Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
File: gHAu016O_uBMqrmZhCa8PUPK6yw.mft (raw, json)
Hash identifier: b5pf5WmfcgFixEDgoNKGbj0SzBSiENmDuSqJCAOKsDc=
Subject key identifier: 9F:06:4A:73:5E:13:07:5A:FD:0D:81:AC:F7:0A:DD:A4:26:1C:0D:4E
Authority key identifier: 80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
Certificate issuer: /CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Certificate serial: 0197D2F3CE0F4144CD931304B62A988C2557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
Manifest number: 060D
Signing time: Fri 04 Jul 2025 01:01:22 +0000
Manifest this update: Fri 04 Jul 2025 01:01:22 +0000
Manifest next update: Sat 05 Jul 2025 01:01:22 +0000
Files and hashes: 1: gHAu016O_uBMqrmZhCa8PUPK6yw.crl (hash: q4+WuhLgh38p84qXy/nxvxgWxn4lUq/cQxHb/bAH4LA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:f3:ce:0f:41:44:cd:93:13:04:b6:2a:98:8c:25:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Validity
Not Before: Jul 4 01:01:22 2025 GMT
Not After : Jul 5 01:01:22 2025 GMT
Subject: CN=9f064a735e13075afd0d81acf70adda4261c0d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:ac:f4:49:52:45:ea:53:37:07:2e:15:d1:
a9:cc:f1:ea:34:d6:e0:46:ce:07:e6:63:71:d6:ff:
74:43:5f:88:72:8c:a3:78:40:83:0d:9f:98:ef:55:
63:8f:5c:45:c2:a9:69:19:93:c6:37:48:9a:77:d1:
33:bb:29:45:62:e6:cf:50:6b:8d:23:11:a3:72:dc:
59:08:b4:5a:a6:3d:7b:d3:34:07:22:30:7d:91:6b:
33:a1:b0:7d:4f:2c:d9:ba:ed:80:7c:be:cd:ef:f8:
b8:fc:5d:2a:c1:a9:9c:d6:06:78:dd:d6:bd:b6:73:
90:0f:e9:32:1f:3c:7e:50:5d:ec:a9:f5:f7:f7:b7:
c2:6e:4d:54:c4:24:f1:76:ed:0f:f1:34:e2:98:e8:
9e:78:48:09:7d:85:3c:f3:31:5a:20:59:9f:e2:49:
f8:3b:3a:3e:58:97:0c:13:07:64:c6:80:69:b5:de:
4c:95:e2:f6:15:9c:fb:90:c5:fb:d4:d8:f8:4c:a6:
04:2a:da:4d:89:e7:0c:32:52:c2:62:31:5a:47:30:
3e:a0:73:16:f1:3a:ab:36:b4:70:1a:c0:6b:b4:35:
d8:ca:42:d3:b4:72:ae:c5:56:f7:b7:ae:9d:cb:b4:
c6:0c:1a:57:48:07:4c:c8:ea:22:1e:df:42:dd:15:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:06:4A:73:5E:13:07:5A:FD:0D:81:AC:F7:0A:DD:A4:26:1C:0D:4E
X509v3 Authority Key Identifier:
keyid:80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:66:70:99:a0:00:5a:82:25:ea:de:a6:03:10:61:9a:10:50:
55:d1:6f:a9:4f:cd:cd:79:4a:72:64:9c:27:64:c7:f5:0f:59:
00:46:95:ac:d4:f3:ae:71:b3:28:b1:68:c6:d4:f9:c2:52:bb:
ea:38:94:b9:44:a0:aa:51:74:65:47:ee:6f:ad:83:8e:0b:91:
27:c7:8c:bf:cf:16:2e:e6:2f:c5:8d:c8:79:6a:6b:d3:7d:82:
1f:84:45:db:09:3d:4f:4c:c9:7c:56:fc:17:60:bc:29:a6:47:
84:2b:b7:04:c6:e7:8c:71:be:ed:8e:4b:80:4b:0a:b3:48:4d:
f1:b5:7c:f8:6b:07:41:bf:8e:51:f6:16:01:39:90:0d:fb:d4:
6d:40:a0:3f:16:a6:4f:71:e1:78:c6:70:e1:f4:64:2f:72:39:
a0:fe:f6:db:ee:4f:93:d7:b2:a5:2e:1e:9d:c4:9a:69:53:07:
33:e6:dd:bc:9c:4e:fc:4c:86:97:b6:e4:38:89:48:1f:01:fc:
1f:c3:31:da:97:a6:45:92:d5:75:35:5b:60:41:6b:0d:99:11:
da:d8:88:f2:ff:a7:6b:15:56:94:18:b6:85:3b:4f:6d:91:d8:
fa:01:97:4e:fd:14:f1:0e:35:c8:1b:bf:66:62:75:c0:b1:c8:
9d:a5:11:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:25:08 2025 by rpki-client