Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
File: a3-gXmtNilEpRAdQTZZBrT4CBD8.mft (raw, json)
Hash identifier: kuuMA/yMtk6Sdlxx/TFvWgjLAkUgf0yMHUXdi5EZTg8=
Subject key identifier: DD:5F:87:60:55:39:E4:DA:6D:8D:31:7B:6B:BB:24:F3:27:15:4B:3B
Authority key identifier: 6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
Certificate issuer: /CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Certificate serial: 01979A4CDF37CD336E3C681D31F04624F9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
Manifest number: 0F1E
Signing time: Mon 23 Jun 2025 01:00:18 +0000
Manifest this update: Mon 23 Jun 2025 01:00:18 +0000
Manifest next update: Tue 24 Jun 2025 01:00:18 +0000
Files and hashes: 1: B2d2juf7uKwnCru3ZiDDoYOXciY.roa (hash: 82W2phd9aqBUTlWrD81GDTCzzKIr5I7VokuYsIuKW0U=)
2: a3-gXmtNilEpRAdQTZZBrT4CBD8.crl (hash: GcvW4rpkiyX6qJQ2/iqj9GR6uuqlOb5e0TLbUZ7Ljpg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9a:4c:df:37:cd:33:6e:3c:68:1d:31:f0:46:24:f9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Validity
Not Before: Jun 23 01:00:18 2025 GMT
Not After : Jun 24 01:00:18 2025 GMT
Subject: CN=dd5f87605539e4da6d8d317b6bbb24f327154b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:bf:08:d8:40:62:b7:36:67:23:3d:4b:86:
7f:99:91:10:6b:0c:c7:e2:3c:98:64:cd:c3:9b:9e:
d7:42:7c:e5:77:76:21:c4:51:18:29:b2:9a:5e:38:
ca:04:1b:dc:f9:d5:c0:b3:d7:be:9f:69:3c:12:27:
d8:c4:7a:fe:6d:57:17:f2:af:eb:5a:40:1a:e9:7a:
52:98:1d:b2:9b:44:0d:6e:d4:f8:ce:8f:10:64:03:
f2:44:d5:27:77:18:3d:e9:52:cc:5e:ed:03:b0:f3:
a3:a8:93:dc:21:c4:6a:f0:fc:bd:72:98:bc:ca:3f:
02:e5:84:2b:6b:0f:28:18:d8:ae:90:69:9e:14:c7:
2c:85:38:f3:33:63:a4:3c:83:ef:31:5d:3a:42:c4:
f4:10:b3:04:f9:6a:39:9d:c8:e9:98:ce:43:02:27:
e6:31:6f:93:fc:5b:0d:6b:80:e6:0e:6f:f2:9a:19:
d4:e5:a6:d3:d8:c0:d5:22:c2:9a:72:2c:52:66:c7:
e2:29:e2:2e:4d:c5:d3:00:83:f7:01:bc:7f:e4:e0:
ef:5d:ec:06:4b:17:c8:fd:76:6d:a5:2d:48:fc:00:
78:29:01:b1:33:fe:82:9a:e5:fe:ef:2d:0b:74:8a:
f6:51:89:fc:cb:d6:6f:3a:f8:c3:d6:f5:a2:0e:41:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5F:87:60:55:39:E4:DA:6D:8D:31:7B:6B:BB:24:F3:27:15:4B:3B
X509v3 Authority Key Identifier:
keyid:6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:fb:da:08:31:29:43:da:1d:93:57:31:78:d3:9d:e4:7c:3a:
49:9a:ee:9e:f9:27:ff:0f:15:b4:fe:9e:85:91:c1:c6:8f:64:
7e:03:65:66:cb:94:ab:12:fa:5c:bd:9e:5c:f6:68:dc:01:cc:
3a:3a:8f:3e:81:c8:ad:39:1c:1b:0f:69:89:22:4f:fe:ac:5e:
36:72:ec:cc:bc:e8:74:74:01:bc:46:bc:60:66:51:51:52:df:
16:25:12:7a:15:dc:ad:b7:f1:67:29:cf:c9:5d:95:1e:e1:aa:
ee:36:52:5c:8b:38:65:75:78:33:c1:30:db:3a:3c:1c:30:e8:
26:4b:03:a6:c5:ab:cc:4e:57:94:ee:ce:fc:cb:6e:44:a1:f1:
57:9b:a7:90:e6:66:3f:5a:d2:c2:f1:ee:a3:86:59:f9:86:a9:
d9:e2:9b:58:a5:ff:d8:df:39:95:2b:99:02:92:eb:41:0e:41:
0e:09:3c:3b:e6:20:63:bb:b5:af:e9:65:4e:a9:75:79:8d:88:
71:a2:43:18:e0:ce:50:79:b2:d8:19:51:c1:98:6d:aa:8f:25:
53:f0:0e:6d:aa:6d:b9:38:2a:ca:3b:cd:7d:43:ca:6f:90:d7:
e2:4c:c6:89:e4:bf:4e:8c:35:2d:e9:8e:e4:7c:e6:b2:48:66:
30:5c:f4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:43 2025 by rpki-client