Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
File: 1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft (raw, json)
Hash identifier: fEEbnViNoYtj99Cqi7vRH++MP6ldiUpIgiVHUC2tRQs=
Subject key identifier: 31:80:89:11:4C:3F:3F:51:8E:A7:69:6E:52:83:36:2F:14:69:DB:CE
Authority key identifier: D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
Certificate issuer: /CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Certificate serial: 01977C42E5543012BD6F484AEE9D9775C120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
Manifest number: 0BA7
Signing time: Tue 17 Jun 2025 05:00:48 +0000
Manifest this update: Tue 17 Jun 2025 05:00:48 +0000
Manifest next update: Wed 18 Jun 2025 05:00:48 +0000
Files and hashes: 1: 1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl (hash: Yl9gn37GtwBYvHfPaYGKp76+FuC8Zi3hsEaT/76VYz8=)
2: pW4NhKTVrfPynXbLPF5CI2MPfYk.roa (hash: WbDzY2pHEiq4FLUx3TIlRUMJrlB0Z859NRUEutTDHyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:42:e5:54:30:12:bd:6f:48:4a:ee:9d:97:75:c1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Validity
Not Before: Jun 17 05:00:48 2025 GMT
Not After : Jun 18 05:00:48 2025 GMT
Subject: CN=318089114c3f3f518ea7696e5283362f1469dbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:2a:08:73:f6:a0:0e:1e:98:df:e5:18:da:
a4:15:17:fa:f8:00:10:57:27:85:25:e1:ce:0f:60:
0a:17:c1:a9:82:c0:9f:01:90:be:28:3e:75:df:b5:
a4:0f:05:c1:18:28:01:4b:9b:80:ea:63:05:8d:b0:
5a:9d:e9:7c:1c:16:f0:c5:f0:d9:22:c2:61:62:b2:
48:a0:31:07:12:a8:1f:6b:88:88:d4:a1:2a:bc:b6:
81:6f:b9:2b:bc:66:ed:cd:06:46:12:a5:8c:39:1b:
94:d0:c0:52:f9:ed:a7:c7:e6:67:01:66:00:c6:27:
29:15:49:a6:4a:c2:c8:b5:94:b9:61:5b:73:79:42:
b9:aa:a5:e1:1a:c4:c7:74:26:dd:45:43:2f:ca:01:
b3:17:d3:21:9b:7c:b8:5d:ea:2e:0e:08:7d:3f:ff:
43:cc:35:b0:3a:c1:0d:84:f1:15:8b:8d:9a:00:82:
2c:c3:14:32:61:88:91:c0:86:87:52:33:ba:7c:01:
09:30:43:20:52:40:38:e0:47:2e:dc:34:6d:64:04:
bd:fc:cb:8c:15:bb:60:ba:af:4b:8c:83:dd:11:f4:
5c:64:fc:55:33:08:18:20:43:c8:a8:55:8c:37:5f:
09:0b:47:bd:5e:aa:20:16:6f:7f:d3:d8:ea:42:b1:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:80:89:11:4C:3F:3F:51:8E:A7:69:6E:52:83:36:2F:14:69:DB:CE
X509v3 Authority Key Identifier:
keyid:D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:16:c3:35:d1:4b:99:04:1b:e9:7d:d0:8f:52:3a:46:9c:c4:
ec:98:e2:dd:db:e0:99:e7:a4:45:f0:e1:86:0f:b1:6f:63:ae:
16:c0:dc:94:c7:53:84:2c:85:18:ee:23:c5:7b:e5:2c:71:e0:
88:fb:f9:54:21:83:be:3e:1e:e3:17:2e:20:67:ea:a2:5f:ea:
4b:e3:f1:74:2a:9d:5d:e1:ca:f1:75:5d:0b:f4:7b:ba:f7:1c:
30:ab:1d:da:18:3e:ac:88:c2:3a:8a:4e:ec:c3:6e:bf:25:c8:
9b:15:04:5a:8b:fc:3b:0b:89:2b:b3:70:ab:07:59:c1:a5:0b:
0b:ff:3f:2d:e3:e0:dc:fe:20:4d:76:62:7e:ce:e6:8b:ea:5e:
9f:a3:6c:ad:22:5f:f9:a3:1c:a5:71:7a:16:61:73:11:8d:3a:
45:53:5e:89:d3:be:42:a2:4a:e7:a7:46:2c:28:b2:f2:f5:69:
ec:20:c9:fa:8f:e8:04:1b:b3:1a:ec:84:04:57:cd:c3:1b:7c:
3a:20:44:56:43:fa:2c:ff:fd:03:e0:bc:8c:eb:ba:9e:bb:3e:
5d:b0:06:b0:e7:df:42:7f:9c:d6:12:9a:7c:b9:46:47:29:97:
4d:17:c6:b3:92:4f:be:42:5e:5c:78:a5:2a:0a:74:49:be:60:
bc:84:38:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:17:22 2025 by rpki-client