Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
File: 0z3ubd_dv6ge6rxEHFPnAvklgWU.mft (raw, json)
Hash identifier: GLxM6XS9MZASIOtgU8J9NB94pw+e/AivlAa8hFfpXQI=
Subject key identifier: CF:C8:43:A3:55:78:A9:69:B9:57:16:DC:5F:A3:AE:6B:86:32:5A:87
Authority key identifier: D3:3D:EE:6D:DF:DD:BF:A8:1E:EA:BC:44:1C:53:E7:02:F9:25:81:65
Certificate issuer: /CN=d33dee6ddfddbfa81eeabc441c53e702f9258165
Certificate serial: 0198CB6EE968228473BDBC2DC9C94C6DEB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
Manifest number: 1406
Signing time: Thu 21 Aug 2025 07:01:40 +0000
Manifest this update: Thu 21 Aug 2025 07:01:40 +0000
Manifest next update: Fri 22 Aug 2025 07:01:40 +0000
Files and hashes: 1: 0z3ubd_dv6ge6rxEHFPnAvklgWU.crl (hash: zs5domQvFVafYZYub03Foed8Sp8zOnrxIthSK+ol+PY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:6e:e9:68:22:84:73:bd:bc:2d:c9:c9:4c:6d:eb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33dee6ddfddbfa81eeabc441c53e702f9258165
Validity
Not Before: Aug 21 07:01:40 2025 GMT
Not After : Aug 22 07:01:40 2025 GMT
Subject: CN=cfc843a35578a969b95716dc5fa3ae6b86325a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:7c:0e:a1:a2:97:45:74:9c:ce:4d:43:e4:
9e:a7:24:ca:36:26:e4:7d:be:78:7b:fe:98:1c:16:
cc:70:76:fc:4b:ed:9d:c6:c1:6c:d7:e9:52:0f:e4:
41:23:b8:86:0e:29:0d:8b:bd:73:5f:9d:a2:82:5e:
91:a8:cf:16:f7:f8:8e:70:40:9e:c6:23:53:2c:0d:
8e:ce:dc:fd:d0:e3:c7:6f:15:4c:30:6e:7d:bc:d4:
0d:57:a8:6c:56:b2:b8:63:99:e1:a5:ab:05:c9:e5:
c4:ef:a2:e2:95:1e:55:3e:2b:34:b8:06:09:72:ea:
93:0a:09:30:bd:37:53:8a:27:34:0e:db:7f:42:2e:
53:f8:e7:f4:6d:c7:bc:9c:f0:d6:10:5e:73:81:f8:
d6:ee:99:e1:fb:6f:c3:b8:f5:b2:83:39:11:35:d9:
a8:77:df:87:b5:5e:9d:09:65:b0:39:42:8b:8e:66:
3a:ad:09:2d:e4:3c:21:c5:cf:03:11:94:3d:8f:2b:
e9:ec:27:59:db:69:25:c0:6b:5b:36:f4:80:20:ed:
01:90:06:d3:17:0c:8c:de:da:ab:c9:6c:bb:30:a1:
1f:82:c5:93:d1:77:9e:c5:9b:eb:ed:1d:2e:0b:f4:
c6:9d:49:65:cd:96:d1:23:83:3a:ed:54:bb:de:d8:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C8:43:A3:55:78:A9:69:B9:57:16:DC:5F:A3:AE:6B:86:32:5A:87
X509v3 Authority Key Identifier:
keyid:D3:3D:EE:6D:DF:DD:BF:A8:1E:EA:BC:44:1C:53:E7:02:F9:25:81:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:28:c4:4b:e8:4e:d0:3f:f8:4c:3e:78:3c:31:08:01:8b:ae:
26:da:84:65:c7:0f:7a:b4:19:4c:ad:a9:19:e9:0d:cf:02:49:
9c:02:ae:17:6d:1f:8c:72:40:47:ae:f3:55:54:e2:04:e3:25:
8c:20:92:db:e0:1e:a7:90:12:5c:a4:26:92:5e:f1:37:bd:e8:
72:45:4c:83:30:d3:6c:fc:36:93:08:da:8c:3e:55:b6:11:02:
71:50:4b:b2:27:3e:25:c1:2c:7b:44:a7:9a:d1:16:b0:52:ca:
0c:1b:4d:15:8c:f9:03:cc:a9:80:a2:08:80:9e:0b:19:a9:64:
5b:d9:41:f7:4e:2d:48:e1:54:11:79:64:c9:12:ed:60:1a:7f:
35:5a:74:e9:78:51:41:8e:24:1e:34:ee:8d:6e:76:44:dd:18:
1a:89:dc:12:c1:45:55:46:db:98:d0:0a:15:6c:f0:45:9b:68:
36:de:e9:18:5a:25:00:b9:5e:bb:3e:25:28:e2:a2:6b:34:a1:
79:e3:95:3a:3e:de:d9:5d:04:a7:3f:78:69:6a:d1:1c:dd:d0:
10:a0:46:9f:fc:aa:63:16:0d:2e:dc:3a:2a:74:b3:db:d3:bc:
7d:a6:ae:7c:e4:5d:72:77:9b:a4:23:60:13:09:d3:3a:05:b3:
38:f2:27:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:43 2025 by rpki-client