Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b66a81-3e89-4392-9644-6c561ab82ae3/1/4H6guRTmNDEcyfDvoUSPy3l9OJw.mft
File: 4H6guRTmNDEcyfDvoUSPy3l9OJw.mft (raw, json)
Hash identifier: aNfWHETrEYKEepzPz/k06UwtWrEeBMel7ihkfR1Oj2g=
Subject key identifier: 92:39:C1:AF:68:B4:3F:25:AF:FE:A5:D8:45:B1:A2:68:4B:86:07:F5
Authority key identifier: E0:7E:A0:B9:14:E6:34:31:1C:C9:F0:EF:A1:44:8F:CB:79:7D:38:9C
Certificate issuer: /CN=e07ea0b914e634311cc9f0efa1448fcb797d389c
Certificate serial: 019854FBBA0F1478CD3B340411434290E55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H6guRTmNDEcyfDvoUSPy3l9OJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b66a81-3e89-4392-9644-6c561ab82ae3/1/4H6guRTmNDEcyfDvoUSPy3l9OJw.mft
Manifest number: 0CD4
Signing time: Tue 29 Jul 2025 07:00:39 +0000
Manifest this update: Tue 29 Jul 2025 07:00:39 +0000
Manifest next update: Wed 30 Jul 2025 07:00:39 +0000
Files and hashes: 1: 4H6guRTmNDEcyfDvoUSPy3l9OJw.crl (hash: nEzHVUFylIgYuVC+zJNWEU10I9SqPG6KcDtwaQsTrA8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:ba:0f:14:78:cd:3b:34:04:11:43:42:90:e5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07ea0b914e634311cc9f0efa1448fcb797d389c
Validity
Not Before: Jul 29 07:00:39 2025 GMT
Not After : Jul 30 07:00:39 2025 GMT
Subject: CN=9239c1af68b43f25affea5d845b1a2684b8607f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:98:f0:02:cd:35:db:97:3b:0a:ba:de:7c:
46:1d:11:c2:44:2a:c1:93:a7:3b:3d:b1:d7:61:ec:
b0:f4:82:a8:fd:e5:d2:f9:49:4c:93:e3:9d:4c:1b:
5c:0d:4c:0b:c1:f6:4b:22:b4:46:00:e9:4b:b8:fd:
27:39:66:ee:0d:6c:c0:92:63:46:45:dc:d7:31:d5:
df:32:10:08:15:1e:c3:82:1f:4e:c3:4e:31:ab:df:
30:a6:4d:93:1b:e8:7e:a9:be:07:c5:23:42:d4:b9:
bb:7a:29:a1:2b:9a:fc:ba:b3:b1:70:d2:0e:f3:78:
60:4c:ff:68:9e:b9:26:a9:be:66:82:a2:0b:5d:0a:
05:0e:6e:1e:b2:5a:35:e1:f9:36:0f:2a:3c:01:02:
c9:1c:9f:42:22:4f:cf:dd:40:a2:45:9e:74:e2:8e:
0a:90:7d:7d:7b:59:89:89:dc:17:15:20:68:61:7e:
87:f5:49:62:af:f0:27:fb:b7:b9:e9:61:62:c1:c8:
42:1f:82:96:d5:c6:04:7c:0d:4d:64:b0:58:0d:22:
49:b3:51:71:f5:b7:4e:ea:7e:46:1a:89:12:44:53:
89:9c:54:6b:b0:51:0d:8f:ca:10:b9:fa:81:62:9c:
50:d3:0f:fa:f6:7c:fc:d2:46:f4:72:4c:0a:61:1e:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:39:C1:AF:68:B4:3F:25:AF:FE:A5:D8:45:B1:A2:68:4B:86:07:F5
X509v3 Authority Key Identifier:
keyid:E0:7E:A0:B9:14:E6:34:31:1C:C9:F0:EF:A1:44:8F:CB:79:7D:38:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H6guRTmNDEcyfDvoUSPy3l9OJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b66a81-3e89-4392-9644-6c561ab82ae3/1/4H6guRTmNDEcyfDvoUSPy3l9OJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b66a81-3e89-4392-9644-6c561ab82ae3/1/4H6guRTmNDEcyfDvoUSPy3l9OJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5c:5d:6c:2e:d7:94:ae:7b:28:b5:bb:f7:1c:f9:58:06:6d:
4c:ae:e9:9a:ff:f2:9c:16:6e:95:f4:4a:24:20:1a:19:81:62:
c5:0a:76:bd:3b:18:ef:e0:89:ca:de:f1:43:d0:d2:52:be:56:
10:bd:4f:38:dd:93:ef:b8:96:02:9e:fa:7b:33:20:47:03:2e:
6e:b6:aa:01:e8:9c:bc:5d:f8:00:5c:ce:0f:16:45:6f:e6:9d:
40:17:33:34:ef:44:5c:b6:b3:3f:78:9f:b3:7d:23:6d:80:4b:
90:ca:ef:f3:0c:79:e1:70:6f:3a:4c:0d:f4:15:ef:42:70:07:
c3:fe:f4:d7:96:6f:e6:6d:42:6c:05:14:b6:e3:cd:0c:0a:3d:
56:af:18:fc:0f:6e:42:d8:36:d8:6f:25:f7:18:3c:61:bc:d2:
8a:71:63:fe:4a:37:c8:c2:28:17:e2:f7:d1:39:6d:5f:b4:bd:
3c:60:d9:d2:76:02:67:3f:1c:c4:82:a1:8b:fd:c4:7b:a7:29:
b0:da:1c:46:ee:e4:50:52:62:d7:b8:50:fd:a4:68:5f:c3:91:
dc:ce:a3:41:86:c4:0e:4e:5e:7b:49:d1:19:54:73:ae:f5:04:
1b:19:2f:7c:92:f2:d3:a6:3e:76:23:a6:25:74:76:4b:a2:4a:
78:ba:e9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:31 2025 by rpki-client