Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
File: qBVYhT_rx52BPrLAzly3NvtzwN8.mft (raw, json)
Hash identifier: HFdkj+IwxVIWouGh3zywc8rN537++fCQzJ1YbXkLCnc=
Subject key identifier: 68:46:E5:3E:53:A9:92:78:C3:88:B6:21:42:5C:45:FE:4B:DD:01:E1
Authority key identifier: A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
Certificate issuer: /CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Certificate serial: 01989DBA3C8C19254E5E3718BEEF8F55C35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
Manifest number: 13D4
Signing time: Tue 12 Aug 2025 10:01:24 +0000
Manifest this update: Tue 12 Aug 2025 10:01:24 +0000
Manifest next update: Wed 13 Aug 2025 10:01:24 +0000
Files and hashes: 1: LgqWUP0536hPg5BCpisRq1CfwzE.roa (hash: vMIIsO4xKqj7JGP30ELt6Q8iCAR8hVZNP/9djB0t8ro=)
2: dJRAHiOGAXHi9ZK3B82VqToDqnk.roa (hash: uJbxE7UmTFUvOg3MJeibMc8I9N/6ZLAzoiFFQ1kOB8U=)
3: qBVYhT_rx52BPrLAzly3NvtzwN8.crl (hash: RS9vFXoL2dA/0jjpdM58qgMs0rgPxzD4Qm2z/ww6pB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:ba:3c:8c:19:25:4e:5e:37:18:be:ef:8f:55:c3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Validity
Not Before: Aug 12 10:01:24 2025 GMT
Not After : Aug 13 10:01:24 2025 GMT
Subject: CN=6846e53e53a99278c388b621425c45fe4bdd01e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:cd:a2:2a:02:88:9c:a4:71:f6:de:25:1b:
13:40:9f:8d:b4:3d:99:67:08:de:d5:24:4d:8c:ce:
6a:6b:2d:45:9a:c3:e2:cd:31:5b:fe:01:62:6d:c5:
07:5b:22:c3:4b:dc:ae:91:dd:73:39:96:f3:35:47:
78:91:1a:2b:68:8f:26:74:89:0b:93:d7:5b:25:fc:
91:8f:6a:15:13:df:e8:54:05:02:5a:78:44:0b:58:
fa:99:e6:77:c7:68:ad:98:32:59:df:45:59:29:85:
19:2c:9a:2c:38:a4:a6:b3:77:a8:27:16:8e:e4:cf:
68:a2:2e:f1:25:1d:72:4f:85:c1:41:81:89:da:97:
ce:26:1b:d5:d1:63:ea:0c:eb:99:e5:f1:0b:7a:7c:
9a:c7:94:5f:cf:c0:d3:6e:9e:55:7e:7e:38:f9:58:
83:94:ec:15:f7:7c:4c:25:0c:ed:df:23:6b:6e:0e:
06:bb:81:7a:4b:a3:85:53:06:58:2c:3c:e4:d5:c8:
89:d7:36:7e:cc:d5:7d:a3:12:ce:0d:0a:80:00:a5:
b1:2d:51:ad:53:04:25:79:5a:a2:a6:69:be:5e:9e:
81:b0:df:bd:bc:bc:27:94:29:e6:52:0c:ba:5c:8c:
ac:1a:f2:83:2a:a6:1e:2d:56:6e:7e:fe:34:57:11:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:46:E5:3E:53:A9:92:78:C3:88:B6:21:42:5C:45:FE:4B:DD:01:E1
X509v3 Authority Key Identifier:
keyid:A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:25:96:3d:bc:af:15:8c:fd:77:38:1b:56:4b:4f:cc:04:2f:
f9:c2:36:38:c7:ac:6e:f9:9b:17:c1:ce:12:06:61:1a:1e:34:
ee:01:11:2a:c0:93:e6:7b:f8:59:71:2a:f1:c4:ea:f6:3e:b0:
66:8b:80:be:65:d9:a1:52:a7:04:77:82:6e:73:8c:04:23:2e:
8f:40:67:86:65:16:93:f6:b8:47:22:d4:1a:02:bf:2c:53:6d:
e4:80:1a:8c:bd:3d:b9:7d:90:80:c6:11:2f:41:9e:0b:7c:05:
41:0a:5c:d2:96:a7:b4:00:a6:63:39:21:6c:43:f3:13:c7:b9:
e5:b9:61:32:1a:5d:3f:6f:79:bd:4d:6c:70:76:b3:84:9b:a0:
49:7e:aa:92:08:87:38:7a:ae:8b:48:3e:a8:36:21:d1:e5:74:
39:39:a9:4a:57:a6:41:3d:f7:45:e3:e6:7b:f7:ea:c7:ca:77:
ea:92:47:0f:b9:11:aa:ed:ae:f9:20:e7:94:c9:dd:50:41:08:
2c:7c:bb:74:3b:98:b4:00:ce:69:d1:30:02:d7:4a:d6:d6:0c:
d6:e2:31:aa:99:82:23:75:36:d1:10:eb:7b:95:9a:cf:ef:46:
aa:62:bd:9d:2f:76:35:e1:03:8a:1a:a6:d9:f5:47:31:bf:c1:
bd:11:60:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:50 2025 by rpki-client