Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6ac685-196b-41f1-9144-99d1ec9672b5/1/q26zFV4s1TUhGZun9ijDzbunz3k.mft
File: q26zFV4s1TUhGZun9ijDzbunz3k.mft (raw, json)
Hash identifier: 2VtKx+D4OM7N10HNyOYfcFFuuetXZTyGue65c6rSZ0Q=
Subject key identifier: 0D:4D:B8:5F:CE:9C:81:28:CB:02:89:36:50:30:2B:17:DF:73:2D:4B
Authority key identifier: AB:6E:B3:15:5E:2C:D5:35:21:19:9B:A7:F6:28:C3:CD:BB:A7:CF:79
Certificate issuer: /CN=ab6eb3155e2cd53521199ba7f628c3cdbba7cf79
Certificate serial: 019993A0C9331830B5E3C48B0112ACCA1383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q26zFV4s1TUhGZun9ijDzbunz3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6ac685-196b-41f1-9144-99d1ec9672b5/1/q26zFV4s1TUhGZun9ijDzbunz3k.mft
Manifest number: 03A2
Signing time: Mon 29 Sep 2025 04:00:11 +0000
Manifest this update: Mon 29 Sep 2025 04:00:11 +0000
Manifest next update: Tue 30 Sep 2025 04:00:11 +0000
Files and hashes: 1: fMx4JRDhT-4EqpiMKvHy8Mkz708.roa (hash: mZ+R87KV+PsrYlu7YWRXhHM7+ZqAJ6Tj0DDGQTn9KvM=)
2: q26zFV4s1TUhGZun9ijDzbunz3k.crl (hash: kxouhSAFZ1T4cYs7IZ/bJMYhw6J+AybLK931ky2/Q2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:93:a0:c9:33:18:30:b5:e3:c4:8b:01:12:ac:ca:13:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6eb3155e2cd53521199ba7f628c3cdbba7cf79
Validity
Not Before: Sep 29 04:00:11 2025 GMT
Not After : Sep 30 04:00:11 2025 GMT
Subject: CN=0d4db85fce9c8128cb02893650302b17df732d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:74:1e:4c:3f:bd:65:cf:cb:ba:d2:33:3a:
0b:ea:d6:7c:42:99:36:10:15:e1:f2:0e:f7:83:1a:
f6:e4:2f:eb:73:30:60:99:38:cd:a2:10:39:bf:0e:
dc:a8:2f:51:53:8e:b0:b2:e1:00:22:6b:28:2a:e1:
73:bd:3d:a6:c1:7b:24:07:2a:03:ba:b8:44:ed:de:
e4:c2:ac:34:d6:c7:05:e2:d6:69:6b:12:a0:66:96:
e9:28:5f:a6:4e:02:26:2b:15:41:bc:7c:3b:3a:02:
44:5b:c7:d1:62:ae:22:6a:bb:56:04:fd:ce:de:06:
89:cd:5e:5c:9a:48:0a:aa:64:ba:f8:37:d5:66:9f:
01:2b:b3:9c:1c:8a:a7:4e:a3:14:d8:fa:41:df:fa:
e8:30:96:31:93:52:1d:f3:09:30:3e:c2:d7:f1:09:
83:c9:a2:6f:55:26:68:65:13:9e:21:6d:13:9e:94:
97:94:8c:f6:8b:51:48:35:5c:f0:4a:a2:ba:fe:b0:
ed:00:21:28:26:8b:bb:da:6b:25:05:32:5c:e1:27:
27:0a:ca:f1:56:af:d1:76:d4:b2:c9:04:05:e7:31:
6d:b1:56:8c:70:47:c0:a8:05:44:a3:83:49:76:b2:
27:de:4e:11:b0:b0:88:d5:04:7b:54:fe:87:6f:46:
e4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4D:B8:5F:CE:9C:81:28:CB:02:89:36:50:30:2B:17:DF:73:2D:4B
X509v3 Authority Key Identifier:
keyid:AB:6E:B3:15:5E:2C:D5:35:21:19:9B:A7:F6:28:C3:CD:BB:A7:CF:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q26zFV4s1TUhGZun9ijDzbunz3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6ac685-196b-41f1-9144-99d1ec9672b5/1/q26zFV4s1TUhGZun9ijDzbunz3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6ac685-196b-41f1-9144-99d1ec9672b5/1/q26zFV4s1TUhGZun9ijDzbunz3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ca:62:3b:31:23:9f:25:ce:fb:2f:b2:fe:91:ac:62:64:9b:
eb:91:bd:05:12:ab:44:bb:b0:99:78:eb:23:d0:2b:44:14:ef:
33:97:c7:1d:a4:57:35:37:2e:a2:44:18:2e:ce:44:16:d4:4c:
4f:f6:0a:44:0b:76:17:22:c3:15:21:34:3f:d3:54:18:69:13:
74:6e:30:ce:d2:33:72:73:fe:e2:85:ee:98:e3:81:66:a9:2d:
22:de:df:48:c6:b1:fc:72:42:2a:2e:16:96:b5:26:29:93:1b:
08:81:e0:92:ea:83:cf:8c:08:ad:64:81:20:0b:c2:b7:d8:6e:
1c:95:20:d1:51:ea:da:51:77:39:8d:6d:f3:0c:7c:93:a9:d5:
db:a7:ca:2c:fc:05:ce:2c:0f:c1:97:61:44:78:d1:d8:23:24:
49:a7:6c:20:40:58:9b:7c:59:f4:67:89:2d:04:f7:6c:c4:38:
73:e3:a9:bf:91:37:55:b9:3d:88:7e:59:40:fa:0c:03:f4:fa:
db:ec:c4:89:67:39:5b:9f:dc:2d:a2:13:40:65:f7:00:72:b7:
67:3a:aa:7b:cb:9d:33:1f:b6:d1:96:5f:16:ec:b9:d1:c3:9f:
86:cc:0c:67:c6:07:81:04:24:09:58:21:e8:b3:5a:89:c3:0f:
1c:17:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:27:42 2025 by rpki-client