Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
File: iW1QqxLax1eoUX-YnnMXJVoUfFA.mft (raw, json)
Hash identifier: Cw0fHabBECXgqpZTC4SXmVFfguupeh3bi6+YesoW02Y=
Subject key identifier: 33:D5:B6:9D:9C:17:D2:1C:C9:EA:9C:0D:77:AF:A0:5D:47:ED:B6:60
Authority key identifier: 89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
Certificate issuer: /CN=896d50ab12dac757a8517f989e7317255a147c50
Certificate serial: 01994BF5C86EE68CFFBFC31D8BAFFAA10D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
Manifest number: 0900
Signing time: Mon 15 Sep 2025 06:00:22 +0000
Manifest this update: Mon 15 Sep 2025 06:00:22 +0000
Manifest next update: Tue 16 Sep 2025 06:00:22 +0000
Files and hashes: 1: B38rRSPWErqXfPx0DzWgKIR_ZF4.roa (hash: 3ngIsupMWcvGfbEOZowjuSpsq4xSUo0YoDqyx3tWI8Y=)
2: iW1QqxLax1eoUX-YnnMXJVoUfFA.crl (hash: W1nvn/kFop95bf4EUHCH9qjrNxdakoan8fJoJlOHl7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4b:f5:c8:6e:e6:8c:ff:bf:c3:1d:8b:af:fa:a1:0d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d50ab12dac757a8517f989e7317255a147c50
Validity
Not Before: Sep 15 06:00:22 2025 GMT
Not After : Sep 16 06:00:22 2025 GMT
Subject: CN=33d5b69d9c17d21cc9ea9c0d77afa05d47edb660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:17:93:e8:ff:02:cc:87:96:2d:4f:14:2d:
97:96:6b:60:fd:da:89:d5:b1:48:19:d6:3f:10:2b:
f3:e6:87:7f:8f:29:61:2c:23:f5:e2:f4:36:09:b4:
1f:0d:66:bf:24:44:4b:0f:d4:37:5e:60:21:96:f3:
a3:a3:49:59:fa:4d:6f:59:be:95:33:c8:66:57:dc:
68:2a:f1:71:85:29:59:fa:29:55:82:06:18:45:35:
07:7e:5a:37:d6:4e:7b:38:1c:5c:1e:87:0d:6f:2b:
e5:c8:ef:63:ad:0b:c1:75:f5:83:0f:79:cd:fe:0c:
0c:79:0c:e0:bc:ba:d0:5b:10:16:96:5f:f4:b1:ca:
8d:8e:62:01:3c:8e:3d:e8:ae:c7:56:68:65:5f:1f:
1c:ee:57:3a:3a:cc:f5:3b:3e:65:2a:6e:3c:63:7c:
ef:45:44:2c:58:58:66:4b:80:12:e9:6f:82:95:b3:
a4:1c:5f:07:d8:3b:1e:c4:93:c1:0d:63:e5:35:bb:
85:95:0b:19:ce:c9:5e:88:81:f4:1d:0c:70:c3:65:
00:af:00:58:73:f5:2d:4c:03:59:91:07:50:82:8c:
f5:f9:f5:26:c5:2c:88:a6:7a:b8:93:5f:6b:4e:c8:
e0:99:70:ff:dd:6b:6c:90:94:90:5e:ea:20:a9:1a:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D5:B6:9D:9C:17:D2:1C:C9:EA:9C:0D:77:AF:A0:5D:47:ED:B6:60
X509v3 Authority Key Identifier:
keyid:89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f7:c0:4f:ab:2f:b3:7c:37:99:a8:db:3e:9c:c6:48:08:d0:
e9:0e:56:c7:52:cf:5d:0f:d0:5e:5d:1d:e3:e4:0a:be:69:27:
8f:e1:3d:41:1d:73:c8:4f:12:86:e4:5b:93:e3:eb:cd:bd:dd:
b4:b0:2a:be:c4:d2:93:4e:09:2f:fe:15:67:5c:7d:b8:4c:71:
e3:a9:4f:f9:5f:d5:3c:19:a3:44:02:f7:19:84:14:0c:f1:80:
e7:f9:87:9a:05:d5:c3:46:9a:df:82:55:c1:5e:86:2d:13:db:
93:49:77:8b:9b:fc:cb:fd:e3:94:88:07:c5:66:2e:57:11:c6:
78:64:01:3a:bf:d6:47:7d:5d:0b:a1:4e:d5:ac:d8:90:59:77:
ee:d9:74:0f:11:9f:e4:32:6a:d6:46:a7:8a:02:14:bc:f2:87:
d6:f6:2b:66:22:12:14:1b:f2:00:4e:bd:29:4f:7a:e1:e1:94:
17:7d:72:6b:63:03:c3:73:46:65:fc:1b:03:60:e1:70:3a:df:
09:7e:3f:1b:e9:fd:a1:26:6e:30:f8:d5:20:79:19:b3:fc:ab:
23:fe:d4:b0:28:2f:23:ff:87:5e:ba:0e:ed:19:1b:17:42:1a:
b7:8f:f6:dd:46:ff:2c:b9:9b:7d:14:4d:bd:d4:c4:fc:cc:38:
a8:03:ff:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:15 2025 by rpki-client