Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
File: BbiIxzyL2SyrKy9GX-Z17h9unWA.mft (raw, json)
Hash identifier: ioheDqDCxKiRc6+01QAxorF07BunMFB9aiE8FW/6S2I=
Subject key identifier: B1:AD:62:4E:81:22:7B:83:59:B3:9B:5B:40:36:E7:47:E6:AA:90:3D
Authority key identifier: 05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
Certificate issuer: /CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Certificate serial: 01995C7C0067399571161105ACEE38A09FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
Manifest number: 168C
Signing time: Thu 18 Sep 2025 11:00:54 +0000
Manifest this update: Thu 18 Sep 2025 11:00:54 +0000
Manifest next update: Fri 19 Sep 2025 11:00:54 +0000
Files and hashes: 1: BbiIxzyL2SyrKy9GX-Z17h9unWA.crl (hash: HCQtLvKkprpfWX63/Zl+YkwiTIO9XaJEKavo4BiZMK0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:7c:00:67:39:95:71:16:11:05:ac:ee:38:a0:9f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Validity
Not Before: Sep 18 11:00:54 2025 GMT
Not After : Sep 19 11:00:54 2025 GMT
Subject: CN=b1ad624e81227b8359b39b5b4036e747e6aa903d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:a2:6b:62:0c:7b:0b:7a:f5:da:dd:56:a5:
fb:b3:47:f8:e9:57:54:24:9a:58:80:55:97:39:fb:
96:de:d7:dc:9a:ac:4c:09:8f:21:58:4c:34:ef:d1:
e4:26:ae:04:3c:91:74:ce:d4:3a:9c:46:45:a5:a2:
0e:02:04:b1:85:ca:2d:19:33:e4:32:22:06:ab:ab:
43:3e:fe:99:55:4a:c9:5e:fc:98:93:51:05:f1:f1:
10:9d:23:02:c7:f1:d7:53:ff:7a:43:2f:93:9e:db:
68:48:1a:02:6e:ef:b3:b7:20:0a:58:40:39:11:e3:
02:55:6d:b4:ed:cd:a0:f0:2c:7c:dd:21:8f:04:9e:
69:09:e8:20:b4:ab:45:ce:c9:26:96:57:c8:63:86:
cb:3c:08:54:a9:88:5e:75:d3:97:0d:ac:8a:45:dc:
9c:6e:54:2b:c0:05:16:28:77:48:5c:db:fd:4e:4a:
f9:96:dc:8f:7b:f0:00:70:c7:fd:a3:35:80:26:5c:
db:22:00:a0:3e:1a:0c:e9:e3:b8:7f:91:47:fc:86:
64:22:01:99:9d:bc:61:52:89:85:2e:62:0f:43:cf:
b9:2c:52:f4:eb:78:29:8b:c6:61:1d:af:69:7d:93:
5e:71:d0:56:f7:cb:3e:59:ee:c0:d0:73:aa:b4:47:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AD:62:4E:81:22:7B:83:59:B3:9B:5B:40:36:E7:47:E6:AA:90:3D
X509v3 Authority Key Identifier:
keyid:05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b1:d2:2c:b3:10:e6:a0:53:5a:35:44:0f:35:5c:4e:1b:8c:
d0:96:f7:35:6d:07:c2:4b:9a:f7:91:cf:5a:06:0b:a9:81:da:
08:31:1d:5c:fc:7e:07:a9:5e:5a:5f:4a:42:bd:35:a8:c5:6d:
cd:2a:0b:c9:14:ad:43:43:db:ca:05:be:bf:8a:dd:cf:fd:36:
84:27:bf:64:79:2c:9b:27:61:29:77:f1:55:f2:b6:c6:0d:8a:
45:05:a4:b8:01:29:60:a0:b0:5d:ed:8b:eb:88:9a:d3:50:ca:
c1:c0:63:4f:55:79:40:34:66:f0:35:de:d7:7e:dd:c1:2c:82:
14:14:f9:fe:d6:23:23:04:d2:e5:57:86:b0:42:ed:e8:3b:04:
b0:ff:b6:ff:1d:b4:cb:52:13:7b:5e:b4:c5:a5:66:59:ab:9c:
db:1c:c8:71:be:0e:5b:c4:02:83:19:fc:52:9b:fa:ed:a7:96:
bd:1c:45:ba:78:3e:56:3a:e5:2e:11:75:89:b6:4e:d1:49:37:
a3:93:44:62:37:46:2f:96:97:60:d6:41:88:0f:7f:d8:03:07:
56:a3:34:2b:01:10:39:f5:b3:c9:1a:cf:0e:8f:00:18:5a:b3:
d1:11:0e:84:f2:8f:ab:ca:a7:ec:02:08:ec:a9:42:4f:9d:4a:
ab:69:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:30 2025 by rpki-client