Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
File: mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft (raw, json)
Hash identifier: fykmSyEYL36nwSZL9e8u5L0Y/m4A2ugHxKvgrqq+yCs=
Subject key identifier: 98:98:75:89:A8:69:9B:CC:A4:79:6F:04:6C:BA:F6:86:E0:DF:0B:2B
Authority key identifier: 99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
Certificate issuer: /CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Certificate serial: 019799A90AA7F1F3B309FA6BCBC625BDA5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
Manifest number: 049A
Signing time: Sun 22 Jun 2025 22:01:21 +0000
Manifest this update: Sun 22 Jun 2025 22:01:21 +0000
Manifest next update: Mon 23 Jun 2025 22:01:21 +0000
Files and hashes: 1: VANQMbS9wJfHpjxNeVPpV7NpFIQ.roa (hash: UNFy8NT1hW32lKijy2cCpAEH6HPMdcOUxJumaoALuL8=)
2: mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl (hash: xzr5G3TNVgcP28TebzHTA33J7S2YNJ8EM5Hjc6iapI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:99:a9:0a:a7:f1:f3:b3:09:fa:6b:cb:c6:25:bd:a5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Validity
Not Before: Jun 22 22:01:21 2025 GMT
Not After : Jun 23 22:01:21 2025 GMT
Subject: CN=98987589a8699bcca4796f046cbaf686e0df0b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:75:30:35:99:b0:fb:49:01:82:f0:6d:ea:
b1:7f:ff:3a:7d:7d:3e:b6:39:16:5b:2d:90:50:c6:
b7:fc:7d:5e:fe:50:8a:75:07:c1:6e:6f:63:18:8b:
3f:3a:4c:3b:fa:a9:67:91:9b:b5:60:01:34:69:79:
2a:ea:cf:88:83:d1:ae:ae:81:31:98:58:96:1b:6a:
7f:6f:62:c8:aa:6c:cd:a9:e5:7e:64:50:90:f4:89:
b6:b9:ac:02:b0:75:1e:04:24:26:61:51:7d:13:12:
45:b1:96:f3:59:0e:28:96:87:4e:e0:ea:db:f9:05:
7e:dd:7e:83:a0:5b:36:3a:0b:89:3c:ca:e6:59:14:
39:68:14:58:d2:9a:1e:ba:1c:c4:72:e5:ab:e6:5d:
d0:4d:7e:28:52:f1:1d:04:22:f3:73:19:5b:43:43:
0b:9e:e5:6e:91:25:d7:fb:d6:d4:81:c7:2b:12:60:
6d:fe:a5:ce:e7:df:6f:30:62:ac:77:49:18:22:e0:
6c:6e:f5:af:84:e9:57:e3:02:2a:d1:11:c5:fd:24:
e4:a4:c2:3b:9b:6c:fb:93:a6:c0:0d:fa:d9:9c:37:
ac:a5:3b:ae:51:8e:b6:f3:21:56:60:3a:2b:92:75:
e7:e2:e3:91:4f:64:5f:e5:25:36:b8:95:93:c3:87:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:98:75:89:A8:69:9B:CC:A4:79:6F:04:6C:BA:F6:86:E0:DF:0B:2B
X509v3 Authority Key Identifier:
keyid:99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5d:55:97:4b:86:18:b5:bf:10:0a:0b:b1:5e:be:cf:16:74:
b0:89:2c:93:2b:92:9d:40:d1:72:a8:88:20:d8:d0:3e:80:9f:
61:33:49:69:72:dd:a3:7f:bf:26:2c:b7:11:4b:fb:4c:29:95:
1d:a8:3d:34:3e:8c:fe:ce:c2:0b:81:5f:db:ee:db:77:8a:61:
ff:8b:7c:63:84:a6:31:aa:47:86:a3:74:53:1a:fd:5f:8b:44:
5e:bb:fe:cd:70:00:65:10:25:a4:3b:37:fb:ab:db:79:46:75:
a8:1f:f9:a4:a7:49:fc:1d:7d:f7:a1:ba:d0:a4:a3:7c:81:a4:
a9:d3:ce:cf:3e:f3:e7:ac:88:d8:13:0c:ab:98:29:78:5f:6d:
47:75:42:3d:15:9f:4a:4a:bb:d1:db:dd:25:49:a0:96:14:6b:
0b:0e:3f:42:49:01:9a:cd:7f:f5:c8:23:03:e1:b7:f2:42:5a:
60:f3:01:ca:ab:f0:e3:6f:04:45:5f:cd:a8:53:d0:b1:a4:88:
1e:2f:a5:7f:2a:34:43:70:a1:d3:65:49:d1:d9:2b:f4:6a:fa:
1a:22:95:1d:43:12:89:dd:73:31:9e:78:81:ec:ad:48:dc:e4:
48:fa:48:2c:66:c6:6c:15:7f:57:54:65:c1:3f:2c:6f:5c:8e:
27:b8:4c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:24 2025 by rpki-client