Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
File: fh10krjoNfLk4q3k0sVNqat4r4w.mft (raw, json)
Hash identifier: Z8fBbpCMB3SfT45Xwzd74AusRmNgH9jvxSImVyw/Xb4=
Subject key identifier: DC:AE:30:EC:1F:CE:F6:62:FD:2C:F4:C0:BE:28:0B:D2:15:1B:E6:B1
Authority key identifier: 7E:1D:74:92:B8:E8:35:F2:E4:E2:AD:E4:D2:C5:4D:A9:AB:78:AF:8C
Certificate issuer: /CN=7e1d7492b8e835f2e4e2ade4d2c54da9ab78af8c
Certificate serial: 0199A45DE2B6582361128787FBC14016837B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fh10krjoNfLk4q3k0sVNqat4r4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
Manifest number: 080C
Signing time: Thu 02 Oct 2025 10:00:40 +0000
Manifest this update: Thu 02 Oct 2025 10:00:40 +0000
Manifest next update: Fri 03 Oct 2025 10:00:40 +0000
Files and hashes: 1: PgE9BW67Hzl1H_iUdCM9hiaWebE.roa (hash: /s5fkdZBUcDDsN3IZL7N+u3huKwHv5y1+anQQJEUKPw=)
2: fh10krjoNfLk4q3k0sVNqat4r4w.crl (hash: 8LJ41apBATkrlBjwTfhpD3rIcxtEOrQ1U0PhHzGirhM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:5d:e2:b6:58:23:61:12:87:87:fb:c1:40:16:83:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1d7492b8e835f2e4e2ade4d2c54da9ab78af8c
Validity
Not Before: Oct 2 10:00:40 2025 GMT
Not After : Oct 3 10:00:40 2025 GMT
Subject: CN=dcae30ec1fcef662fd2cf4c0be280bd2151be6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:71:53:e0:6c:79:08:a1:49:a9:d6:b4:ea:
a9:77:ba:2d:a9:ec:8e:f2:66:24:95:96:32:f9:a0:
e0:a6:2d:82:0d:4f:c7:77:f1:ff:e9:69:12:e1:cf:
80:62:2b:63:e9:27:67:5b:d9:de:fc:ca:0c:b4:54:
3a:9a:04:19:26:57:ed:70:a0:13:fb:21:19:bc:1f:
65:31:16:50:55:ed:34:5f:c5:4a:5b:c8:ef:f9:82:
aa:28:fe:2d:da:e8:c8:23:4a:78:fc:8f:74:e5:48:
1e:2f:bb:da:20:c7:0f:27:fa:40:75:48:ef:57:aa:
88:9e:42:c8:a1:99:4e:de:e0:fb:77:29:d4:8c:1e:
fc:2b:4c:9b:7b:83:a2:0f:72:eb:cd:6d:4a:ed:20:
7c:db:e2:d3:a4:40:f3:cc:b0:69:5c:61:d0:69:da:
60:f7:61:44:00:c2:69:cc:6d:f0:6a:ca:6b:44:d2:
b5:69:7f:2d:44:98:7e:77:29:a9:0e:56:a7:e1:4f:
69:02:ad:5d:25:c3:b2:92:9d:58:71:f2:4d:98:9e:
17:21:f4:e4:e7:3c:f3:0e:3d:3a:8d:24:28:3a:a5:
d9:06:fa:bb:e3:7b:04:e5:f6:cc:c9:22:e1:ce:14:
d0:ad:5a:40:6d:bf:89:db:86:d5:d4:1b:20:b4:1f:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AE:30:EC:1F:CE:F6:62:FD:2C:F4:C0:BE:28:0B:D2:15:1B:E6:B1
X509v3 Authority Key Identifier:
keyid:7E:1D:74:92:B8:E8:35:F2:E4:E2:AD:E4:D2:C5:4D:A9:AB:78:AF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fh10krjoNfLk4q3k0sVNqat4r4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:91:7d:cb:e5:de:6b:04:70:55:3a:af:7a:b1:fd:a0:0c:82:
48:fc:d7:6d:65:0d:ce:1f:1c:cd:fd:6a:ee:4a:12:f4:90:eb:
48:3d:aa:0a:a3:b9:be:62:37:06:50:88:f3:8e:e5:f4:84:1b:
15:49:e8:f8:a8:e5:aa:46:6e:91:c9:23:bb:e2:c0:75:2f:2a:
fd:bb:f2:26:44:6c:d2:cc:cc:b3:ea:3a:83:15:77:da:62:78:
6d:a1:33:e8:72:75:ff:e3:fd:8c:c1:f1:4c:a5:0b:cc:3a:8c:
ae:6b:ec:6b:44:e3:0c:d6:e9:93:e8:af:18:20:67:2c:a7:38:
00:11:a9:72:0e:db:89:84:99:4d:da:62:9b:3e:fc:ec:b1:9c:
5a:13:c4:b8:1e:75:b2:ef:f0:5c:0d:7c:c5:3d:c9:1f:6c:a3:
eb:b7:a7:c9:e9:a9:73:bd:7f:f2:dd:2c:d8:46:a9:4a:da:69:
df:01:ba:6c:ef:46:76:6e:06:11:ae:88:e8:7e:0a:91:45:ee:
6e:5c:b1:0f:31:fd:8d:7d:81:2a:6c:1d:43:65:5c:76:52:6f:
1d:68:fc:07:ef:1a:2e:d3:df:04:4c:55:a5:0c:86:74:de:ea:
95:91:87:1f:07:68:95:32:95:52:74:2a:cb:af:48:82:27:24:
b1:b4:40:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:19:07 2025 by rpki-client