Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
File: fUQxNNzRasFvbNIJ-hx_lYym234.mft (raw, json)
Hash identifier: n0PShDxqUqrKi7A/EaFWMAdxc8B0dlfgF0Hy+dQrlB4=
Subject key identifier: 0E:05:AD:D9:43:3B:23:FE:7A:AB:03:A0:93:E9:5D:CD:BA:7B:37:FB
Authority key identifier: 7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
Certificate issuer: /CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Certificate serial: 01986393654944BEA2AE07CDFD4CE1E89C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
Manifest number: 1612
Signing time: Fri 01 Aug 2025 03:01:00 +0000
Manifest this update: Fri 01 Aug 2025 03:01:00 +0000
Manifest next update: Sat 02 Aug 2025 03:01:00 +0000
Files and hashes: 1: HnXbxzajLhcisRCq_fB03kkxY7Q.roa (hash: 3RLbNAEyHJR+jTuUtPlDmJk48r533+OhDx8HcGj/79c=)
2: fUQxNNzRasFvbNIJ-hx_lYym234.crl (hash: 9J4a4JimMTriwNbH7J6UGTyWcc/Cl2TQ3ApEcN+Dr+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:63:93:65:49:44:be:a2:ae:07:cd:fd:4c:e1:e8:9c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Validity
Not Before: Aug 1 03:01:00 2025 GMT
Not After : Aug 2 03:01:00 2025 GMT
Subject: CN=0e05add9433b23fe7aab03a093e95dcdba7b37fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:17:e1:1d:e5:b9:5a:0f:a9:58:ae:4c:64:
d9:40:1e:6d:5f:a2:87:7b:3d:61:c9:b0:63:39:9c:
b1:2e:94:76:b8:d0:a7:e1:6f:fd:5a:78:70:ff:7c:
6c:9b:e1:ce:a2:7a:88:cc:7a:64:75:3c:ef:2b:95:
1c:61:5c:a4:b6:52:3f:e1:90:46:c4:92:23:26:94:
8a:d3:ce:db:40:58:0d:4b:af:0c:a3:9f:ff:b8:5b:
30:64:2d:6d:2b:08:40:56:be:9c:0f:e1:da:d2:6c:
92:8b:01:26:91:d2:1a:ab:26:d1:ab:c3:f0:7f:33:
c3:97:47:04:0e:5f:8a:ff:58:ee:d8:ed:a9:9b:4e:
3d:cc:99:b2:b3:ce:14:df:fe:19:58:7f:08:5b:18:
01:32:91:07:b7:78:af:c7:52:43:e2:d5:f8:36:9d:
c7:62:00:4f:7e:69:88:8f:95:fb:bf:e1:06:b7:8e:
7b:e1:0d:0d:9e:da:cf:0a:38:ea:bf:f6:f3:1b:a6:
86:31:c7:b7:37:d6:7c:36:19:dc:5d:af:e0:5e:0f:
e2:4c:d8:95:a9:3c:aa:4b:de:4d:3f:f7:f7:58:5c:
10:a3:54:90:de:58:c2:5a:f0:fe:75:b8:b9:29:63:
68:32:b1:56:dd:31:63:7c:5a:6a:70:f4:a2:df:c2:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:05:AD:D9:43:3B:23:FE:7A:AB:03:A0:93:E9:5D:CD:BA:7B:37:FB
X509v3 Authority Key Identifier:
keyid:7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a3:c4:d0:f5:e7:19:b0:d3:4f:5c:c9:d2:84:35:b9:7c:3e:
be:84:c4:4a:d2:31:d1:33:f8:a2:ee:a1:5f:47:85:f1:cf:56:
fd:2d:2d:78:8f:98:1c:2c:c6:da:a2:2e:98:26:5e:9a:fd:e2:
e1:9b:cb:0a:31:51:7d:6d:40:b5:db:5c:c7:db:e9:4e:1f:df:
04:10:d9:20:05:76:de:1f:2e:02:e3:06:c2:74:b8:6f:ad:27:
87:a9:c6:92:d8:61:25:2d:24:50:f3:de:94:fa:3c:54:74:65:
6b:a6:64:01:92:23:ca:0f:51:42:a9:71:69:e1:17:59:e4:f1:
99:f9:0c:81:7f:26:8f:ea:c2:50:99:bd:67:36:57:01:d1:8e:
c2:f7:90:a3:fc:b8:db:c4:bf:75:5a:0f:9b:ed:fa:5d:a7:32:
19:25:94:ce:d9:3a:71:8d:cd:e0:79:18:e1:d4:85:42:b8:b6:
6d:c8:ea:3f:00:7e:30:61:4b:c7:c0:82:d9:6e:8e:21:71:32:
76:0b:d5:34:0d:b5:70:fd:04:f4:67:5c:d8:c4:1b:1b:91:eb:
3c:1a:dc:fa:77:a1:86:6f:ca:b9:b7:fd:e1:03:59:d3:2e:1a:
3b:d8:2d:77:db:e6:de:ab:d7:37:d2:31:39:3e:c7:17:a3:dc:
65:62:5f:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhjk2VJRL6irgfN/Uzh6JxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDQzMTM0ZGNkMTZhYzE2ZjZjZDIwOWZhMWM3Zjk1OGNh
NmRiN2UwHhcNMjUwODAxMDMwMTAwWhcNMjUwODAyMDMwMTAwWjAzMTEwLwYDVQQD
EygwZTA1YWRkOTQzM2IyM2ZlN2FhYjAzYTA5M2U5NWRjZGJhN2IzN2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WAX4R3luVoPqViuTGTZQB5tX6KH
ez1hybBjOZyxLpR2uNCn4W/9Wnhw/3xsm+HOonqIzHpkdTzvK5UcYVyktlI/4ZBG
xJIjJpSK087bQFgNS68Mo5//uFswZC1tKwhAVr6cD+Ha0mySiwEmkdIaqybRq8Pw
fzPDl0cEDl+K/1ju2O2pm049zJmys84U3/4ZWH8IWxgBMpEHt3ivx1JD4tX4Np3H
YgBPfmmIj5X7v+EGt4574Q0NntrPCjjqv/bzG6aGMce3N9Z8NhncXa/gXg/iTNiV
qTyqS95NP/f3WFwQo1SQ3ljCWvD+dbi5KWNoMrFW3TFjfFpqcPSi38LyOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4FrdlDOyP+eqsDoJPpXc26ezf7MB8GA1UdIwQY
MBaAFH1EMTTc0WrBb2zSCfocf5WMptt+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVReE5OelJhc0Z2Yk5JSi1oeF9sWXltMjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxNTItNWM5MC00NTQ0LThiN2Mt
OWMxOTNlNzhlYzE4LzEvZlVReE5OelJhc0Z2Yk5JSi1oeF9sWXltMjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MTUxNTItNWM5MC00NTQ0LThiN2MtOWMxOTNlNzhlYzE4
LzEvZlVReE5OelJhc0Z2Yk5JSi1oeF9sWXltMjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6PE0PXn
GbDTT1zJ0oQ1uXw+voTEStIx0TP4ou6hX0eF8c9W/S0teI+YHCzG2qIumCZemv3i
4ZvLCjFRfW1Atdtcx9vpTh/fBBDZIAV23h8uAuMGwnS4b60nh6nGkthhJS0kUPPe
lPo8VHRla6ZkAZIjyg9RQqlxaeEXWeTxmfkMgX8mj+rCUJm9ZzZXAdGOwveQo/y4
28S/dVoPm+36XacyGSWUztk6cY3N4HkY4dSFQri2bcjqPwB+MGFLx8CC2W6OIXEy
dgvVNA21cP0E9Gdc2MQbG5HrPBrc+nehhm/Kubf94QNZ0y4aO9gtd9vm3qvXN9Ix
OT7HF6PcZWJfGA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:05 2025 by rpki-client