Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
File: jWLdvflYu0uYPali7PA76u441Ek.mft (raw, json)
Hash identifier: jRQqMrWD/GtZRfLdli6ICJEfSChHu3kCOuiLuc5CU6k=
Subject key identifier: BE:F9:56:D5:C6:19:47:14:32:BD:FC:E8:E1:5B:6B:91:92:6B:8C:EC
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Certificate issuer: /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial: 0199093A691F2AE6B72ABB9D96345A954132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
Manifest number: 1666
Signing time: Tue 02 Sep 2025 07:00:46 +0000
Manifest this update: Tue 02 Sep 2025 07:00:46 +0000
Manifest next update: Wed 03 Sep 2025 07:00:46 +0000
Files and hashes: 1: jWLdvflYu0uYPali7PA76u441Ek.crl (hash: ly4XkdvqK47sRakxPk4WS4ZWKSPLSMGfq1jgae5Nu9I=)
2: s34MRUBBXAv4etz_rjf1ivNvKl8.roa (hash: 0Raiu10MwJUtSZKphwMI3EWBFXIoAne26av2cOWMQx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:3a:69:1f:2a:e6:b7:2a:bb:9d:96:34:5a:95:41:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Validity
Not Before: Sep 2 07:00:46 2025 GMT
Not After : Sep 3 07:00:46 2025 GMT
Subject: CN=bef956d5c619471432bdfce8e15b6b91926b8cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:10:6f:e7:d5:fb:9b:b9:c6:fc:39:34:a7:
71:e0:88:2b:d6:a9:7c:98:aa:10:74:ca:e0:3f:3c:
b7:5f:46:3b:51:d6:e1:c4:90:2c:ec:cd:7f:71:51:
6a:15:88:5f:63:5c:ad:22:06:f0:92:96:e1:13:68:
e4:cc:eb:d7:e2:68:35:b2:9c:bf:b7:a4:65:50:33:
98:d6:82:fc:04:e5:75:b0:e7:ee:9e:51:86:ec:a3:
cf:30:95:39:67:ca:bf:12:29:e0:47:bb:79:9d:3f:
04:ea:a9:af:3a:5f:8b:4d:4c:34:91:09:da:6f:20:
ee:31:27:d5:a6:00:bf:02:39:88:25:b6:b4:90:f7:
c0:68:23:70:a2:b7:9f:58:2c:b6:2c:f7:d3:49:9f:
be:ac:ac:5b:a9:cf:a4:5b:ec:fe:9e:5d:89:34:89:
4a:ec:3b:07:de:c9:9d:7a:37:ce:20:32:3f:3b:90:
e0:86:33:54:75:ff:0a:60:f0:9f:a1:23:d8:ad:76:
30:80:ca:72:17:3f:c7:8c:ca:78:f8:bd:81:dc:9f:
d8:c2:98:ae:31:9e:bd:0f:6e:57:f5:ea:c3:ba:6a:
dd:4e:b6:55:51:a6:7c:63:c1:3c:dc:69:b6:df:9a:
e6:5a:5b:da:18:f5:29:3c:65:60:8a:5c:50:45:79:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F9:56:D5:C6:19:47:14:32:BD:FC:E8:E1:5B:6B:91:92:6B:8C:EC
X509v3 Authority Key Identifier:
keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c0:e4:12:05:1a:4a:b7:f0:b2:97:93:9f:54:9c:b8:28:7a:
81:bf:7a:ca:3b:16:86:7d:49:68:c3:94:b1:a3:9d:93:ae:ab:
b6:e0:1d:d9:13:9d:1a:10:74:42:73:42:51:d3:04:9b:7e:f2:
dd:c1:b1:d8:8c:4f:32:13:b0:4d:da:64:09:af:60:b8:37:dc:
db:01:ae:73:5f:81:e7:ae:99:5f:48:44:8b:f6:db:c8:4a:be:
45:6d:c7:ae:c3:da:98:48:f1:b8:e3:b5:2d:22:3b:b6:29:9c:
ff:95:37:2f:de:fe:d7:bd:7e:4c:03:25:ae:80:5a:eb:85:be:
ef:83:cb:97:4b:12:9e:a2:29:ad:8d:c8:28:e9:8f:f8:0e:8d:
43:0b:24:f2:91:e5:b4:43:05:d9:b2:48:f5:78:8c:b3:cc:5a:
0b:6f:21:94:d2:22:77:58:64:67:e9:b9:96:65:d7:d1:18:e7:
5f:99:e0:d7:a4:da:b9:e9:25:c5:1b:2e:ad:47:0d:c2:cf:51:
52:92:91:ec:40:f0:3b:b7:6a:61:c2:a5:b3:22:4d:5d:c4:11:
be:b4:71:7d:e5:95:74:29:b4:de:fd:f0:4e:b8:e9:7a:cf:fc:
ea:6a:d8:19:82:3f:a2:69:54:35:8b:f1:62:17:a6:08:77:90:
23:13:fa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:38 2025 by rpki-client