Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.mft
File: plLLMsLIZpbjX5t41fGLNiYUsWg.mft (raw, json)
Hash identifier: avp5ga+LuMkYBiOSg8GmABS3Bq2/fSd7fMic1c8A3p8=
Subject key identifier: B4:B0:9B:D6:FC:C0:54:D6:CC:4C:84:0F:4E:1D:09:AE:8D:A3:23:2B
Authority key identifier: A6:52:CB:32:C2:C8:66:96:E3:5F:9B:78:D5:F1:8B:36:26:14:B1:68
Certificate issuer: /CN=a652cb32c2c86696e35f9b78d5f18b362614b168
Certificate serial: 01968A6EF2A4AA7BD8D3FF72A9D9E97C3C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plLLMsLIZpbjX5t41fGLNiYUsWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.mft
Manifest number: 14AE
Signing time: Thu 01 May 2025 06:00:48 +0000
Manifest this update: Thu 01 May 2025 06:00:48 +0000
Manifest next update: Fri 02 May 2025 06:00:48 +0000
Files and hashes: 1: DfnZMzRfopEnH2bDeBKNDNamggM.roa (hash: S3Q9ApuCGqU2ZYj0uBVCO23UhtK6iRmFAcmb65wISmE=)
2: plLLMsLIZpbjX5t41fGLNiYUsWg.crl (hash: GJ+Dx/lERzqOIsWZM6Baruc9NBH2ReS+XBYhYnGqB/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6e:f2:a4:aa:7b:d8:d3:ff:72:a9:d9:e9:7c:3c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a652cb32c2c86696e35f9b78d5f18b362614b168
Validity
Not Before: May 1 06:00:48 2025 GMT
Not After : May 2 06:00:48 2025 GMT
Subject: CN=b4b09bd6fcc054d6cc4c840f4e1d09ae8da3232b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:42:43:c3:0e:ed:2e:a9:60:24:59:16:2d:
b2:7a:2d:b3:40:49:84:ba:58:22:b0:48:94:62:a9:
ff:0a:48:b3:fe:21:b8:b7:78:5a:18:70:c0:8e:2b:
ea:55:10:2b:ad:8c:c8:0c:c2:79:a7:bf:ee:76:57:
0e:c5:80:fe:3b:fe:f4:05:f7:30:c8:02:8c:0a:ce:
d7:10:22:db:f6:e5:27:a9:2d:cb:f3:98:48:07:80:
c5:58:0c:16:92:25:4d:8d:75:10:f5:2a:c3:1b:9c:
ba:0a:08:24:c9:ba:62:ba:8c:67:b3:d2:1a:12:f3:
93:4d:0d:1a:a3:8c:e3:12:c2:c7:29:4e:eb:84:e8:
57:9c:01:d5:7c:e4:46:2a:2f:db:ee:d6:94:01:7e:
1e:ef:75:7e:f0:75:1b:bd:15:b1:56:c6:56:6f:62:
36:a7:45:eb:40:26:15:52:97:75:10:0f:1a:26:11:
8a:1a:68:37:42:f9:97:b1:ab:12:88:16:fd:51:b3:
cd:f8:f5:18:23:28:84:52:80:31:63:15:92:c0:93:
b7:26:22:5b:37:13:79:48:c5:9f:46:e9:bf:2c:12:
6a:07:54:e7:0b:85:e5:70:00:38:ef:2f:50:34:06:
73:be:80:2c:2e:a0:aa:f6:90:98:8e:fa:90:b0:57:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:9B:D6:FC:C0:54:D6:CC:4C:84:0F:4E:1D:09:AE:8D:A3:23:2B
X509v3 Authority Key Identifier:
keyid:A6:52:CB:32:C2:C8:66:96:E3:5F:9B:78:D5:F1:8B:36:26:14:B1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plLLMsLIZpbjX5t41fGLNiYUsWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0c:64:df:75:9e:87:c5:7a:0d:55:b7:7b:36:63:4a:c4:9c:
92:63:fa:af:eb:c0:b4:d1:58:e8:1f:2d:89:94:3c:4b:42:5c:
04:2a:a5:ee:ef:43:9d:6f:5a:8a:75:4c:2b:31:8e:2a:72:66:
d0:9c:47:9c:d9:fb:64:96:64:e2:16:20:8f:ad:21:0a:09:63:
45:fc:c3:cf:11:97:21:e1:dc:e5:3c:e6:65:2b:d8:49:63:fd:
31:09:df:c1:20:ed:64:f9:0c:ab:f6:24:b7:25:04:54:58:33:
67:e2:5d:6a:d7:05:e8:1d:2a:9e:0e:e1:10:92:b9:be:4d:22:
3c:9d:b7:55:47:4b:2d:21:db:33:ec:6d:ee:f8:dd:ec:72:1f:
22:79:f3:18:b8:c3:0c:7d:2c:ef:a3:7f:d7:bc:58:cf:31:9c:
11:c5:1f:01:cf:7c:f5:b5:37:67:fc:4d:e3:d4:e5:51:f8:a6:
9a:a8:ce:bd:e0:36:51:83:9d:c3:ed:ca:ce:b6:ce:9e:55:97:
65:3f:3f:78:31:2b:72:e0:04:48:14:04:85:24:8b:88:5e:a7:
c2:b1:1f:58:d0:6d:1e:b0:94:28:9a:b4:90:2d:5f:16:1f:a7:
ec:7b:e4:d1:cd:c8:c4:f9:29:db:1d:0a:ec:ea:38:1c:54:6c:
0b:f0:86:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:33:10 2025 by rpki-client