Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
File: dvLzQc-Yuei0bt04mkgGTHuub5o.mft (raw, json)
Hash identifier: g6ml7sFLkwSjtaXl3z0I8/F5imwpxoU5Ciqtgpx0HkQ=
Subject key identifier: 0F:1D:D6:89:FB:AE:D3:1D:18:A8:0C:14:2B:F4:F9:9D:53:EF:B7:74
Authority key identifier: 76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A
Certificate issuer: /CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
Certificate serial: 0199E0E0B5B8DA8365E68230230BA00897F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
Manifest number: 0EB7
Signing time: Tue 14 Oct 2025 04:00:46 +0000
Manifest this update: Tue 14 Oct 2025 04:00:46 +0000
Manifest next update: Wed 15 Oct 2025 04:00:46 +0000
Files and hashes: 1: dvLzQc-Yuei0bt04mkgGTHuub5o.crl (hash: ZI7+yVzu27BH17y4LzKpKpJAHm3069fCmUBFcB9Yx5A=)
2: pLFGIGuwO6p3VXl7848DpqUCykE.roa (hash: cQnY5M6yFrvUehgYlIPw55V4Prm/y9EByLYSiv2JqLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e0:e0:b5:b8:da:83:65:e6:82:30:23:0b:a0:08:97:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
Validity
Not Before: Oct 14 04:00:46 2025 GMT
Not After : Oct 15 04:00:46 2025 GMT
Subject: CN=0f1dd689fbaed31d18a80c142bf4f99d53efb774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:48:71:61:79:d0:fb:47:72:ec:30:d4:6a:
f3:26:6b:18:35:27:0d:3d:61:ab:79:47:7d:2c:5a:
58:b6:1b:05:a0:89:26:49:14:67:41:a4:6a:4b:6d:
ea:f0:c6:98:04:48:a7:07:16:89:42:68:14:7e:12:
5e:67:9b:ba:aa:c0:2b:f2:ea:f9:3b:8b:7c:88:3b:
ce:1e:8e:bf:12:7f:f6:1c:d1:5d:9f:8c:08:39:13:
e1:7c:45:66:e7:a0:52:f6:6b:67:f9:33:b6:d1:13:
ae:f9:4c:85:99:2b:97:8e:7a:0e:d3:07:37:cf:37:
79:19:88:23:3a:05:9c:14:95:38:08:53:6f:c5:f6:
c2:5d:18:43:02:05:bf:26:cd:f9:13:31:3b:9a:63:
1f:09:39:f2:c3:b9:e6:b7:09:29:63:e9:7b:c5:b9:
30:cc:32:4b:9e:47:4e:50:9a:16:e8:ff:e7:3c:8a:
8f:c4:c4:77:7c:56:98:68:4e:3e:40:41:ad:b8:75:
c7:75:47:c9:8b:ac:0b:71:6f:d3:57:4e:a7:cb:fe:
99:52:78:a2:a1:67:65:fc:9d:73:85:63:fd:da:88:
b3:c7:7c:3c:57:9a:3e:23:60:bf:e4:f5:39:a3:dd:
0c:b7:90:db:c6:14:72:38:d5:15:e7:8b:ea:53:ab:
6f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1D:D6:89:FB:AE:D3:1D:18:A8:0C:14:2B:F4:F9:9D:53:EF:B7:74
X509v3 Authority Key Identifier:
keyid:76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5f:5e:f1:08:e9:45:bc:46:05:ef:c0:a3:10:7d:53:6f:83:
05:81:b2:cd:5c:ef:45:50:cc:76:7f:b3:7a:e1:d6:67:52:aa:
61:e7:da:dd:2d:41:e6:29:31:32:c8:d0:a6:ee:3f:2f:0e:64:
e1:e5:86:d6:db:44:8d:76:83:bb:9b:23:11:2d:5f:ab:7c:e5:
d7:24:2d:ea:c1:e6:f4:26:59:b1:c9:2b:cf:1b:18:10:a9:f1:
2e:a5:9c:a4:69:20:0d:ca:a9:42:05:0b:a3:fa:e7:1a:c9:2f:
62:e2:5d:f1:8b:e5:d3:a7:83:01:bb:1e:6e:e0:a8:ae:3a:9b:
16:0a:84:b7:13:eb:b8:02:51:f9:22:0b:5c:2a:0b:63:8a:38:
14:07:40:fe:3e:04:3a:cc:e8:88:dc:13:77:a2:c9:1d:b3:68:
75:58:b8:cc:db:13:03:32:f5:f9:79:34:13:f6:69:09:73:7f:
bb:60:fc:d5:9e:c8:fb:6d:17:34:d7:dd:f8:d8:14:08:1f:88:
e5:49:5c:68:ec:55:cd:96:fa:27:6c:26:9d:70:5e:a4:e5:d1:
df:4a:77:54:9d:c7:0c:cf:83:c3:3c:08:c6:81:9a:ec:09:79:
94:31:ec:d8:96:66:61:39:eb:b5:9e:47:41:15:69:41:c6:17:
3f:ea:a0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:25 2025 by rpki-client