Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
File: x43nqz8ef8G8o1IOrP4OGn5qVf4.mft (raw, json)
Hash identifier: VJwcI0CPmkt+DThv4FjOnwTLsnU0KcuRD4TM0CuYSh4=
Subject key identifier: C7:EC:37:35:D8:24:40:94:BD:AD:9C:D3:8B:8F:72:0D:49:28:3C:A6
Authority key identifier: C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
Certificate issuer: /CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Certificate serial: 019A1572A561E8C47E026C7F18B9B431C746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
Manifest number: 16EE
Signing time: Fri 24 Oct 2025 09:00:26 +0000
Manifest this update: Fri 24 Oct 2025 09:00:26 +0000
Manifest next update: Sat 25 Oct 2025 09:00:26 +0000
Files and hashes: 1: g8YwGSQJtphdygepP_zngeWXvFU.roa (hash: MN0YFZEniJxqcHz8F+CefbhmwKUatb2Z2T+SIRMCHgk=)
2: x43nqz8ef8G8o1IOrP4OGn5qVf4.crl (hash: X7q8NozAo9Yj06bhG9UnGrc12cpyUiQ2z59gze2QE50=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:72:a5:61:e8:c4:7e:02:6c:7f:18:b9:b4:31:c7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Validity
Not Before: Oct 24 09:00:26 2025 GMT
Not After : Oct 25 09:00:26 2025 GMT
Subject: CN=c7ec3735d8244094bdad9cd38b8f720d49283ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:1f:d1:5f:58:f4:f0:f8:e5:ab:15:63:46:
8a:12:63:fa:4c:23:7d:87:36:98:3a:ef:57:91:1a:
cb:14:67:d4:79:83:17:b5:22:0a:73:88:ed:e4:e1:
79:cb:ae:f9:9c:61:97:65:b3:cd:19:40:c0:88:b5:
59:a5:7c:e7:5c:3e:b7:cf:2d:47:1d:e3:95:84:6c:
51:a3:e2:31:1c:bb:86:ab:06:e9:d1:fe:49:f8:76:
4c:f5:13:98:2d:39:f5:83:5f:11:f9:21:bd:2e:41:
f0:c2:df:f4:53:49:c2:43:0f:56:5e:37:0f:25:93:
b4:d9:47:47:fe:5c:60:d6:26:e0:05:72:f0:88:61:
eb:ec:57:ec:66:1c:9c:2a:5e:70:6a:ac:7d:dd:8a:
7a:6b:aa:87:50:9c:f9:45:ee:68:71:b4:87:ec:ff:
36:1e:0e:a3:5d:6e:46:e2:ae:67:40:69:1d:f0:78:
b6:15:20:49:fc:85:58:06:54:e1:d1:48:66:3c:9b:
eb:e1:e1:a7:68:57:62:c3:8f:10:2c:c9:96:83:69:
91:e3:5b:b7:b4:30:64:13:80:5f:54:83:ab:fd:e5:
9f:45:25:c6:67:38:ae:61:24:72:b4:73:98:4f:48:
eb:39:e0:b7:19:cd:11:80:af:54:43:ab:53:d3:cb:
fb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EC:37:35:D8:24:40:94:BD:AD:9C:D3:8B:8F:72:0D:49:28:3C:A6
X509v3 Authority Key Identifier:
keyid:C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6b:71:fb:27:87:86:b8:e0:4d:3e:40:9a:49:f5:1a:87:5b:
f7:1f:5e:7d:e3:8d:13:bf:6e:fc:17:71:4f:58:6f:91:75:e0:
07:51:a5:e8:1a:1f:e4:63:90:bc:45:3b:f0:d1:95:81:bc:3a:
e4:1f:ee:d1:a3:e5:e5:43:55:a8:16:a8:ec:97:eb:3d:18:95:
41:44:75:97:cd:fa:b0:a5:32:8b:de:6f:23:ce:80:0b:fa:45:
8e:b6:a7:2b:17:f7:96:43:06:91:a9:6f:03:0b:7c:bc:bc:3d:
53:8d:65:6e:10:70:e2:16:39:68:0b:58:d3:63:c4:ac:3e:bf:
dc:06:a8:d4:c5:a1:1d:63:df:fd:27:af:cf:a7:31:f2:dd:4e:
2f:84:f5:fc:d3:8c:d3:09:3e:f5:6d:c9:51:76:c5:07:ad:35:
1c:46:8a:c7:73:80:05:83:19:4d:e8:2a:bd:d7:7f:f6:1c:96:
4f:17:42:26:f3:32:cc:c4:31:42:39:42:a2:4b:83:d4:b8:45:
cc:14:e0:9f:7c:f6:74:1b:d6:7d:b6:50:a3:d2:a9:30:34:66:
33:47:55:73:13:a3:26:9d:ab:2f:8b:f0:01:99:45:f0:79:7d:
35:ff:b5:aa:b7:19:da:12:2f:d1:bd:97:38:25:27:f7:79:92:
c0:be:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:12 2025 by rpki-client