Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
File: Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft (raw, json)
Hash identifier: MpOqA21KDKjCe1dbZ66c+s5t5SWLgHSCMSvOggAeuCU=
Subject key identifier: 54:AB:81:D6:AF:94:5E:B1:2F:3B:32:F6:11:BC:04:C0:EE:E7:86:41
Authority key identifier: 67:A9:79:54:76:87:E7:F9:CD:07:C1:60:A5:49:C0:DF:3B:3C:C0:DF
Certificate issuer: /CN=67a979547687e7f9cd07c160a549c0df3b3cc0df
Certificate serial: 0198771A51CD11BEB4B3A85D0EF72E038700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
Manifest number: 0205
Signing time: Mon 04 Aug 2025 22:01:10 +0000
Manifest this update: Mon 04 Aug 2025 22:01:10 +0000
Manifest next update: Tue 05 Aug 2025 22:01:10 +0000
Files and hashes: 1: Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl (hash: rc8omlCYWxqTTWs8pu6T1n7hhablSe7PGVVrklD883k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:1a:51:cd:11:be:b4:b3:a8:5d:0e:f7:2e:03:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a979547687e7f9cd07c160a549c0df3b3cc0df
Validity
Not Before: Aug 4 22:01:10 2025 GMT
Not After : Aug 5 22:01:10 2025 GMT
Subject: CN=54ab81d6af945eb12f3b32f611bc04c0eee78641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:00:1f:e0:8a:d1:5e:da:3a:5d:0d:c4:4d:
f0:ce:14:08:b0:9e:d5:e2:50:63:40:4f:52:29:25:
a4:4a:76:18:36:0a:a7:78:81:05:0d:c2:c7:66:70:
c9:0c:5f:a4:e2:73:59:dd:96:74:17:ef:c3:23:d4:
04:0a:93:3c:a8:90:6b:72:30:26:d0:c3:32:7c:d3:
8a:8d:42:d2:45:6f:02:29:91:aa:2f:d3:a4:b9:2b:
f3:65:2f:9c:00:f0:7d:80:92:9d:37:45:b4:5e:f4:
e5:21:a8:ad:99:31:06:49:f0:9e:ec:6b:2b:b1:98:
a1:20:bf:61:9d:7f:9b:b4:21:6c:06:15:b4:a5:e9:
1d:5e:58:7f:22:f0:2b:19:bd:a0:17:54:9f:73:03:
d6:e7:9b:09:57:e5:c4:57:95:d6:ad:0f:f7:21:1c:
fe:56:bc:54:62:5f:e5:e1:5b:fc:a7:75:a8:52:c1:
00:1c:36:ca:dd:02:79:12:df:cd:ad:4c:6d:13:67:
91:19:e3:e3:29:18:d0:d3:9f:a0:05:5d:ae:29:5f:
0e:e8:52:19:75:47:68:81:be:9e:95:da:49:fa:77:
a2:19:b0:97:5f:83:a3:7c:28:d3:01:c0:d5:bf:55:
47:b4:24:c6:a4:b5:dd:12:e7:ba:f9:09:5b:35:3f:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AB:81:D6:AF:94:5E:B1:2F:3B:32:F6:11:BC:04:C0:EE:E7:86:41
X509v3 Authority Key Identifier:
keyid:67:A9:79:54:76:87:E7:F9:CD:07:C1:60:A5:49:C0:DF:3B:3C:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3d:3b:a4:11:f0:18:06:9b:e2:63:a2:33:27:f2:6a:aa:bb:
a0:ab:e4:c2:e9:d5:19:3e:47:63:0f:28:6d:24:36:c4:6e:9f:
8a:ee:8c:24:9e:0c:04:69:90:60:ed:df:10:c9:90:e0:ba:8d:
a1:4e:3f:fc:47:2a:83:3d:0d:00:74:96:c6:39:bf:ce:c9:dd:
f4:82:19:53:37:01:55:89:05:fd:90:f5:05:62:3b:38:4c:2f:
20:a1:80:1d:9c:2f:bf:d2:8e:60:2a:9b:cb:cd:fa:ea:f8:a4:
aa:e3:86:37:45:d2:d1:87:07:92:4b:22:15:3f:5b:1c:2f:36:
49:17:9b:4e:40:d5:c4:26:30:74:8a:bb:74:3a:db:50:05:62:
a4:8e:81:e5:ec:84:33:76:a8:92:1d:45:35:3f:b5:6b:f1:45:
9f:5a:9c:90:a6:39:79:09:27:6c:ce:62:8e:86:9c:3a:a0:c3:
72:7b:52:00:0a:90:27:92:a0:f4:70:e8:68:b2:74:1b:e3:b1:
5a:2b:57:44:5b:a8:45:80:e1:57:58:b2:c0:98:6e:59:b2:da:
4f:9b:8c:be:b2:d7:56:46:e6:bc:77:0a:6e:48:ab:31:34:df:
00:4b:ce:ad:26:9b:82:0c:cc:0b:f1:a0:ce:e9:f1:84:2a:45:
86:cb:94:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:25 2025 by rpki-client