Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
File: G3esnt9lAaus5fStroTZyv4HkI0.mft (raw, json)
Hash identifier: DmtDLvnSRpMZYsXVp3gsvFcvO2UC4HEgKTOFKA0+BFY=
Subject key identifier: 76:87:86:5E:18:87:05:78:18:30:4A:DD:57:38:75:EF:E1:CD:2E:56
Authority key identifier: 1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
Certificate issuer: /CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Certificate serial: 019862806DE3C7B81C5F25F1014C459ED93E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
Manifest number: 160D
Signing time: Thu 31 Jul 2025 22:00:40 +0000
Manifest this update: Thu 31 Jul 2025 22:00:40 +0000
Manifest next update: Fri 01 Aug 2025 22:00:40 +0000
Files and hashes: 1: G3esnt9lAaus5fStroTZyv4HkI0.crl (hash: 1cJpZ3s4HnrrqRuMOg2dG+VsSO3a/wTH+CefX9XNxhk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:62:80:6d:e3:c7:b8:1c:5f:25:f1:01:4c:45:9e:d9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Validity
Not Before: Jul 31 22:00:40 2025 GMT
Not After : Aug 1 22:00:40 2025 GMT
Subject: CN=7687865e1887057818304add573875efe1cd2e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:ef:70:ca:fc:fa:52:50:0d:a8:ad:5a:3a:
59:54:85:84:b3:0a:f4:f0:74:3c:7e:78:79:5d:76:
06:13:6e:4f:ea:4d:33:51:47:31:5b:78:a5:9d:ab:
49:94:ee:a4:bc:5d:6a:17:01:8a:11:20:9e:20:a7:
e9:2a:85:95:8f:69:cb:77:95:2a:04:55:31:06:14:
61:c2:20:e9:f9:a6:fb:29:ba:ac:bb:14:fa:51:10:
5a:e0:7b:3b:16:20:bf:8c:da:bc:d0:e2:e6:3b:3c:
3f:cb:6b:cf:0f:0e:8d:55:a4:fc:aa:29:5d:f0:53:
d4:e8:aa:50:7e:11:79:4f:3d:df:60:0a:a7:43:b8:
9b:5a:bf:3c:b4:39:99:2c:73:5c:c9:d0:13:e5:63:
94:5f:90:f2:f1:ee:be:ae:56:1f:87:cd:ba:d7:b6:
42:d3:4a:60:1e:46:f3:72:21:57:db:3f:95:80:53:
16:30:38:c8:41:b8:f1:c8:5d:b9:da:e2:59:87:53:
3b:76:38:05:ca:95:55:45:6e:48:14:76:8a:0e:ad:
c8:a4:ef:6f:a5:48:90:08:35:4c:45:d1:02:e7:c5:
57:20:ca:6d:a9:67:89:13:32:c6:f8:d3:44:94:1d:
46:bf:45:39:2c:32:8b:1b:b7:cb:e1:4a:a0:ad:66:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:87:86:5E:18:87:05:78:18:30:4A:DD:57:38:75:EF:E1:CD:2E:56
X509v3 Authority Key Identifier:
keyid:1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a8:8d:0b:98:56:ca:09:8d:66:22:cc:fd:0a:74:e8:c2:cc:
69:13:01:b1:54:c9:9b:3d:88:9d:c0:21:f9:b6:a4:d2:c9:3d:
81:13:85:d8:d2:75:e0:f5:f5:f6:a6:70:4f:45:40:d1:f6:1b:
6d:a9:44:05:7c:a1:e8:19:9d:63:d5:3f:10:37:4c:ea:56:07:
2a:08:89:15:c4:8b:f8:45:d3:49:ae:67:f1:b1:08:82:f1:de:
de:5b:6c:dc:8f:c8:4b:27:70:c8:c0:d9:b6:ef:61:77:5b:e3:
2b:1a:a2:a9:7b:3d:a2:13:71:c9:62:2d:51:97:4f:88:51:62:
bc:c0:90:02:fa:0f:6d:3f:2f:d9:14:a8:83:8c:92:58:95:bf:
7f:31:03:ad:c0:14:6a:8a:9a:65:3a:42:cd:47:c8:a6:fa:4a:
9e:0e:51:9e:f2:5f:74:8d:8c:5f:76:52:89:26:5b:bc:fe:d3:
ad:45:14:f1:af:31:71:b6:c8:fa:5c:e4:1c:6f:f5:8e:82:b4:
60:1a:2c:85:48:50:cd:ce:57:e0:20:92:45:9c:e9:f0:02:0d:
64:b6:03:07:87:00:63:0c:1e:37:27:bc:32:0d:ad:c9:a2:38:
0b:5e:d9:aa:f4:75:b3:2d:d6:01:a0:14:c3:85:7c:10:68:87:
a1:2f:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:01 2025 by rpki-client