Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
File: 1UCrGFzzmd5s2zykXe0pa2vmj-o.mft (raw, json)
Hash identifier: 2vXF5R2SXhxMIS86EUsoGzWOOSt53tGd5f7KC210pxA=
Subject key identifier: 4B:06:B6:47:BF:D9:C8:25:7F:B8:C4:23:52:A3:B8:80:A7:8C:53:A2
Authority key identifier: D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA
Certificate issuer: /CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
Certificate serial: 0197F2B53B59F7A7A4376CDD994FC7ABF904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
Manifest number: 15D6
Signing time: Thu 10 Jul 2025 05:00:52 +0000
Manifest this update: Thu 10 Jul 2025 05:00:52 +0000
Manifest next update: Fri 11 Jul 2025 05:00:52 +0000
Files and hashes: 1: 1UCrGFzzmd5s2zykXe0pa2vmj-o.crl (hash: wzR2v9hY2+TI/qN+aeXx4H/qQWbaUIXV3GUszQ/7vVk=)
2: evwk9Zfy0oSug_OT-JqAYLVFN48.roa (hash: p8vwbzaWZAlgsI4s0YE3pDc8vzWrcDuiDp7ZJjKpleM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f2:b5:3b:59:f7:a7:a4:37:6c:dd:99:4f:c7:ab:f9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
Validity
Not Before: Jul 10 05:00:52 2025 GMT
Not After : Jul 11 05:00:52 2025 GMT
Subject: CN=4b06b647bfd9c8257fb8c42352a3b880a78c53a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:d4:b7:69:bd:1a:c3:63:0d:95:26:ff:43:
09:02:b9:38:aa:1e:3f:e7:e1:9d:be:ae:2f:03:c5:
94:72:f1:e0:6d:c5:51:d6:d9:79:39:82:1c:a0:46:
ef:1d:cd:07:89:be:d0:1e:0c:59:10:b4:42:98:aa:
f5:3f:20:9e:7f:72:5c:ef:b4:6e:f5:9c:d9:d9:e6:
15:fb:15:24:04:9a:03:71:2f:13:1f:ff:4f:d7:3c:
12:2e:7c:10:42:11:c9:87:47:2e:f8:ec:72:c1:ed:
f2:39:02:fe:39:db:e1:c0:66:8e:5a:42:90:d8:22:
99:74:17:ca:d8:5f:58:2d:9d:62:e9:a1:0e:10:cb:
96:95:8e:f5:8f:6a:5d:e3:8c:38:99:b5:63:91:29:
34:f9:99:9e:4b:31:16:31:b2:8e:24:35:03:44:91:
20:28:c1:bf:8e:e4:03:fb:ce:ce:22:a6:49:6f:96:
d1:e3:21:05:a2:25:e2:b5:db:62:71:3d:f4:88:6c:
8f:f5:8f:6a:6a:03:59:15:1d:22:ce:51:0f:fc:97:
ec:b4:76:18:19:2f:29:72:b8:18:a7:5b:6a:09:7b:
68:ee:85:5c:8b:58:e3:44:c2:c2:74:0e:70:7c:75:
fe:83:5d:79:ce:b7:a3:d6:ea:7f:ae:1b:29:78:c0:
60:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:06:B6:47:BF:D9:C8:25:7F:B8:C4:23:52:A3:B8:80:A7:8C:53:A2
X509v3 Authority Key Identifier:
keyid:D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:04:11:60:0c:31:84:b4:a0:8c:55:8b:05:69:4c:38:37:b2:
4a:6d:f5:99:b4:3e:73:81:41:a8:89:f5:dd:23:ab:62:4f:e7:
ab:ff:26:1a:e3:9b:5f:71:04:f8:28:1c:c6:00:be:28:f4:df:
e3:10:d5:26:b3:ec:8d:a1:07:73:c0:c8:b3:e4:ac:ed:1b:2e:
8c:4e:3c:32:04:25:1f:fa:d4:47:82:e2:5e:45:83:5f:71:0d:
c8:ac:19:91:a4:9b:49:84:2b:12:3a:67:30:57:5d:a3:01:34:
14:60:26:0c:9b:a6:d5:77:94:23:b0:79:b4:63:7d:fc:07:c9:
4c:29:cf:87:6b:57:43:59:a3:24:57:a6:3c:bd:33:02:7a:af:
5d:92:83:ad:0b:3b:e8:94:af:20:51:4a:58:b1:11:dc:0f:5a:
48:18:27:4e:43:1f:20:c0:f9:41:0a:de:bb:a1:41:5c:84:d3:
b3:97:0d:fd:44:33:ba:60:ac:ab:d5:ae:b3:83:fc:1b:e5:61:
2b:ee:58:75:0e:ea:cc:57:99:52:92:ff:59:63:fb:dc:a1:cf:
2a:fb:ad:90:7c:8e:c8:29:44:ff:d2:3f:f7:5f:5b:ab:a6:bf:
d3:9b:60:ca:1a:ec:bc:2a:ff:ca:1a:5a:89:59:f0:df:36:55:
72:e7:2d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:51 2025 by rpki-client