Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
File: z3F496AF-Td59GjTS628zBuc6lA.mft (raw, json)
Hash identifier: XurZZyW1L0jMBvt+7q77PWlnEYJCSnz7BFc4sEVlvus=
Subject key identifier: 82:AE:BB:2B:AF:1F:00:1A:E4:23:0A:F9:43:7A:A7:94:47:04:8C:B4
Authority key identifier: CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
Certificate issuer: /CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Certificate serial: 0199EB2E00AD8C81B11DDD6B64C9F0FA81EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
Manifest number: 0F97
Signing time: Thu 16 Oct 2025 04:01:24 +0000
Manifest this update: Thu 16 Oct 2025 04:01:24 +0000
Manifest next update: Fri 17 Oct 2025 04:01:24 +0000
Files and hashes: 1: z3F496AF-Td59GjTS628zBuc6lA.crl (hash: sF0tRVBr0bGKVs7a4MUoWfOCWUQ2Xxhms4iSZXELgng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:eb:2e:00:ad:8c:81:b1:1d:dd:6b:64:c9:f0:fa:81:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Validity
Not Before: Oct 16 04:01:24 2025 GMT
Not After : Oct 17 04:01:24 2025 GMT
Subject: CN=82aebb2baf1f001ae4230af9437aa79447048cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:91:2d:72:31:bb:71:95:22:e1:fb:cf:b4:
91:96:3d:9d:3a:04:5e:50:c6:61:28:ba:17:07:e1:
d3:4b:ae:a1:05:cf:84:55:db:f8:a5:ac:73:35:6d:
f7:aa:88:a1:39:1d:99:42:69:a6:0a:8c:97:c6:4c:
65:17:6c:d3:77:58:27:bf:df:26:4f:0c:9e:76:d1:
e9:c4:7c:88:a1:30:2e:02:b7:c9:04:c5:25:05:40:
bf:83:e1:ab:40:7c:13:5d:cb:27:f7:04:62:e2:4b:
d4:76:47:4a:92:2c:b4:11:1b:80:b8:5d:44:3f:fe:
c0:f6:3b:be:0b:21:c7:95:95:f4:83:e5:c0:0f:6b:
65:3f:a4:39:37:5d:c8:d6:f4:dc:f4:fa:36:7c:36:
5e:18:8e:d5:95:2a:c2:9e:df:5b:a3:13:3e:4d:03:
4f:9f:09:f7:67:30:63:e9:5a:f6:0c:16:a7:4a:ea:
3c:e8:47:9d:da:98:ca:7e:d5:26:90:41:37:49:a7:
c5:8c:fe:80:2f:1f:54:db:eb:a1:f7:0f:e4:f8:82:
f6:a7:42:af:99:f9:74:92:2e:ec:1c:a7:d1:22:6b:
f0:97:45:61:7b:e2:e5:e9:d7:66:fc:dc:e1:7e:db:
ec:10:b9:2f:b8:50:67:3e:0c:39:fa:2d:55:7b:8a:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AE:BB:2B:AF:1F:00:1A:E4:23:0A:F9:43:7A:A7:94:47:04:8C:B4
X509v3 Authority Key Identifier:
keyid:CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fd:b3:a5:cc:df:c2:b8:d1:4f:6f:eb:ef:b2:83:9e:a9:ad:
bf:e5:22:d7:ba:92:d9:ba:36:33:b9:34:dd:17:ee:de:c8:23:
b0:2d:d6:94:b9:cb:12:bf:9a:b1:83:4a:a5:af:b6:d8:f4:d8:
ce:23:3d:97:89:65:fd:4d:4f:f5:a7:30:3c:a0:8c:77:21:fb:
32:a9:db:83:d8:16:3f:11:6f:7f:dc:b5:30:6a:de:7f:ba:ff:
bb:93:aa:ba:13:c9:bb:ce:a8:4b:8b:f4:1e:78:75:2f:e7:f6:
ee:cc:b9:2c:35:8f:c4:52:e8:d2:b9:4b:44:b0:4f:d5:80:d4:
f7:54:f6:bf:6e:74:4a:46:b4:c9:04:9e:f5:39:b1:03:ae:2d:
29:ba:b1:0c:a3:bc:d9:50:d5:e9:5a:e4:80:2e:80:1a:38:37:
ef:94:5b:70:68:51:1d:38:1b:95:f4:21:24:87:47:98:50:c6:
6a:eb:b1:fe:b7:68:16:6f:27:ae:d6:95:eb:32:ba:30:8c:16:
5b:60:20:c5:e2:7b:b4:ab:7a:e8:6d:e0:6f:73:b2:10:3c:8c:
ff:11:74:53:91:80:65:db:56:b7:ad:28:d8:a6:46:d5:ff:eb:
0b:8f:6e:80:45:d0:75:72:7d:3b:bc:17:c1:7a:b9:1e:44:ba:
09:98:8e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:27:15 2025 by rpki-client