Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
File: f3BJpbLfBi_E4RlYQGU8P1kgySE.mft (raw, json)
Hash identifier: 9Y1zQJACbIwIUCWz/DXzWfXPuzM9Zc/umoL8SphDq/w=
Subject key identifier: 76:7D:C0:08:CB:11:A8:C7:9C:A9:2B:26:73:1E:40:D9:4E:38:E6:05
Authority key identifier: 7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
Certificate issuer: /CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Certificate serial: 0197D58810672F47FB2049E564B73967EC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
Manifest number: 1553
Signing time: Fri 04 Jul 2025 13:02:33 +0000
Manifest this update: Fri 04 Jul 2025 13:02:33 +0000
Manifest next update: Sat 05 Jul 2025 13:02:33 +0000
Files and hashes: 1: f3BJpbLfBi_E4RlYQGU8P1kgySE.crl (hash: wZeaiVpW3dHQmM2Pt+5CP0pzcWBdFSb3b5znluvt1Mo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:88:10:67:2f:47:fb:20:49:e5:64:b7:39:67:ec:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Validity
Not Before: Jul 4 13:02:33 2025 GMT
Not After : Jul 5 13:02:33 2025 GMT
Subject: CN=767dc008cb11a8c79ca92b26731e40d94e38e605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:5a:9a:08:d3:64:88:77:3a:e0:45:b2:52:
ad:62:e9:d8:6d:b4:7e:ab:e1:76:43:f7:3e:3e:81:
83:b2:e6:0a:43:25:2b:33:48:ae:15:3a:39:e0:41:
9d:ed:e0:69:e5:86:78:a1:fc:32:93:e5:07:26:b8:
ba:70:91:36:81:41:ba:19:ca:37:68:3d:30:c8:23:
54:8f:88:7c:20:be:b5:31:f8:e8:36:e4:36:5d:b1:
46:b0:35:85:27:4b:35:67:86:55:78:52:ed:c8:de:
3a:de:35:75:e9:18:29:e2:19:1b:54:c4:08:c1:ab:
b3:b2:d6:46:af:7b:4c:57:88:80:10:67:88:75:33:
15:19:e5:d7:31:4f:58:8a:2b:b9:6e:f2:a0:28:62:
45:01:47:a0:e2:70:cc:21:89:d3:d2:fd:de:91:e3:
ff:8f:d8:b7:a6:df:71:c6:78:73:8d:fd:21:f4:51:
ab:f2:ab:b8:fa:ac:3b:28:fc:0b:1c:75:21:ce:2e:
6d:77:ce:8c:ab:73:32:43:bd:92:c9:de:4b:fc:45:
7a:26:01:ca:3d:4a:3f:82:5a:d9:2d:7f:d3:a6:fe:
d9:21:46:63:96:a8:6c:d6:b3:dd:c7:77:bc:35:15:
44:15:10:e0:9a:bb:d5:8e:22:49:e3:13:6b:20:b9:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7D:C0:08:CB:11:A8:C7:9C:A9:2B:26:73:1E:40:D9:4E:38:E6:05
X509v3 Authority Key Identifier:
keyid:7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8b:55:74:05:00:6f:80:a4:c1:14:d0:29:4e:a3:87:5d:32:
0e:5a:be:8a:b2:9c:56:4f:73:dd:ad:3a:d1:a1:37:24:89:38:
44:f1:b5:28:ac:84:91:34:f8:6a:3e:c3:0b:cd:ce:99:2e:2c:
9e:ec:23:87:d6:00:9e:40:f4:11:db:12:dd:7d:2b:fc:82:1f:
f7:0e:89:b5:39:08:0e:25:53:87:97:91:93:41:92:bb:c2:21:
14:a5:9f:1c:18:f7:e0:22:eb:c5:ac:2a:39:27:43:a1:7a:f6:
fd:40:7b:6e:f5:e3:63:43:1e:b0:e6:69:24:4f:25:86:5d:8b:
cc:8c:84:46:ed:90:84:b3:74:cd:9d:f7:7e:25:8a:dc:9f:31:
36:ff:15:9e:93:f4:de:c5:16:98:22:0e:03:6e:cb:a6:4f:c3:
fe:38:c0:49:00:52:39:9d:ea:e7:de:b9:4e:ac:e8:b4:1f:43:
fa:41:7f:ef:a5:24:5d:ad:9f:ff:d0:52:b0:e7:cb:35:91:f6:
ec:48:ee:67:d2:7b:2a:70:87:12:b1:93:96:8a:8a:8a:36:68:
55:47:5d:29:6e:79:a5:b4:0a:78:67:b3:01:6e:4c:d5:a5:cc:
3c:be:22:7d:92:c8:4f:0f:d8:b5:ce:48:09:e7:cc:49:af:80:
a0:a0:9c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:48:53 2025 by rpki-client