Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
File: Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft (raw, json)
Hash identifier: 76JZtYle7TNYnalvzk3sY4wZ+XCJdYWVH/58FpxJMmU=
Subject key identifier: 5B:0D:2D:78:1C:D5:78:43:74:F9:A5:06:AB:E4:A5:46:44:89:B7:1B
Authority key identifier: 67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
Certificate issuer: /CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Certificate serial: 01979CA944482F0429BA5F04F66C435862E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
Manifest number: 15A7
Signing time: Mon 23 Jun 2025 12:00:27 +0000
Manifest this update: Mon 23 Jun 2025 12:00:27 +0000
Manifest next update: Tue 24 Jun 2025 12:00:27 +0000
Files and hashes: 1: MnPqlVHc9fosDLrnBlP0E1NoB4o.roa (hash: mD2+/j4E1Q+n6Btlz8PZ33xc+5cKf1HzvljXUQ+mRBY=)
2: Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl (hash: UCvb0YeuNYRUsY9XCGO06giifk4h4D/FHnisQ3yoCj8=)
3: dAVWxqlNNVP6A8VBFL9RneZwmJI.roa (hash: 1lPQWQ8lwFJDBfgG4WjGvPhvOrJDEic6DuXOVo8+YHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:a9:44:48:2f:04:29:ba:5f:04:f6:6c:43:58:62:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Validity
Not Before: Jun 23 12:00:27 2025 GMT
Not After : Jun 24 12:00:27 2025 GMT
Subject: CN=5b0d2d781cd5784374f9a506abe4a5464489b71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2f:86:ce:de:c9:29:53:d6:27:a9:7c:fa:47:
83:7d:88:7d:46:cb:2d:7b:c7:e4:9e:ed:27:77:a6:
e4:b3:82:1b:00:68:ab:e8:9c:a5:ad:e3:b4:83:34:
3a:ac:6e:b9:57:42:df:b7:14:fa:c9:c2:ec:fc:f6:
08:f4:c3:c2:9f:f5:40:8d:14:8b:70:08:1e:1c:af:
81:3c:54:c6:f7:18:da:86:e3:9d:fb:ac:54:54:08:
e9:2b:6c:c5:d9:63:11:88:de:d4:e6:4d:4b:de:30:
44:6c:fa:93:8f:98:29:8b:0c:63:85:fe:9d:a1:3f:
42:70:ca:83:18:85:c3:f2:bb:56:06:92:8e:3a:54:
40:4c:ca:2d:c2:03:16:46:13:a4:0c:30:52:04:6c:
51:2d:c1:ac:5b:55:02:9c:bf:ea:ec:dd:45:d4:7c:
31:a9:89:6a:be:1a:6b:17:e0:69:2a:99:b3:2f:25:
41:e4:c1:58:fc:25:fe:3d:08:31:17:c5:d2:69:28:
c7:b8:be:44:b9:5a:b5:b6:c0:05:6c:6c:91:91:ab:
16:39:83:02:90:e9:06:cd:46:b9:71:ff:5e:49:9f:
72:f6:cd:55:f4:15:69:cb:e8:9d:39:82:46:c9:0d:
71:e1:f4:f4:33:f5:41:ff:68:c6:9b:bb:df:46:7c:
a0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0D:2D:78:1C:D5:78:43:74:F9:A5:06:AB:E4:A5:46:44:89:B7:1B
X509v3 Authority Key Identifier:
keyid:67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f3:46:f2:2d:d6:be:87:72:32:dd:76:14:e5:6e:59:c0:88:
98:08:c5:f9:58:c8:4a:8c:c2:6f:27:2b:d8:ad:a6:aa:e4:6e:
cb:67:5a:83:34:56:7b:8f:a2:e1:db:50:f0:eb:a4:cb:c2:60:
85:a5:8e:52:da:b1:a8:04:39:ca:44:1a:6c:60:e9:47:6a:34:
b6:69:57:a0:83:62:63:dd:10:15:a1:42:82:c1:42:cf:a9:4e:
b5:8b:f5:a7:f2:51:dd:51:61:51:d9:ad:fb:73:5e:2f:73:39:
60:f6:ee:d5:94:30:ff:ba:d3:90:5a:ab:78:45:8f:05:91:10:
ee:43:1b:f6:99:d7:dd:d3:ab:16:f4:7a:15:2a:2b:ad:57:91:
f7:c7:fe:b6:3c:39:fb:c5:b4:78:54:9f:88:78:8a:d0:0f:c1:
88:83:03:32:df:9e:bb:95:5b:02:88:6b:01:ad:74:30:69:86:
3c:f6:52:a9:91:83:92:70:20:78:97:d4:0c:55:94:a7:e6:43:
54:ec:08:a7:6f:72:dc:ee:ed:ce:75:55:7a:2d:3b:00:f8:de:
ac:f9:ba:58:dc:27:e3:b4:c9:d9:91:5b:fe:1f:7a:cc:e8:e0:
58:4f:3d:fa:63:80:b3:69:b5:dd:f3:40:b4:f4:0e:1f:ba:b3:
bd:74:78:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:05 2025 by rpki-client