Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
File: DS7-O2P6myp5MsW17IVLcMPxiDk.mft (raw, json)
Hash identifier: mydE9ujG9r8ZymdMZ2T9k7e4UI54LWiKMGU6DCsm+Ms=
Subject key identifier: AC:68:58:D5:2A:60:5E:DD:5A:D2:5C:7C:B0:C4:4F:93:DC:F5:5E:C2
Authority key identifier: 0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
Certificate issuer: /CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Certificate serial: 01980C3DDFA473013D52A75F6F9F0238E123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
Manifest number: 04CF
Signing time: Tue 15 Jul 2025 04:00:38 +0000
Manifest this update: Tue 15 Jul 2025 04:00:38 +0000
Manifest next update: Wed 16 Jul 2025 04:00:38 +0000
Files and hashes: 1: DS7-O2P6myp5MsW17IVLcMPxiDk.crl (hash: FTeMrUFeXbtCgXkydf15R3RoLHIrPlXuoF510SCEZBo=)
2: Q_EK-erWHPnTXBrHVmcWbytpcis.roa (hash: mtRhYkTuoZWGkXxI5IGoHrOZ3J63Idzep2wBOshAzrk=)
3: rjoKSFT64wx9I01-lQ0W0ynohgU.roa (hash: kjj+Ef2J/by9CyPkpbVAwiAkNqP+TYAiZ/aCdSXrkAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0c:3d:df:a4:73:01:3d:52:a7:5f:6f:9f:02:38:e1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Validity
Not Before: Jul 15 04:00:38 2025 GMT
Not After : Jul 16 04:00:38 2025 GMT
Subject: CN=ac6858d52a605edd5ad25c7cb0c44f93dcf55ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:b5:20:d5:53:ad:46:f7:73:c5:d0:af:2a:
5d:fc:92:3f:7e:04:0f:8d:c7:06:e9:7d:94:57:7f:
0a:96:57:86:6d:ae:cd:3b:60:9e:c2:c1:f1:0f:c9:
9a:c3:e8:d7:31:77:e7:95:3f:1c:8d:43:b7:44:51:
0e:16:9c:41:92:fe:da:c3:06:2d:9a:04:72:77:af:
06:5f:ea:62:05:a9:fa:4c:34:85:09:73:31:d3:1c:
8a:55:87:c0:86:73:a1:ef:f1:38:ff:5f:4c:f2:34:
64:b3:97:95:33:63:06:59:2d:6c:d4:e0:8e:d5:46:
5e:98:8f:96:03:12:d2:be:65:36:fd:fd:a8:c8:e0:
e0:f7:05:d0:57:16:79:e4:e0:f7:e1:83:6c:ee:5e:
7d:80:d2:2a:b6:77:d3:1e:c9:94:fc:f7:82:0b:ab:
3c:fb:d5:36:ab:9e:cb:ab:c0:9c:ed:c8:d3:a1:4c:
9b:09:ac:bb:49:84:65:60:e3:67:87:90:64:41:b4:
ed:f9:d3:4b:7a:0d:80:6d:70:f0:41:9e:32:61:c9:
2d:1d:d3:8e:0a:bb:74:6a:95:09:ce:18:fd:2c:81:
7b:f7:3f:52:d8:05:90:3b:45:b6:78:32:3f:3f:43:
dc:73:66:da:76:00:bf:71:cc:92:be:78:40:21:6e:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:68:58:D5:2A:60:5E:DD:5A:D2:5C:7C:B0:C4:4F:93:DC:F5:5E:C2
X509v3 Authority Key Identifier:
keyid:0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c7:2d:db:0a:d4:39:c6:3a:54:11:0e:35:d0:f2:2e:f1:99:
8e:09:42:59:da:2b:6c:3f:74:a9:ee:e5:99:b0:44:40:a1:94:
37:48:98:84:af:1b:ee:4d:61:3c:15:01:4d:33:48:d1:f2:62:
15:a0:52:a4:89:0d:e0:8c:e9:47:5e:a7:59:24:94:95:1c:21:
bd:76:6c:f5:51:b5:fd:ef:bd:4f:aa:dc:6b:46:05:a6:f2:fa:
75:e9:97:c4:6d:1c:40:f5:36:fc:ae:ea:dc:34:b6:52:94:04:
db:69:3b:45:2a:39:9b:4d:e9:92:87:2c:17:86:e2:ef:f7:80:
4e:1c:5a:06:a1:18:46:6d:36:5d:42:a6:90:b1:38:02:76:31:
fc:97:ae:85:4d:8d:8c:aa:0b:79:0a:65:02:1b:23:68:bd:03:
17:8f:7b:e2:a9:6f:7f:ee:03:2e:88:9b:37:87:0c:f2:5b:5b:
7d:83:1b:d9:2b:6c:2d:b7:39:8d:60:57:bb:a9:91:5b:41:e9:
86:97:70:46:9d:b9:c2:60:e8:e3:17:ff:02:05:03:b6:db:2e:
5e:f9:64:59:2e:78:dd:01:e3:03:18:01:85:1b:68:01:08:b9:
a7:b2:3f:25:38:27:6f:36:d0:a4:f2:ef:dd:1a:62:b1:cf:28:
1c:81:39:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:55 2025 by rpki-client