Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
File: aQvbGIma-yf-H_eAUW_MC5PIuA0.mft (raw, json)
Hash identifier: G+3z/kSrXZGf/0qhlcMw/qNK2V5D+pNzMmkdecEr7z4=
Subject key identifier: D8:E4:A8:C9:C4:08:61:46:40:11:A4:85:84:62:EB:3D:FF:1F:8C:E3
Authority key identifier: 69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
Certificate issuer: /CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Certificate serial: 019984D2ABAF2855B71B0C0FA68117FF446C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
Manifest number: 082C
Signing time: Fri 26 Sep 2025 07:00:22 +0000
Manifest this update: Fri 26 Sep 2025 07:00:22 +0000
Manifest next update: Sat 27 Sep 2025 07:00:22 +0000
Files and hashes: 1: 5qlyqHqHN9fm7YIJbWQAFC8mvBE.roa (hash: i7ncddTAht6A90LZTtfDRpJSDX/ZI6t1vgckOHtmIjg=)
2: aQvbGIma-yf-H_eAUW_MC5PIuA0.crl (hash: QE3N2RP3fpTBx+ekE9OPM4N+rWpTwgkmZXz8pBcG65w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:84:d2:ab:af:28:55:b7:1b:0c:0f:a6:81:17:ff:44:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Validity
Not Before: Sep 26 07:00:22 2025 GMT
Not After : Sep 27 07:00:22 2025 GMT
Subject: CN=d8e4a8c9c40861464011a4858462eb3dff1f8ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:f0:80:d7:4d:6f:bb:80:74:c2:40:20:e8:
d9:50:a9:16:8a:32:99:79:2d:e3:17:96:e4:92:b6:
ba:93:15:24:2f:e1:6f:d9:3c:c4:27:38:e8:dc:55:
41:ed:bf:bf:21:93:55:8d:78:e8:8b:b4:be:ec:e9:
ac:63:f4:aa:b7:48:4c:02:ae:a0:84:b8:c8:fd:82:
17:8e:3d:39:35:e4:79:89:02:a6:ca:f6:86:b5:c8:
13:cb:4c:9b:23:75:57:9a:72:c7:4b:dd:0c:4d:b9:
d3:6c:0f:e7:ae:17:19:57:4c:52:6d:a2:78:79:ef:
29:96:71:a1:c0:3a:2c:55:3a:40:39:87:c1:81:2a:
5f:1c:dc:40:aa:9b:e6:32:59:d9:0a:cd:55:84:29:
b1:38:87:a3:17:29:63:7a:3f:10:7a:f5:94:12:c0:
59:af:7c:8d:e6:32:50:33:95:15:37:d1:db:0f:7a:
46:17:8d:9c:3e:f0:61:b1:0f:f9:d4:33:4a:a2:b4:
b0:94:16:86:46:2c:94:0e:8a:e5:97:14:fb:36:35:
e6:ff:91:10:58:76:d4:16:44:09:51:4d:f0:a2:8c:
f7:a1:34:0b:9e:67:6a:7a:1e:2b:cf:70:df:1f:37:
60:21:49:9f:e9:00:f6:28:d5:bb:4d:e0:60:84:ca:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E4:A8:C9:C4:08:61:46:40:11:A4:85:84:62:EB:3D:FF:1F:8C:E3
X509v3 Authority Key Identifier:
keyid:69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1e:e7:ce:56:e7:a7:6b:39:90:a5:3f:c7:f1:17:20:4a:db:
97:3e:29:fe:02:c2:18:c4:4a:48:c0:9e:ed:b5:39:ba:bb:b4:
04:2a:dc:1c:03:7d:c4:c2:dc:f6:3e:e1:55:8e:34:f1:87:f2:
c3:92:53:9a:34:03:72:2b:ec:41:b1:cb:33:4f:b1:fe:a3:dd:
f6:f2:ec:0a:a3:b5:ae:3c:75:b3:ad:4c:fe:2b:73:c1:76:b8:
06:ee:a3:5f:a8:ec:dc:81:0a:2b:ae:dd:0b:89:34:50:3a:1e:
28:51:71:1a:9d:02:7b:03:e6:46:b9:1f:4f:30:66:be:9c:ab:
36:62:5e:a3:6a:d1:19:ef:d7:c2:0e:cd:54:d2:5a:3a:0a:d2:
eb:5f:de:fe:a2:01:d0:76:7a:f2:dc:14:da:8b:a9:ae:7f:28:
67:b2:17:1c:cb:c6:b3:6e:38:52:b3:22:b8:cf:f9:01:31:1b:
b7:82:b5:b1:ab:a8:43:40:e5:c5:07:e9:e5:ad:dc:cd:8e:fa:
45:fd:4e:4d:44:f6:26:94:6c:1d:cf:18:43:f1:c3:4e:ee:ab:
67:be:25:fc:3a:d1:0b:68:04:48:83:10:80:bc:4c:8c:74:b4:
f9:50:25:b9:13:46:10:0c:31:a9:05:16:ee:5b:60:04:69:bd:
de:f0:b6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:15 2025 by rpki-client