Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
File: t8jfPaM5OL8bJF8cRHn9JN2flPA.mft (raw, json)
Hash identifier: 7bf0w6bFJw/Fb57X+6cxDGiAURSIF1nQA2NSpu2ZyW0=
Subject key identifier: CB:0D:A1:79:3C:71:53:31:0F:5F:B7:32:23:7B:A6:B9:3D:AA:35:7E
Authority key identifier: B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
Certificate issuer: /CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Certificate serial: 01979ABA8C64B281DF8D7A8866635D943C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
Manifest number: 1573
Signing time: Mon 23 Jun 2025 03:00:05 +0000
Manifest this update: Mon 23 Jun 2025 03:00:05 +0000
Manifest next update: Tue 24 Jun 2025 03:00:05 +0000
Files and hashes: 1: rnBvIUiPG215g2G4TvJ3vJPLCJg.roa (hash: QymikogB0QXOb1awGtB0gQkLWC08JbHRqFZVMECKiDM=)
2: t8jfPaM5OL8bJF8cRHn9JN2flPA.crl (hash: P/7M+CDtXEzv83x8DfYjTJbz0yLrVrmGnTH1WBkkLek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9a:ba:8c:64:b2:81:df:8d:7a:88:66:63:5d:94:3c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Validity
Not Before: Jun 23 03:00:05 2025 GMT
Not After : Jun 24 03:00:05 2025 GMT
Subject: CN=cb0da1793c7153310f5fb732237ba6b93daa357e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:15:b2:35:31:a4:38:30:43:ae:7d:17:24:75:
f2:ae:bd:64:9c:36:f9:6a:10:fa:4e:11:2b:1e:1e:
87:0b:e9:9a:c9:07:3d:09:b1:1b:e1:0f:a8:f0:74:
4a:7a:83:90:ec:76:48:1b:4a:fc:b6:54:c1:f3:28:
e9:38:67:40:15:d4:bb:d8:ab:5f:0f:b4:70:9b:e5:
3c:19:68:5f:be:50:24:4b:83:da:cb:e2:70:e8:24:
60:a5:a0:71:9a:89:4a:38:6d:a1:81:71:fd:28:14:
8b:44:e3:48:18:63:15:d1:ea:9e:c5:c4:13:51:0b:
04:e5:30:a9:6b:65:cf:0d:d9:e5:26:55:38:4d:83:
09:9b:73:3c:e8:eb:2e:b5:12:4c:1f:24:94:04:88:
77:84:cc:40:a8:d7:1a:1d:40:b3:77:97:8a:01:56:
3d:b1:47:e2:4e:d4:7e:95:69:84:61:e9:09:5c:01:
95:10:e1:36:1c:fc:db:ad:83:17:22:a6:98:74:37:
b2:91:9d:5e:33:51:5e:e3:24:f4:82:e9:bf:65:80:
ce:70:34:e3:66:2d:d6:01:09:eb:3e:62:1e:f5:aa:
ef:79:f8:a8:5b:00:1a:b5:4f:38:a0:1d:4f:94:be:
22:fc:67:ea:85:fe:5d:23:35:1a:24:60:b3:0a:2d:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0D:A1:79:3C:71:53:31:0F:5F:B7:32:23:7B:A6:B9:3D:AA:35:7E
X509v3 Authority Key Identifier:
keyid:B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5e:59:35:e3:af:77:22:a0:34:2d:97:d8:3e:85:2a:a5:a8:
4c:4b:84:30:8b:e3:4a:5c:7f:a4:1d:88:43:54:09:c9:e1:55:
5e:28:38:2d:62:0e:2c:8f:ca:b0:8d:59:9e:83:a2:10:1e:3c:
69:d7:b1:42:98:d4:2d:a3:0f:fb:ad:14:2f:9a:d0:7c:b3:82:
7c:76:3f:e2:c1:42:18:fa:53:ac:72:db:76:54:34:15:6d:e8:
45:70:4b:58:3d:27:23:21:8b:5e:09:51:21:0d:e1:7f:0f:e3:
28:a4:a8:e4:6f:07:cc:e6:19:ee:c8:08:2d:2c:4a:51:c4:f2:
7b:0d:8e:46:b7:23:08:1f:5e:59:d7:59:af:fc:93:96:fa:8a:
1d:72:81:50:4b:06:ec:90:77:1c:7b:b6:12:aa:bf:07:70:9a:
c0:05:f1:93:78:63:71:18:36:6a:7a:62:a3:a8:48:d1:7a:c9:
0e:70:78:cc:a2:39:16:bb:72:43:d2:a5:43:3b:da:d3:92:1f:
f9:9d:95:60:ec:7d:56:0b:24:76:7e:38:b9:8c:be:ea:49:70:
9d:f7:8a:38:af:a9:ef:a7:4c:85:39:9d:40:b1:1d:aa:17:0f:
a1:53:d7:9c:cc:db:bd:af:f6:43:df:c1:4d:0c:18:e6:e3:a5:
ba:6d:9c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:18:42 2025 by rpki-client