Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
File: cp5GIMWZHgbhzAVunN0d4reViHM.mft (raw, json)
Hash identifier: lsTSgNRuVx5t9GgPYAV5pvgARSS540hyzm0AXH4ni/g=
Subject key identifier: C3:50:6E:60:01:EB:65:8A:E5:56:F0:32:CE:FD:7F:41:CD:85:1A:30
Authority key identifier: 72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
Certificate issuer: /CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Certificate serial: 0198C4FF521BC6B56BAC0FD25685B2FF5943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
Manifest number: 0497
Signing time: Wed 20 Aug 2025 01:02:03 +0000
Manifest this update: Wed 20 Aug 2025 01:02:03 +0000
Manifest next update: Thu 21 Aug 2025 01:02:03 +0000
Files and hashes: 1: cp5GIMWZHgbhzAVunN0d4reViHM.crl (hash: r7CbFq//QIJQAlAbkZg9PCfcNsFC2pryrv+IizrLBHQ=)
2: sFvs_prtwKu42YxR1lLYA6s-LfY.roa (hash: B//Muv+RgtWM9+j4D4TMR775xHt5nXHGTfaVRYpWbRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c4:ff:52:1b:c6:b5:6b:ac:0f:d2:56:85:b2:ff:59:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Validity
Not Before: Aug 20 01:02:03 2025 GMT
Not After : Aug 21 01:02:03 2025 GMT
Subject: CN=c3506e6001eb658ae556f032cefd7f41cd851a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:15:b2:db:13:cf:50:4c:fd:a1:d3:73:e5:
1e:0f:6c:35:8a:9d:05:c2:26:bc:7b:ff:85:8a:e0:
ea:b2:33:de:fb:ae:ae:80:4b:1b:d8:aa:b0:e1:36:
0a:92:2c:1a:f1:c4:66:c2:85:b2:eb:1f:e5:13:77:
53:0a:68:18:18:03:4a:c6:d8:5f:f3:c3:14:15:80:
ea:77:24:f0:31:47:8f:86:32:be:82:f6:91:96:66:
00:57:8e:ff:76:ae:b3:a0:ca:64:fe:d6:d7:36:ff:
49:d6:3c:69:85:bd:70:37:f8:56:37:99:fd:90:46:
9f:69:b8:48:94:ea:a3:7b:28:97:bd:35:8e:cc:c3:
d9:6d:be:0d:44:d3:5d:a6:3f:8c:f0:85:35:2a:7c:
f3:39:c9:13:45:0d:e8:42:08:5b:12:6e:f1:2c:65:
49:57:79:6e:ef:f8:e2:ad:c0:cc:f4:cb:85:89:41:
57:70:cd:1c:a1:3b:35:17:05:ec:19:53:33:7a:bd:
b9:6e:65:f6:01:62:55:e1:50:2f:c5:95:7f:e9:d1:
1a:4c:30:23:fe:ff:58:8d:e2:da:54:0b:22:89:28:
ff:30:96:05:d9:8a:d3:e5:cd:64:3e:ba:f3:13:ce:
c1:b7:8d:53:7d:19:9b:7a:38:a5:a6:e3:4c:f5:0d:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:50:6E:60:01:EB:65:8A:E5:56:F0:32:CE:FD:7F:41:CD:85:1A:30
X509v3 Authority Key Identifier:
keyid:72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f7:69:fd:d9:f2:cd:08:14:69:3c:b6:b2:51:9a:65:95:ad:
f9:dd:bf:c7:15:19:04:c6:ea:c1:2d:5d:98:de:29:4c:71:e7:
cc:27:ea:7d:0f:da:8c:08:89:06:b1:9f:41:a2:eb:16:d2:56:
14:49:4a:29:31:dc:bc:2e:c3:68:91:b3:28:3d:be:f2:fe:f0:
4e:66:ca:f5:68:54:fb:0f:80:e6:b1:94:03:27:15:7d:43:77:
c7:42:eb:79:9b:84:c6:ab:4a:0b:fc:85:24:02:71:fa:e2:40:
a6:44:9b:d7:f1:9b:15:22:db:0a:c4:e3:34:cf:dd:82:24:9a:
21:29:c9:4e:b8:19:c8:b8:c0:ec:8a:f8:fb:2e:87:57:b3:a0:
99:fa:34:cc:d2:06:07:c7:a8:ee:d7:00:31:10:c9:e3:33:03:
39:73:4a:3b:9b:95:ba:39:87:54:2b:c5:c4:0f:a6:a2:29:ed:
48:ed:79:b6:e9:13:93:9c:f1:7a:18:4d:b7:e2:5a:75:7a:83:
bd:1b:4f:be:9e:ba:55:cd:5f:5b:77:42:2e:0c:4a:43:84:d2:
e1:b7:c2:a9:8c:0f:f8:39:ca:67:b1:91:ba:32:66:e4:a9:56:
8a:12:ad:d2:04:da:d2:b8:34:66:a3:ca:28:dd:26:20:a1:4d:
6a:3d:78:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:45 2025 by rpki-client