e:
74:a2:cf:14:e6:6d:b6:cb:8a:60:93:00:38:65:5b:
34:35:98:41:54:70:3e:08:ab:83:54:90:81:4a:07:
87:ce:72:99:fe:12:94:d6:9b:ed:d9:d5:cb:2a:00:
68:d0:1e:74:88:97:e6:85:83:63:9c:bb:bb:fb:82:
fb:42:ba:65:d2:83:3e:90:96:b4:e6:4b:08:e2:3c:
7c:d2:14:5c:43:49:20:54:d4:0c:46:08:07:2c:f4:
dd:74:a8:a4:b3:b9:ef:e5:80:9e:06:ed:cf:40:84:
3e:14:3f:ad:76:1f:81:45:87:c3:d4:80:75:1b:97:
46:75:b7:d2:14:b5:74:ea:85:5e:10:ad:71:d8:ab:
4d:b5:06:f7:b5:ac:39:c5:86:12:c5:d7:e1:b6:ce:
b6:d3:a1:74:04:f8:a1:a8:45:c1:f0:da:ae:6e:ee:
e3:c2:62:70:5c:bf:b4:1a:93:9e:58:09:ab:a3:39:
d3:aa:99:9e:cb:64:ba:28:5f:65:c6:ee:00:8b:bb:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1C:7A:07:47:A2:11:9E:B9:A8:26:67:8F:A0:9C:2F:02:BC:40:75
X509v3 Authority Key Identifier:
keyid:6B:DC:06:C3:00:BA:D6:51:2E:E8:7F:DD:24:01:05:F2:EF:27:D5:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9wGwwC61lEu6H_dJAEF8u8n1eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:64:56:f3:38:79:96:53:c8:ea:1b:31:9c:4d:fc:93:2b:16:
6a:e7:5e:37:ad:dc:fb:bb:26:43:fa:34:7b:4d:54:ab:0d:12:
fe:59:b3:a5:62:27:c2:28:7b:b6:0f:99:95:86:10:a0:af:bf:
f8:f6:d2:aa:57:66:d1:d9:65:26:09:3a:e7:0d:c0:78:4a:76:
44:09:4a:9a:96:2d:e1:c9:66:a3:ce:6f:66:27:9c:f6:be:3b:
b2:fe:0f:f3:7f:63:b6:43:81:19:f5:5b:87:55:c0:68:8c:9d:
fd:fd:8e:21:e6:cd:ad:e9:b5:0b:c4:02:70:f2:68:95:38:50:
fe:ad:5a:e6:12:9c:9d:64:d4:62:a4:c9:f6:ab:54:65:b1:98:
89:d4:c2:f6:e5:ac:1f:bc:aa:ec:8c:01:ae:e0:f3:42:24:b1:
56:00:8d:f0:d1:92:73:e0:15:93:78:d4:44:0f:b4:83:e5:99:
dd:eb:f8:8f:5d:a3:9e:67:bf:17:3b:f1:18:fb:c9:b0:c9:a1:
c5:89:03:f2:ac:1f:de:2c:af:4a:80:b9:c9:34:25:ef:14:94:
f2:c1:d4:c6:fd:af:32:0d:fd:3e:93:b9:f2:be:41:f3:4f:13:
e1:c7:b9:73:bf:4c:c0:71:54:c6:75:c4:86:42:71:8b:ca:33:
d6:2d:e0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:11:08 2025 by rpki-client