Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
File: UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft (raw, json)
Hash identifier: Smx1E4O3ZTpcL71tu9/DUBcNmGNo+FApyvU99BgQkyE=
Subject key identifier: E4:40:9F:3E:1E:B1:8E:75:68:82:DE:16:4A:78:A1:84:B4:EA:64:3C
Authority key identifier: 51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
Certificate issuer: /CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Certificate serial: 01997F3EB8329BD688922BD60AAAD8A2B0FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
Manifest number: 1631
Signing time: Thu 25 Sep 2025 05:00:40 +0000
Manifest this update: Thu 25 Sep 2025 05:00:40 +0000
Manifest next update: Fri 26 Sep 2025 05:00:40 +0000
Files and hashes: 1: UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl (hash: qFaWjyoKbrXRC44pFnfGbMp1CSgLBByKXlMSbFrM2k8=)
2: w9u-iq9HQmmSpA58usBGj5VWpns.roa (hash: ebZ703D4CGF85tWdcmJd8B3P1oiiNNvM6TpGRigzvuk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7f:3e:b8:32:9b:d6:88:92:2b:d6:0a:aa:d8:a2:b0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Validity
Not Before: Sep 25 05:00:40 2025 GMT
Not After : Sep 26 05:00:40 2025 GMT
Subject: CN=e4409f3e1eb18e756882de164a78a184b4ea643c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:35:45:9a:60:5a:59:97:77:d9:bf:58:35:
1a:ee:86:16:f1:49:dd:74:11:b7:6e:26:b2:2a:6c:
78:d8:f9:f3:c1:b6:fd:52:1a:1a:59:e0:84:f7:89:
04:56:07:75:74:3a:f2:96:08:9f:f7:6c:ed:1b:23:
f2:68:16:28:90:f7:2a:1f:eb:da:eb:b6:86:ce:a8:
b7:80:eb:93:59:30:1f:0a:af:de:5b:68:f6:42:ce:
ba:39:70:18:89:f6:18:3a:be:da:bf:cd:95:c5:68:
d2:1e:67:9a:ba:f7:97:8b:39:b7:c8:05:1f:f2:23:
2a:85:22:b4:97:83:36:7c:1d:4d:c1:5b:80:80:7d:
3c:e6:dc:30:24:53:55:e8:f6:36:5e:01:d4:9e:99:
25:14:ae:6a:f1:03:fc:08:89:ab:3b:78:06:9a:07:
51:63:63:30:c7:0b:5e:1a:2d:30:6c:59:96:2d:7f:
3d:06:2d:10:b0:21:98:7d:a3:99:07:79:7a:24:4f:
15:4a:94:04:e0:7d:a5:b1:fa:d8:7d:4f:9b:60:45:
46:90:ff:a9:27:5f:57:99:f1:be:58:f2:20:7b:77:
4a:1b:ab:71:1f:2d:d5:da:72:98:57:15:dd:91:b8:
e0:87:1c:cd:65:cc:f5:17:e6:4e:34:e0:72:67:b8:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:40:9F:3E:1E:B1:8E:75:68:82:DE:16:4A:78:A1:84:B4:EA:64:3C
X509v3 Authority Key Identifier:
keyid:51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8b:bb:65:d5:32:b4:a5:27:18:7c:39:fd:0d:a1:65:31:e9:
a6:96:07:90:3b:70:53:52:e0:6c:34:eb:c5:80:a4:3f:01:3d:
12:98:22:66:51:eb:1f:b7:23:74:8e:38:6d:23:a1:9f:5b:fc:
c9:cd:e6:e5:cb:aa:55:12:f3:d4:e4:f2:4b:7e:4e:60:44:01:
5a:14:cb:b4:38:9f:b3:94:7e:a5:49:db:72:16:aa:ef:21:2f:
d7:e5:07:22:f8:c1:5d:01:b6:75:1e:39:2c:5c:a7:42:a3:90:
07:21:40:bc:1e:79:b7:ec:8b:c7:6c:f1:6d:be:57:f4:a7:85:
8e:5c:aa:11:fb:b7:65:e3:a1:26:55:83:b4:70:5f:7d:ea:3a:
59:01:00:18:c5:e9:93:81:e4:e3:8b:29:61:c2:36:97:9c:28:
33:e6:d8:ff:b8:0f:a6:a7:0a:73:f1:62:04:69:d6:cb:32:98:
1c:8e:64:f7:6a:60:60:7f:de:1e:73:ed:74:86:1a:89:0e:c1:
52:ae:86:84:6d:c0:50:13:03:3d:e5:02:28:d1:61:b0:13:c8:
25:0b:a5:fa:97:2d:53:8c:86:a8:62:fc:83:d4:53:97:df:63:
a0:25:75:ff:86:f3:8c:3d:4a:e3:c3:43:31:0b:23:19:a8:ce:
5c:7b:59:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:53 2025 by rpki-client