Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
File: ardZKec1zmWma9gtyotlHZhWzSw.mft (raw, json)
Hash identifier: zW24kJXjfD0v70+Do0H5St0nkJanw090eEns56c3/2k=
Subject key identifier: 09:D8:E7:9F:2F:5D:4C:3C:73:17:3E:DC:16:8C:64:F7:EF:17:A0:33
Authority key identifier: 6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C
Certificate issuer: /CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
Certificate serial: 0198EE67EC537C1A8830E8A4A006E0AD276C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
Manifest number: 12A4
Signing time: Thu 28 Aug 2025 02:00:44 +0000
Manifest this update: Thu 28 Aug 2025 02:00:44 +0000
Manifest next update: Fri 29 Aug 2025 02:00:44 +0000
Files and hashes: 1: ardZKec1zmWma9gtyotlHZhWzSw.crl (hash: I+sptEjmu98iMDOTqr7+9Aeep0xsOLZGUUojebEiPTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ee:67:ec:53:7c:1a:88:30:e8:a4:a0:06:e0:ad:27:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
Validity
Not Before: Aug 28 02:00:44 2025 GMT
Not After : Aug 29 02:00:44 2025 GMT
Subject: CN=09d8e79f2f5d4c3c73173edc168c64f7ef17a033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:05:f3:d8:de:36:a9:a3:52:3b:f3:55:2b:
a9:16:ed:e2:6c:8b:fe:a1:61:59:94:c8:7f:b6:c3:
67:08:e2:97:11:68:87:fe:4a:e9:e9:27:d9:89:ea:
a8:a7:d9:c6:3b:25:fb:58:49:56:a3:6a:f6:0e:b7:
56:2f:00:67:f2:ba:7c:9b:38:5a:6f:cb:12:24:77:
4d:4c:b4:13:7b:a8:44:de:cc:be:7f:1a:fa:4d:1a:
4a:dd:3b:68:2a:c5:1a:b4:7c:d1:a0:a9:fb:88:c6:
0d:e9:91:86:9b:73:af:0c:d1:57:ea:a7:76:9f:f1:
83:e8:aa:e2:0d:08:a6:ec:76:90:8f:3b:1d:0f:e5:
2b:2c:58:fa:2c:60:3d:ca:ad:bc:14:e6:cf:2b:1f:
15:f9:a6:0b:01:09:62:dc:7e:fd:38:de:78:c6:b0:
95:7c:50:7a:8e:45:b4:15:f6:63:2a:07:aa:7c:e7:
d5:50:04:83:9d:b5:38:3e:6b:7f:21:57:6e:32:e0:
a3:db:aa:d7:cb:51:16:c3:a3:8c:a9:30:12:ee:f9:
b9:cc:f7:f8:04:86:22:47:e2:bc:60:96:88:39:4c:
a1:cc:4c:da:50:36:44:64:ab:7a:1e:38:4c:ae:86:
e4:80:a9:03:d4:81:80:e5:18:fb:56:4a:e8:e4:36:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D8:E7:9F:2F:5D:4C:3C:73:17:3E:DC:16:8C:64:F7:EF:17:A0:33
X509v3 Authority Key Identifier:
keyid:6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:90:81:fc:c1:fb:5a:98:b3:46:8a:3a:cc:36:63:c7:62:e6:
db:8f:de:c9:31:d6:04:53:c4:ee:6a:d8:5e:97:c2:72:da:30:
87:7c:b0:a6:de:b9:30:36:03:15:5f:ba:04:d1:e0:67:ce:26:
eb:9f:37:c3:54:fe:3a:6f:19:0a:62:c5:5a:fa:c4:6a:45:fd:
ac:08:17:d6:56:d9:fc:e6:a0:b0:ea:d3:ae:05:b3:3a:09:a7:
2a:9b:e4:41:89:a8:a1:c3:73:1f:7e:54:23:24:25:df:5b:e1:
ca:99:53:13:0d:48:69:55:f8:9a:11:30:92:86:e5:17:6d:3e:
11:ef:4e:64:77:df:b1:7d:c2:ed:3f:aa:04:c3:be:34:25:e7:
2c:78:14:06:2a:a6:e7:af:96:05:f8:e4:42:15:19:0e:40:e3:
e6:14:7d:8b:1b:31:f4:5c:f2:bb:e9:84:71:e5:c3:40:ef:70:
d4:d1:6b:23:4f:08:7f:f8:aa:7d:98:4c:54:a7:1d:2a:b0:88:
9b:5a:38:fd:69:54:be:98:07:88:ab:4b:1a:32:20:dc:38:10:
c3:43:f6:e8:c7:0b:2e:5b:21:fc:3c:04:52:fb:e5:86:14:dd:
d8:15:fe:80:4a:28:06:75:26:b2:2a:90:ab:48:d4:e5:fc:e3:
99:90:b9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:42 2025 by rpki-client