Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
File: ZEXzBZOZaa2QDVjfmskeenW0MY4.mft (raw, json)
Hash identifier: Zz9na65a3o7yVB8Wy65ygSOJ9Fj10i/EaRAgYmtm/fg=
Subject key identifier: 2D:4A:01:AF:F0:A2:84:84:B8:38:70:92:9F:E3:BF:DD:3F:CD:9A:FB
Authority key identifier: 64:45:F3:05:93:99:69:AD:90:0D:58:DF:9A:C9:1E:7A:75:B4:31:8E
Certificate issuer: /CN=6445f305939969ad900d58df9ac91e7a75b4318e
Certificate serial: 0198361706268955422ABDB6E39AC656AA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEXzBZOZaa2QDVjfmskeenW0MY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
Manifest number: 1051
Signing time: Wed 23 Jul 2025 07:02:15 +0000
Manifest this update: Wed 23 Jul 2025 07:02:15 +0000
Manifest next update: Thu 24 Jul 2025 07:02:15 +0000
Files and hashes: 1: ZEXzBZOZaa2QDVjfmskeenW0MY4.crl (hash: 86jTJN5CeWt3fxinP95DK1eL7h0JEymhgXeZumjx3WI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:17:06:26:89:55:42:2a:bd:b6:e3:9a:c6:56:aa:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6445f305939969ad900d58df9ac91e7a75b4318e
Validity
Not Before: Jul 23 07:02:15 2025 GMT
Not After : Jul 24 07:02:15 2025 GMT
Subject: CN=2d4a01aff0a28484b83870929fe3bfdd3fcd9afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:7f:da:ce:7c:e0:0a:68:21:5a:2c:48:1e:
4f:83:38:19:f9:d6:a9:44:97:20:d4:b5:1a:74:d8:
10:68:1c:a4:9b:da:3e:fc:29:c3:e5:d7:23:a2:cd:
1d:da:d6:35:93:64:5c:7b:be:0a:80:78:64:41:a7:
7c:1f:9a:d4:06:5b:4c:dc:63:60:73:2a:fb:1e:23:
ab:69:44:e4:82:30:3e:fe:30:01:11:c6:e7:84:7d:
87:ce:7e:61:7d:31:68:92:ca:42:b1:c6:c6:37:de:
7b:1a:d2:9f:c6:7c:8f:a9:1a:e8:05:af:4a:74:f5:
4c:15:2d:a2:2a:4b:4f:83:d0:67:89:69:9c:5f:d9:
90:b6:f4:2d:fc:37:e9:97:26:f0:fe:da:9d:4f:75:
79:ea:c0:25:95:6e:6b:a6:25:cb:0f:e6:c7:61:93:
55:b9:b4:86:06:83:84:53:87:e5:df:2e:1f:e3:e9:
77:75:12:72:83:a2:22:df:16:1d:02:18:3c:4f:6e:
36:4a:13:df:fc:9f:f1:ea:44:70:11:df:be:70:69:
ac:59:00:ab:32:d8:1b:e8:a0:0b:9d:f0:3c:c9:a0:
7d:61:fc:a1:22:ad:c3:89:7d:f8:0c:cb:bd:02:ac:
14:d6:58:8f:d2:ff:cf:ae:ad:ca:25:e8:98:c2:66:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4A:01:AF:F0:A2:84:84:B8:38:70:92:9F:E3:BF:DD:3F:CD:9A:FB
X509v3 Authority Key Identifier:
keyid:64:45:F3:05:93:99:69:AD:90:0D:58:DF:9A:C9:1E:7A:75:B4:31:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEXzBZOZaa2QDVjfmskeenW0MY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:94:b6:56:da:41:74:f1:2d:37:a3:04:2f:ed:8a:d0:5b:c0:
b4:eb:27:18:0a:bb:9a:14:c0:27:91:c2:bf:b9:b9:3c:d4:98:
58:86:c5:13:ec:d0:d0:0c:ef:cb:37:58:97:3c:b2:7f:af:60:
a7:fc:7c:08:7e:d1:26:9c:bb:01:e5:4a:cf:e4:12:5e:67:b4:
8e:23:2a:b5:bb:ce:e7:0b:95:bf:1f:24:bb:1c:ff:ae:67:0b:
e2:41:1c:25:e2:a2:ae:5c:d8:04:47:cb:93:ff:8f:ea:fa:83:
fe:6f:be:26:ce:75:5e:c3:a9:c2:56:5d:ec:93:4c:79:94:02:
11:23:39:e2:d0:ac:45:3a:02:4c:bf:06:af:bc:68:39:f7:6c:
a7:ac:57:73:c9:04:fe:18:89:ba:9f:b1:cc:46:9f:20:09:bd:
bf:95:ca:2f:10:a5:0c:17:36:72:8b:9c:41:28:43:3d:39:a2:
40:02:32:68:da:c2:ee:cd:4d:39:ec:b5:6e:7f:7d:5d:24:80:
42:ae:4d:46:a6:12:61:b1:fa:29:13:e8:a8:1d:47:a5:c9:00:
65:a0:ba:78:76:8b:72:b5:fd:77:27:5e:ef:b1:7e:30:f3:69:
11:34:42:73:17:c9:5f:42:74:2b:4b:68:55:d3:54:e1:8a:60:
ab:72:7e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:12:37 2025 by rpki-client