Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
File: lwVGLL_Idkd35toxtZXXzL_jgkM.mft (raw, json)
Hash identifier: LKh4WrUNHVgdZfodu03zdFyjRDwtoGFzc/mzwGIYUR4=
Subject key identifier: 1A:73:98:44:17:6A:AC:6B:16:54:A0:41:32:AD:9B:40:63:20:85:05
Authority key identifier: 97:05:46:2C:BF:C8:76:47:77:E6:DA:31:B5:95:D7:CC:BF:E3:82:43
Certificate issuer: /CN=9705462cbfc8764777e6da31b595d7ccbfe38243
Certificate serial: 01984EC2C812877DA132C3369381A1F5C3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 02:00:44 +0000
Manifest this update: Mon 28 Jul 2025 02:00:44 +0000
Manifest next update: Tue 29 Jul 2025 02:00:44 +0000
Files and hashes: 1: lEI_MOdsZG2OMiuHNjhGSX3G2Ww.roa (hash: WZPve5/FqG40sOt1irS1yUXHzP/enqPHMB84PLUtsCU=)
2: lwVGLL_Idkd35toxtZXXzL_jgkM.crl (hash: +jtpzFV2qT54JuU/MnSb9mjCVC72P3jbJSosDABrrvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:c2:c8:12:87:7d:a1:32:c3:36:93:81:a1:f5:c3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9705462cbfc8764777e6da31b595d7ccbfe38243
Validity
Not Before: Jul 28 02:00:44 2025 GMT
Not After : Jul 29 02:00:44 2025 GMT
Subject: CN=1a739844176aac6b1654a04132ad9b4063208505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:50:4f:4a:0d:19:5b:24:3b:2d:53:93:1c:eb:
f7:73:bd:3c:a9:6c:dc:36:91:d9:be:a7:23:f7:76:
ab:f7:66:fa:df:96:49:63:21:f7:87:47:6f:a0:00:
4f:c5:90:a2:11:7a:8a:f8:8a:30:10:df:77:d4:56:
fb:d3:c2:63:e9:83:2b:97:e2:75:38:05:ce:2a:69:
e9:1b:18:4c:bc:4f:20:48:ce:2a:3a:92:de:0b:d6:
a4:51:d2:ad:87:1e:fe:00:26:04:44:42:ba:28:f3:
56:d6:f5:53:91:13:0e:84:e1:49:9b:14:39:63:56:
ae:7f:9a:ca:1c:38:5a:27:eb:11:52:b7:ec:a9:03:
50:97:93:cc:79:c5:45:b4:1c:7f:47:7d:d9:eb:62:
0f:c2:14:8a:60:97:c3:c0:71:16:03:e9:ae:34:53:
fd:37:d6:b3:e4:3d:df:79:8f:dd:4b:69:bd:10:81:
c7:95:43:b7:f7:74:40:7c:e5:48:60:50:5e:d1:3e:
1b:4f:e7:94:77:d8:17:f6:17:37:ba:c6:8b:8b:33:
9e:3b:c7:61:38:2b:e9:10:29:6b:82:58:56:77:2c:
9d:fb:92:62:0d:03:6d:d4:7a:f9:ff:ef:c7:63:ec:
ed:96:f2:67:0d:dd:e7:60:ad:a5:05:44:af:7a:0a:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:73:98:44:17:6A:AC:6B:16:54:A0:41:32:AD:9B:40:63:20:85:05
X509v3 Authority Key Identifier:
keyid:97:05:46:2C:BF:C8:76:47:77:E6:DA:31:B5:95:D7:CC:BF:E3:82:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:55:1e:2d:da:6b:c1:62:50:51:b1:ee:7f:c5:4c:d7:98:24:
8c:21:4b:a9:f5:13:70:13:e1:1a:5f:2d:8f:fb:86:38:aa:97:
3d:82:e0:14:47:a0:ff:15:36:71:36:df:49:2f:0d:35:3b:9d:
20:f1:5d:3b:8d:8e:a4:9c:ef:c0:c7:8c:6d:e7:f1:d0:16:08:
4e:5a:50:5d:ec:05:20:72:5c:b6:98:25:d7:33:94:94:a8:b9:
d7:19:81:e9:5b:3e:b3:99:ad:5d:5c:72:66:b8:19:25:77:11:
79:52:33:aa:89:79:8a:7e:cb:a7:13:37:b8:f5:c7:d5:0b:52:
5d:1e:bd:92:4f:db:29:bf:93:17:10:92:7a:91:28:50:81:7b:
46:70:21:3e:cb:ad:b0:d3:f7:1d:05:c6:a7:06:ed:a9:01:99:
a2:72:a5:ef:91:c5:ec:bf:5a:c0:a2:6c:cd:30:33:3a:38:1e:
b3:69:b5:75:19:37:7e:71:c5:b6:cd:07:7c:63:45:1d:19:51:
d3:84:76:b0:c5:9e:af:4e:ca:99:6c:42:2a:d4:a0:88:26:b6:
06:ce:84:c3:99:ae:88:a1:84:aa:33:64:92:bb:b8:9d:86:ff:
82:a2:2d:93:25:05:70:be:46:e5:4a:4f:b5:2b:e5:d7:d8:33:
37:27:54:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:22:08 2025 by rpki-client