Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
File: UA2xcVBSJTv1I_FAufVjehHV6a8.mft (raw, json)
Hash identifier: yqDwxkIgbAWiMdZ5VVHNVqpa5BchzgUQaNyOqRKqzPc=
Subject key identifier: 59:D4:EC:78:FE:44:26:71:1B:1B:75:C9:1A:75:F8:09:7C:37:6F:99
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Certificate issuer: /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial: 019A397F048828493F08F566FA9897A2A48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
Manifest number: 1701
Signing time: Fri 31 Oct 2025 09:00:16 +0000
Manifest this update: Fri 31 Oct 2025 09:00:16 +0000
Manifest next update: Sat 01 Nov 2025 09:00:16 +0000
Files and hashes: 1: JhOM2pckb8nFdq5Y2DwyyvABDcw.roa (hash: /pw012qMM2N9wpV1EMngiWd9fhFOR9+5XLur4rjuVfs=)
2: UA2xcVBSJTv1I_FAufVjehHV6a8.crl (hash: JGGHuEUFfCLMH+26v/PW4NzGqtZHPe7kfqzCBYPtu7I=)
3: pSWgXuERRm1Au1teAh3DmpY14k0.roa (hash: EnWqTAmFjlN0INK78CFEhUf7qBxCnt1KXQVV4wR/100=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:7f:04:88:28:49:3f:08:f5:66:fa:98:97:a2:a4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
Validity
Not Before: Oct 31 09:00:16 2025 GMT
Not After : Nov 1 09:00:16 2025 GMT
Subject: CN=59d4ec78fe4426711b1b75c91a75f8097c376f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:be:6c:eb:26:61:05:c8:fa:80:01:c5:e3:
c0:fe:63:7e:b2:88:46:95:87:99:92:dd:0c:ff:11:
b8:64:61:a3:79:8b:9f:15:05:1c:94:b2:5f:47:19:
d5:d4:5c:54:b8:dd:03:0a:4f:4c:eb:a1:04:0e:af:
d1:75:ee:52:ad:12:53:3b:73:24:44:7f:5e:1a:5b:
c8:a3:db:a7:f0:ca:c6:d1:5b:19:fd:d8:ff:0e:30:
50:9e:f9:96:d7:4f:04:57:a7:af:6b:7d:fa:b2:c8:
fa:b2:de:4e:ca:a0:5d:db:ad:58:fe:f8:7e:39:0a:
76:44:7d:c2:e1:09:f3:ab:69:56:f3:9f:93:05:d1:
bd:94:43:1f:b9:25:cd:7b:3c:4f:b9:d2:74:67:83:
af:0b:90:ca:65:df:12:a5:41:97:d4:2d:04:c0:ab:
80:cc:14:3a:4d:1b:b0:c1:a4:e0:54:66:3f:72:3a:
e3:26:80:4d:12:ae:f9:a3:13:79:6a:a1:df:85:32:
b2:52:b8:4b:6d:47:32:61:8e:4d:87:0f:46:d6:2d:
a4:7f:f5:13:9f:ac:d4:a1:7e:f9:58:48:c8:2d:e2:
f2:f2:96:d1:cc:d4:90:ff:88:e1:bc:43:d7:da:52:
fa:5d:dd:3d:6e:8e:ca:89:78:73:03:a1:a2:68:7f:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D4:EC:78:FE:44:26:71:1B:1B:75:C9:1A:75:F8:09:7C:37:6F:99
X509v3 Authority Key Identifier:
keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ef:97:04:0d:dc:ad:76:95:8d:29:3e:64:36:f8:2e:8c:4a:
a5:8f:b2:a2:69:7d:1c:90:30:5e:b0:83:39:a2:14:cc:76:a4:
46:48:b8:06:e7:d1:3d:8a:7a:5d:0f:e9:09:be:1d:3c:d6:17:
27:66:2a:e7:3d:d7:07:40:52:2a:74:25:f8:7b:cc:e8:1f:02:
c0:6d:38:2e:08:f1:6e:a3:fe:06:2c:e0:30:3c:9f:49:9a:3b:
45:dc:95:23:ad:4a:67:ad:9c:48:6c:0d:a0:6b:bb:d2:c7:45:
4a:5e:e6:80:50:88:2d:c7:36:b3:d9:55:36:ed:7a:9f:fd:b7:
09:89:73:b6:f9:0a:56:f1:01:41:c6:42:e4:f5:76:98:2f:7d:
2f:04:82:5d:75:fb:c3:23:33:23:5a:bd:79:f9:47:3d:27:11:
6b:ea:80:2b:af:6c:d2:4d:a7:0d:7c:57:5c:32:07:ae:5b:97:
89:00:fc:c1:e9:b7:0d:39:05:42:6a:51:b9:84:53:a4:e1:60:
85:c5:43:f1:c0:06:1e:db:9b:04:8b:94:bb:b7:65:87:c5:62:
36:03:5f:70:f0:6c:7e:43:5c:4e:fe:4b:56:ce:61:b3:4a:06:
77:15:1a:09:4d:49:6c:72:36:57:31:d9:b3:85:7d:4a:07:20:
6f:eb:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:46 2025 by rpki-client