Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
File: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft (raw, json)
Hash identifier: OLmEXXMHJHoEzfBhSzfol9F7Jp0B5f4a/Gat/LR+l7Q=
Subject key identifier: 56:BE:82:1F:EF:BC:CF:FA:5E:94:2D:D6:B9:6A:00:B2:C1:B1:36:D6
Authority key identifier: F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
Certificate issuer: /CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Certificate serial: 019A0FA74B6DE411F9934A0A7737E549C34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
Manifest number: 1560
Signing time: Thu 23 Oct 2025 06:00:13 +0000
Manifest this update: Thu 23 Oct 2025 06:00:13 +0000
Manifest next update: Fri 24 Oct 2025 06:00:13 +0000
Files and hashes: 1: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl (hash: QfVUzSEgeiqslDYtRpRoyuFttt1pZDXLRdxS2Cb2YGU=)
2: S5nBS_Wv9TcvwJjisC52Dydzz1I.roa (hash: 7QqWqkhVmADmdh9/MVjrKD0YsIPlDm2w/Jsh9OhtMQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:a7:4b:6d:e4:11:f9:93:4a:0a:77:37:e5:49:c3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Validity
Not Before: Oct 23 06:00:13 2025 GMT
Not After : Oct 24 06:00:13 2025 GMT
Subject: CN=56be821fefbccffa5e942dd6b96a00b2c1b136d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:9d:85:b7:12:d8:4a:09:19:66:01:9d:6c:
14:79:a2:04:c2:b5:2f:34:22:97:91:38:59:96:f2:
db:df:1d:a0:34:07:a1:2f:92:bc:54:fd:bb:3f:ae:
11:f5:63:06:66:ac:06:1d:1a:d2:3c:9a:32:5f:88:
7f:de:5e:94:df:62:17:06:d1:83:ce:4b:2a:9a:37:
17:e7:2c:a0:e9:22:bf:09:6b:24:a0:2e:9d:95:c5:
eb:88:b9:39:3b:a3:e8:a3:7b:63:2c:17:28:83:65:
21:f1:ff:ab:d8:9f:2d:2f:3e:d6:72:70:7a:f1:a4:
57:63:b5:07:a0:81:5c:c9:f9:d2:c5:4e:b4:00:50:
10:5a:64:22:22:f8:76:97:81:66:c1:b2:47:2a:49:
2c:2d:0f:d1:64:6d:35:36:66:d0:23:79:2f:fe:e7:
a0:91:83:96:61:5a:a5:21:a2:a9:5f:ff:c8:3b:fc:
a8:04:86:3e:12:8b:d2:9e:44:6c:d7:ec:8d:6b:e6:
32:04:b2:99:34:7f:6a:c6:3a:f8:e1:72:51:d6:e2:
9f:0a:f3:21:4e:6f:cf:d2:75:ba:8c:c1:ec:f3:60:
27:40:36:28:dd:02:63:a5:dd:1c:74:54:96:47:25:
3d:2a:5f:92:7c:55:fb:e8:24:d5:20:45:08:4d:d8:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BE:82:1F:EF:BC:CF:FA:5E:94:2D:D6:B9:6A:00:B2:C1:B1:36:D6
X509v3 Authority Key Identifier:
keyid:F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ec:ac:a5:8e:06:db:7a:c9:2a:d1:5f:81:e1:d6:ea:d5:3f:
e1:3d:3a:ae:91:a1:15:43:bb:60:e5:fd:fc:59:43:06:e6:cb:
23:9c:fa:4f:17:13:48:fe:7e:d2:b0:8d:fe:bc:16:4b:be:0b:
3c:64:a4:09:61:a4:3c:4a:4d:f3:e4:46:0e:8d:61:b4:6d:9e:
4b:72:58:f9:8e:cf:22:e1:f7:08:34:27:de:be:aa:57:26:0b:
cc:a0:8b:68:12:74:2e:dc:0b:44:03:2d:83:c2:f2:45:08:2c:
2d:af:99:71:d5:33:b1:fb:b9:c2:e5:0c:b0:df:fb:40:50:de:
8f:d6:8a:b7:e3:4f:89:ad:03:ca:1d:bd:cd:15:3f:2f:df:7b:
e8:97:df:35:41:4b:19:c6:27:91:51:b5:6d:de:46:c1:6b:6c:
0d:1a:68:87:85:53:50:5a:98:b8:07:79:95:6a:48:31:fe:52:
8a:1d:31:dc:e5:41:38:74:fa:5f:51:ef:6c:33:d6:73:2f:1f:
c1:34:0b:33:bf:4b:c4:01:f6:e4:4f:70:ef:18:40:31:c6:c7:
28:aa:d6:3e:fe:8a:15:2d:32:ff:3d:57:ba:a2:ce:bd:9e:d4:
aa:73:4f:ed:10:c7:cb:55:8c:cc:41:ab:51:d3:d1:a4:5d:fe:
d5:15:14:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:12 2025 by rpki-client