Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
File: ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft (raw, json)
Hash identifier: pc4t+Ps4s04++KnccIHldjvfA6NHW9ZlepvjwlNK4mc=
Subject key identifier: 3E:72:9D:D4:EE:AB:90:C6:3C:CA:72:FA:B0:DE:EA:25:25:BD:5A:A1
Authority key identifier: BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
Certificate issuer: /CN=ba443d86435578576b4231555a0ed213f522bef3
Certificate serial: 0198C07CC420F24A2D66575547AE60A90FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
Manifest number: 08FA
Signing time: Tue 19 Aug 2025 04:00:58 +0000
Manifest this update: Tue 19 Aug 2025 04:00:58 +0000
Manifest next update: Wed 20 Aug 2025 04:00:58 +0000
Files and hashes: 1: pJcYXodpDPmMRbZLo0Tatq1ioSM.roa (hash: reA4i3iUw1X1kJD9p6sG3wX62hmlDQuF+yso9k92RQ4=)
2: ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl (hash: dnC3ihJJ4J6l7Cr9O5c/yUwr+srPPyvLTQpU1Kw5qCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c0:7c:c4:20:f2:4a:2d:66:57:55:47:ae:60:a9:0f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba443d86435578576b4231555a0ed213f522bef3
Validity
Not Before: Aug 19 04:00:58 2025 GMT
Not After : Aug 20 04:00:58 2025 GMT
Subject: CN=3e729dd4eeab90c63cca72fab0deea2525bd5aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:44:d6:25:c2:5f:b2:f2:06:bc:1c:2b:18:e5:
5f:70:e9:00:a8:9b:8d:c1:93:5d:20:fb:62:9f:60:
e7:e2:1c:6a:29:9b:8e:19:70:af:cf:85:19:6c:90:
64:8f:d3:1e:37:9c:f9:98:95:f0:2b:13:6a:af:97:
1f:06:ac:2c:a9:71:49:93:ca:07:2c:6d:8c:d4:c0:
67:cf:91:39:45:16:9d:f7:bc:a4:50:ee:39:b3:cd:
94:f9:88:90:33:a4:e6:ed:35:e5:24:11:af:0b:93:
2f:b6:d7:59:f6:90:ff:8a:f2:0a:f1:09:b0:d8:0f:
b3:8f:b5:e8:2b:1d:14:7c:1b:6f:a4:2d:8e:82:1b:
e9:76:27:17:4b:97:79:75:cb:9f:e4:16:8e:63:ad:
2d:30:e4:b1:0a:f3:1c:de:40:f7:15:59:a8:3d:01:
8b:0c:1a:bb:f8:b6:50:bb:93:35:e3:26:78:7e:18:
44:9d:30:23:2c:b1:4e:39:ba:17:fc:22:c0:73:a9:
c0:fe:ba:27:bb:5f:ae:48:9f:cc:bc:65:c7:00:80:
93:90:d1:18:7f:23:66:d8:19:0c:8c:0b:46:f4:aa:
cf:f7:9e:56:48:23:25:f5:05:d1:1c:6c:78:77:94:
6a:d3:6c:09:a5:b3:9c:8b:cd:6c:55:6c:3b:2c:30:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:72:9D:D4:EE:AB:90:C6:3C:CA:72:FA:B0:DE:EA:25:25:BD:5A:A1
X509v3 Authority Key Identifier:
keyid:BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:fe:e2:f5:ec:3a:ce:84:75:9c:44:e7:b8:84:8b:0d:f8:73:
bf:f5:e6:7c:25:77:a7:3d:79:c0:7c:82:ec:a3:33:23:e9:60:
22:f9:6c:de:a6:9f:10:3a:24:ed:99:e0:20:e9:04:df:d8:ca:
78:54:0a:51:97:e7:e8:c7:b3:80:a1:1c:3a:2b:a0:6d:e3:01:
f2:34:16:23:c2:88:f9:d0:df:77:7f:05:26:84:45:be:69:7a:
50:dd:29:10:0d:4c:2c:21:1b:66:8f:0d:8d:63:fc:15:8e:26:
b2:72:06:ad:a1:54:9e:2e:a3:9d:b5:5c:95:a6:b7:1c:23:39:
bc:e6:4c:3e:18:0e:a3:4b:78:92:83:d5:91:a1:51:6e:70:e7:
c8:09:9d:fd:8e:a2:ce:cb:ca:81:d4:34:0d:7c:f4:92:b4:53:
22:8b:f2:b2:af:8b:6f:42:91:9e:8e:b8:57:39:6f:30:6d:47:
09:8b:c3:9b:cf:a4:b5:5a:8a:9c:7a:96:79:83:75:6f:b7:de:
d4:de:4c:c0:95:97:a8:fa:43:9b:58:a1:fe:1d:05:76:ec:35:
aa:d9:ea:48:92:82:51:c5:a1:df:7e:09:3d:fe:59:c0:db:68:
0c:8d:98:3f:27:4d:05:24:1a:5f:cc:46:1e:83:b8:db:a6:f8:
82:9a:cc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:19 2025 by rpki-client