
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
File: tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft (raw, json)
Hash identifier: 3e8EaeN4kb13lh9o/djLcP8SvGwuC/ToLTAfAtG3F4E=
Subject key identifier: E5:C4:65:69:E6:DF:35:6E:46:C2:FF:38:33:92:FF:90:A5:B8:4C:57
Authority key identifier: B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
Certificate issuer: /CN=b543ef9bc3c2132361c1240972a180912bf7a859
Certificate serial: 0197E8D5F030CBEBE225236D290C046011EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
Manifest number: 117C
Signing time: Tue 08 Jul 2025 07:00:23 +0000
Manifest this update: Tue 08 Jul 2025 07:00:23 +0000
Manifest next update: Wed 09 Jul 2025 07:00:23 +0000
Files and hashes: 1: 3_-c02s70_bWI80EfV5nMZhCjHg.roa (hash: 1ZDiW1elfufjNKaqhAw29FTOI2soWhXtopSXVjj/ruY=)
2: 9XYzuBVHhZfQ-Z8_PdIStP3gEJU.roa (hash: 45mg1wTAOjryTd4LOjOOGQdcDwneEtBdS+C0gsQtj+o=)
3: tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl (hash: I1pEQ2ct0xiJ4LgT0fR/E5Izk48TT6cIRcXGh/+b5Oo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e8:d5:f0:30:cb:eb:e2:25:23:6d:29:0c:04:60:11:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b543ef9bc3c2132361c1240972a180912bf7a859
Validity
Not Before: Jul 8 07:00:23 2025 GMT
Not After : Jul 9 07:00:23 2025 GMT
Subject: CN=e5c46569e6df356e46c2ff383392ff90a5b84c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:8e:d6:d8:b1:8a:c7:5f:41:8a:dc:da:f5:
f7:4f:11:64:67:8d:ab:2f:06:d4:65:23:81:1f:fc:
dc:dd:8e:f7:04:bb:48:a8:c4:1d:c1:ba:8f:78:de:
61:e6:77:78:c0:42:54:b6:d8:62:3d:34:3d:0c:22:
55:2d:dd:43:88:71:0b:d1:48:d3:90:0d:5f:59:49:
25:e4:84:ac:58:3f:ba:bd:43:ee:ff:2a:b9:6d:01:
6d:7c:12:25:30:de:c8:bc:af:08:ae:e1:62:e8:09:
9c:0e:06:42:92:5f:c6:e8:f9:c4:cb:8d:54:56:74:
82:67:82:f9:15:26:b0:0f:85:d8:db:d0:23:50:60:
c4:45:ca:57:6f:8f:8b:91:5e:27:11:a0:a0:04:4b:
aa:19:60:22:94:91:d7:ff:cd:e4:bb:ad:b3:54:21:
de:d7:f1:6b:d1:fe:95:ac:00:9d:97:7c:01:1c:89:
8f:08:ea:d7:5a:11:7f:5b:83:f4:08:52:5c:4e:aa:
52:b1:fc:f2:7b:0b:ce:b8:7a:ba:df:b2:4e:69:47:
05:ba:a2:7b:04:f7:ec:52:24:83:3c:5f:39:f3:d3:
51:30:33:be:fc:1c:bd:9b:f5:75:8d:b9:2e:7b:ab:
41:b3:90:01:9f:39:72:d0:fc:ef:ed:f3:b5:30:a8:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C4:65:69:E6:DF:35:6E:46:C2:FF:38:33:92:FF:90:A5:B8:4C:57
X509v3 Authority Key Identifier:
keyid:B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:86:ba:5d:39:17:6e:91:3f:66:f1:d3:85:13:37:a4:6a:
65:6f:10:70:0c:74:54:44:70:25:d4:0e:5b:c9:e1:ad:27:ea:
8a:e9:cf:8c:68:8c:ee:b2:91:3b:fc:9a:20:e2:2c:78:fa:7c:
49:56:ed:42:9b:61:a4:a1:49:9d:b4:f9:39:c2:e4:f5:c7:bb:
db:3a:3b:fc:d7:73:8d:d9:7c:b4:08:2b:8a:77:4a:ad:5c:d7:
45:09:08:25:90:3e:45:c8:6c:d6:b3:d8:a4:87:e6:1f:db:a8:
79:7e:a3:34:34:75:94:e4:34:4f:ce:f8:f5:c1:7f:cc:cc:7b:
34:e7:46:16:f2:5a:ba:c1:56:28:27:c0:5c:50:0f:5d:39:b0:
16:84:61:a3:83:6d:13:b1:81:ef:f6:75:65:92:63:a3:75:bb:
8a:91:64:a1:5d:43:6e:93:94:13:20:4f:ee:a5:21:8b:70:6a:
75:4d:d7:51:6e:22:ce:35:08:fd:3f:81:12:c2:de:8a:dc:57:
1d:2f:67:a6:6c:44:85:c7:b0:b6:43:56:81:50:72:6f:ae:27:
ff:5e:a1:60:c4:bd:48:c4:ae:92:92:b2:21:37:6f:ef:ab:6a:
b3:12:47:32:e6:22:88:2e:7f:6f:b9:6d:09:75:e5:c9:c7:62:
76:18:00:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:09:06 2025 by rpki-client