
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
File: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft (raw, json)
Hash identifier: AbtnmBNIFbrlf6RTA4jJUHHZyXNluC+g8lWdSFiES/U=
Subject key identifier: 0C:8F:33:47:B6:EB:65:D6:FF:1C:90:F0:F5:DB:B1:90:F0:90:1D:C1
Authority key identifier: 07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
Certificate issuer: /CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Certificate serial: 019937CA51BF8271D3809B91703D4F71D793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
Manifest number: 167A
Signing time: Thu 11 Sep 2025 08:00:30 +0000
Manifest this update: Thu 11 Sep 2025 08:00:30 +0000
Manifest next update: Fri 12 Sep 2025 08:00:30 +0000
Files and hashes: 1: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl (hash: Luvj2kS0pBxMKIAcZlzGA2/bfRT6zla49mEYm110xbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:51:bf:82:71:d3:80:9b:91:70:3d:4f:71:d7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Validity
Not Before: Sep 11 08:00:30 2025 GMT
Not After : Sep 12 08:00:30 2025 GMT
Subject: CN=0c8f3347b6eb65d6ff1c90f0f5dbb190f0901dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:07:c8:83:35:04:dc:14:fd:06:9b:2c:86:
a5:fb:a8:a4:d6:50:e9:f6:8d:51:ce:2f:b2:38:b7:
ed:3a:88:1e:d6:63:a6:0b:08:68:15:98:b2:54:e6:
c7:cd:54:98:cc:c6:5f:ac:a1:ca:c5:9f:f8:e3:af:
ef:81:52:49:97:e2:97:04:cd:44:dd:06:fa:94:1f:
13:f8:75:25:87:2b:3e:7b:44:ab:b9:38:6a:d8:7b:
24:be:b0:47:7d:e7:0c:22:c9:54:17:5e:04:3e:de:
98:d1:1c:70:90:57:7e:aa:0f:52:58:99:ff:df:cf:
62:69:4a:f1:bd:10:cd:06:7f:de:4a:b5:40:0a:b2:
a0:fe:73:99:fc:9d:14:05:9a:9b:28:59:ee:2f:69:
6d:f8:68:17:cd:6b:f1:42:9b:03:92:72:93:cf:44:
f8:10:9b:2d:9a:fd:2f:3d:a6:99:a7:db:ed:ac:c7:
9d:5f:a2:d5:c5:79:8e:d6:44:b6:1c:20:8a:e1:2d:
ca:a4:47:a1:b3:75:72:33:ad:ce:5e:64:66:bb:b7:
ac:87:94:81:55:0b:8c:c3:22:89:9c:dd:0f:2e:7e:
83:47:8a:d8:50:e2:15:47:3b:35:bb:5c:a1:c7:d3:
3c:1c:d9:19:c8:58:d3:14:b3:03:82:7f:bb:90:4d:
0c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8F:33:47:B6:EB:65:D6:FF:1C:90:F0:F5:DB:B1:90:F0:90:1D:C1
X509v3 Authority Key Identifier:
keyid:07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1a:23:a8:95:55:3c:3b:a9:61:26:41:a9:1a:a7:4e:e0:21:
b8:a7:45:47:88:0b:11:07:8b:ed:25:5e:d2:48:94:f9:51:fd:
c9:3d:42:3e:8d:92:77:a7:a1:46:4c:df:b4:9f:65:b7:4e:9a:
6b:fc:f8:c0:77:86:49:56:31:ad:54:e1:7e:fc:1e:bf:99:85:
c9:cd:2f:ca:78:90:5f:85:db:71:10:58:3f:9f:7d:d3:1e:a1:
e9:4b:4e:8e:2f:a9:19:9a:ea:1c:51:53:a8:39:aa:95:1b:ee:
45:b8:0b:27:90:c8:7b:b4:0d:97:23:bf:10:5f:ed:1b:26:ac:
17:cc:44:64:7d:86:7a:61:b2:e5:2c:a4:87:85:70:92:77:7c:
c3:ac:ba:2f:c3:5d:93:4f:e6:eb:61:4e:35:a5:59:b5:d1:cf:
6f:47:eb:09:78:9e:db:07:a4:21:27:c2:b4:66:cc:41:48:72:
ee:96:c8:0d:fb:9e:14:d1:40:c9:dc:db:1e:31:09:f1:19:57:
68:8c:19:cb:c4:da:e7:d1:07:41:25:ff:e5:31:00:28:11:0a:
ec:ec:44:8e:55:a0:02:d7:88:db:47:e6:e9:ea:ca:c9:bf:2f:
e8:5b:c1:5d:e3:1f:1d:85:12:ff:5f:57:02:cf:8b:c0:75:d4:
03:04:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:10:01 2025 by rpki-client