Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft
File: ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft (raw, json)
Hash identifier: P9tQuhEHHBksCUztW3dG++3G9PSpb42GB2uxvCem/wQ=
Subject key identifier: 74:90:B0:A1:98:50:77:4B:D4:C9:7B:B9:12:C4:1B:3D:39:3A:34:1A
Authority key identifier: 65:D4:D9:22:28:6A:84:5F:46:1F:EF:1F:53:D3:20:CD:2E:EF:72:8A
Certificate issuer: /CN=65d4d922286a845f461fef1f53d320cd2eef728a
Certificate serial: 0197F3C7A9C21D5B885C7568CA0C6BB95D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdTZIihqhF9GH-8fU9MgzS7vcoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft
Manifest number: 0F9D
Signing time: Thu 10 Jul 2025 10:00:37 +0000
Manifest this update: Thu 10 Jul 2025 10:00:37 +0000
Manifest next update: Fri 11 Jul 2025 10:00:37 +0000
Files and hashes: 1: ZdTZIihqhF9GH-8fU9MgzS7vcoo.crl (hash: Hkl+ClHoW65Dvjj5JKGSZT0567z5tJ3zgWcMH/0W01c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:c7:a9:c2:1d:5b:88:5c:75:68:ca:0c:6b:b9:5d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d4d922286a845f461fef1f53d320cd2eef728a
Validity
Not Before: Jul 10 10:00:37 2025 GMT
Not After : Jul 11 10:00:37 2025 GMT
Subject: CN=7490b0a19850774bd4c97bb912c41b3d393a341a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:b7:81:f6:ae:a4:92:ad:d4:d4:72:30:b3:
a4:99:95:76:45:2d:25:44:86:1c:79:e8:90:6b:57:
b6:3f:e4:36:5f:7f:12:ca:3f:4e:a5:70:52:7f:a5:
78:f2:35:6f:5a:64:00:1f:65:2f:fd:4e:6f:02:19:
02:e5:a9:01:25:99:96:4f:6e:0c:c2:be:87:f7:83:
c8:b0:44:b1:c3:6d:f3:99:f2:76:2a:6c:06:48:97:
7e:2c:cb:3b:a5:60:43:a5:3f:fd:79:94:88:96:d5:
84:c2:49:ac:25:d0:ba:53:ec:94:3f:b9:3e:fc:5d:
e1:53:3c:a4:05:57:1d:62:74:db:29:fd:d6:71:e6:
07:4e:de:f1:13:56:7e:05:ea:7c:30:df:2c:52:49:
0f:53:df:b9:73:c1:31:0f:88:97:bf:43:48:cb:ad:
6e:db:d4:ce:74:64:5a:72:cd:01:a8:25:96:e7:84:
b0:f2:f6:88:c0:c2:4c:b5:bd:c5:3a:19:e3:bb:64:
8c:07:30:7d:e8:11:1f:69:d5:99:73:39:d9:12:cc:
0f:5a:c6:e8:0d:0b:eb:f2:66:50:18:6a:64:22:b6:
b0:9a:bc:ff:0e:41:c2:27:05:a5:80:c4:e1:7b:11:
4e:f9:e5:ab:00:b5:81:f1:af:19:7d:0e:f9:cd:ae:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:90:B0:A1:98:50:77:4B:D4:C9:7B:B9:12:C4:1B:3D:39:3A:34:1A
X509v3 Authority Key Identifier:
keyid:65:D4:D9:22:28:6A:84:5F:46:1F:EF:1F:53:D3:20:CD:2E:EF:72:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdTZIihqhF9GH-8fU9MgzS7vcoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9b:1d:13:cb:d8:a0:0b:b3:04:1c:93:e6:a1:bd:ea:33:18:
d4:da:32:c1:a8:11:62:ef:84:80:32:c7:fc:f4:39:e5:93:be:
3d:e0:5e:f4:d4:14:c2:97:6a:c1:35:66:67:2f:36:eb:0f:d5:
01:38:ab:ee:5b:66:22:9b:2e:a1:7d:f2:7f:9f:60:d8:95:c3:
e9:22:49:2d:99:34:d0:fe:5b:5e:68:1d:3e:b3:e3:f9:8c:b2:
ee:4c:f2:a4:a5:b0:48:b4:71:c1:1c:6f:cc:c5:b0:f7:47:57:
47:0f:39:cd:87:b3:a0:57:9c:fa:e4:f1:8a:80:10:f9:59:4b:
4d:e9:43:f9:8b:5d:d7:97:45:b9:59:59:46:dc:90:b9:c9:03:
ac:2e:63:aa:15:bd:c2:d4:fe:64:ff:77:1c:d6:a5:2b:4e:0f:
22:68:37:78:39:8a:42:be:0f:60:79:de:33:81:f7:d1:1b:30:
e1:b8:5c:8b:03:c2:5e:23:ea:c9:89:c0:aa:b9:00:72:4a:8a:
b9:86:cf:8f:aa:b1:53:47:08:ff:8f:6b:1d:58:01:4a:c4:e1:
ac:25:14:f8:d5:c4:92:61:50:08:46:46:dc:fa:e2:6b:ac:20:
fc:7d:4d:26:e5:d2:70:3b:3f:39:2b:fa:33:f7:ef:41:33:ad:
78:25:d5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:03 2025 by rpki-client