Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
File: s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft (raw, json)
Hash identifier: U+rdSf9hKbgSS+hO/BR5jezdGAqzH9s7jiuEWR5cCQ4=
Subject key identifier: 96:12:FA:1B:83:5B:41:21:5C:0F:1B:9A:EF:EA:A3:35:DA:51:64:9B
Authority key identifier: B3:BA:47:60:5C:F3:67:62:62:63:E5:7F:16:D0:D8:79:16:CE:DD:C8
Certificate issuer: /CN=b3ba47605cf367626263e57f16d0d87916ceddc8
Certificate serial: 019A00A38A891E742F5F76B1472DCDEF7F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
Manifest number: 0AF1
Signing time: Mon 20 Oct 2025 08:01:49 +0000
Manifest this update: Mon 20 Oct 2025 08:01:49 +0000
Manifest next update: Tue 21 Oct 2025 08:01:49 +0000
Files and hashes: 1: MIW8OPxvmMYCyg8uVd5d1waRYaw.roa (hash: wVmZOjUw0dfWDKll8B0zY8od3oDZ40RulCQ3hTtaIiA=)
2: s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl (hash: HErXf8MAkwVhrPjl1JgPCJUa9k6y2Dq87EbREzqnKZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:8a:89:1e:74:2f:5f:76:b1:47:2d:cd:ef:7f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ba47605cf367626263e57f16d0d87916ceddc8
Validity
Not Before: Oct 20 08:01:49 2025 GMT
Not After : Oct 21 08:01:49 2025 GMT
Subject: CN=9612fa1b835b41215c0f1b9aefeaa335da51649b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:02:be:d2:b8:80:ae:0b:7a:d6:b7:3b:2c:
76:ea:60:7b:60:c6:26:57:a0:3d:24:0e:37:74:6e:
fb:40:92:a6:ce:ce:82:0d:56:e7:74:b4:12:54:ed:
a9:5b:d3:4e:2a:f0:d1:b3:71:1f:5f:9c:60:a6:64:
34:9a:32:c1:27:5f:93:fa:42:2b:07:5f:2d:a0:71:
cd:b2:53:7d:04:a9:4b:09:28:93:03:39:bc:4a:29:
a6:54:e1:2e:4e:b5:e0:2a:7e:e6:3e:81:e6:1d:aa:
6b:7f:27:89:10:37:18:70:e1:de:82:2b:39:d6:f3:
dc:1f:08:3d:e0:a6:91:e5:2c:e1:23:b6:b1:00:99:
30:5a:d4:4f:02:14:6d:29:69:fe:8a:30:78:10:f8:
17:93:f5:b4:70:af:98:a7:e5:fc:bf:bb:8e:ad:26:
43:1c:6a:48:2c:fc:dd:8d:b3:2a:20:e0:72:4b:ec:
80:72:bf:82:a0:6d:06:81:8b:45:8d:77:fe:70:6c:
eb:1b:e6:f8:2f:81:4b:04:fb:6c:5b:e2:3d:f5:ce:
31:09:5c:da:63:f2:92:e6:0b:3b:3d:df:22:f9:cf:
c6:0a:23:10:d9:99:39:7a:17:5c:a8:28:a4:bd:2e:
5d:8d:e3:2e:09:49:65:19:5f:02:0f:2c:1b:a8:f7:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:12:FA:1B:83:5B:41:21:5C:0F:1B:9A:EF:EA:A3:35:DA:51:64:9B
X509v3 Authority Key Identifier:
keyid:B3:BA:47:60:5C:F3:67:62:62:63:E5:7F:16:D0:D8:79:16:CE:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2d:32:0e:b7:03:bc:42:c6:dd:a8:68:90:10:d2:7c:90:aa:
a8:b8:8a:03:e6:83:53:55:94:7f:8e:ce:83:3b:5c:8e:b5:39:
8c:bb:bc:2d:00:56:14:3b:96:b5:9f:f3:65:61:64:91:e8:0c:
51:70:8c:7a:89:f6:ab:7f:d3:3b:83:df:3d:f3:fc:3d:a4:82:
fd:e2:27:31:3b:40:7f:5a:24:64:03:01:44:cb:66:07:fd:99:
9e:b1:b6:11:91:eb:f5:fe:64:80:85:c3:09:af:03:31:4d:df:
f2:8f:d3:cc:ba:72:91:6c:14:61:c0:df:4e:30:01:5f:a9:ba:
62:b9:14:9d:61:73:33:a8:c5:a8:b1:e8:bb:83:14:38:80:f1:
5d:3a:36:e7:56:0a:fc:9f:41:34:e3:26:03:4e:2f:6d:4d:6f:
a6:e9:16:e4:0a:bc:77:da:2d:58:f4:a3:f3:9e:a1:0b:90:e0:
eb:2a:05:d8:05:2c:e4:de:35:a9:d2:59:94:42:19:3b:82:b0:
36:b9:bf:31:75:6c:bd:10:7b:4d:88:f9:95:21:ec:4d:8d:b5:
02:d5:c8:73:dd:a2:06:b6:c7:4e:cf:74:da:a1:c2:27:e6:dd:
aa:ec:23:37:c8:3d:77:b2:92:7f:6b:2e:ba:b4:0c:d9:96:67:
95:98:2a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:56 2025 by rpki-client