Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
File: i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft (raw, json)
Hash identifier: M7+kK7ZG5rQ1zE6suuOKVbLlWIg00HTmkYAG6pLR/GI=
Subject key identifier: 36:21:40:D3:A9:CC:1A:E1:93:02:B5:5D:0C:C6:F4:1C:56:99:1E:30
Authority key identifier: 8B:C3:94:8D:8B:93:A2:1E:6D:57:D9:C6:55:4D:5E:DD:10:7D:09:AF
Certificate issuer: /CN=8bc3948d8b93a21e6d57d9c6554d5edd107d09af
Certificate serial: 019A06A42D17DFF277223B0BE59F1A5EC08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
Manifest number: 02E9
Signing time: Tue 21 Oct 2025 12:00:13 +0000
Manifest this update: Tue 21 Oct 2025 12:00:13 +0000
Manifest next update: Wed 22 Oct 2025 12:00:13 +0000
Files and hashes: 1: fvjwad8hv5M8RT1bW6F3smOFB2Y.roa (hash: at0gl2Sa+um/oWDDDgR4biQkEbCFJi5QlnnXaGwjc0g=)
2: i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl (hash: 87vKuVoONJYpDp5h4yowqJa+D73GGZpauVroZX2roZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:a4:2d:17:df:f2:77:22:3b:0b:e5:9f:1a:5e:c0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc3948d8b93a21e6d57d9c6554d5edd107d09af
Validity
Not Before: Oct 21 12:00:13 2025 GMT
Not After : Oct 22 12:00:13 2025 GMT
Subject: CN=362140d3a9cc1ae19302b55d0cc6f41c56991e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:d8:e7:b3:57:09:69:1d:7a:d2:cd:c7:4b:
06:f3:c2:41:78:b2:fc:44:76:ba:9c:de:80:57:a1:
d7:01:94:6a:e7:d0:c1:8b:fb:87:29:39:8e:7d:bf:
a2:29:6b:27:1d:26:42:3b:bc:b8:51:da:53:20:77:
0a:da:9d:f1:68:ec:00:6f:af:d1:9d:cb:7a:c3:24:
43:5d:96:5d:c1:cd:39:a7:93:36:df:e5:78:72:ac:
a9:00:0f:d7:eb:56:f1:03:44:35:4d:55:10:d6:98:
1f:74:75:68:16:1d:c9:2b:34:b7:31:e0:6e:95:5b:
fd:68:5e:34:d3:24:2d:e3:67:56:86:90:4f:b7:dd:
91:64:99:c7:69:6a:95:0e:72:81:44:69:40:4f:da:
93:52:69:e7:13:e6:dc:48:eb:9c:51:f8:38:d9:d4:
df:90:d2:a1:f4:b5:49:81:a6:4f:de:2c:81:c4:e0:
7d:e8:1d:6e:42:dc:6f:6c:30:83:08:01:66:4e:fc:
2d:bb:e7:d4:b1:be:c8:d7:8e:05:e6:8d:c2:a3:d5:
df:61:55:08:de:71:95:3f:b7:0d:fa:08:62:8b:9c:
79:4f:86:2d:84:7a:f7:36:3f:a4:92:94:de:80:21:
59:b0:20:71:87:25:41:1e:18:83:f3:13:00:00:ec:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:21:40:D3:A9:CC:1A:E1:93:02:B5:5D:0C:C6:F4:1C:56:99:1E:30
X509v3 Authority Key Identifier:
keyid:8B:C3:94:8D:8B:93:A2:1E:6D:57:D9:C6:55:4D:5E:DD:10:7D:09:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e6:d9:2d:b2:28:5a:69:7a:f1:ee:99:bb:0d:ae:6b:92:12:
81:a5:ef:18:7a:62:66:e2:21:d0:93:95:d9:77:33:5c:72:3b:
e8:e4:6c:65:e7:10:f5:15:9f:87:b0:76:f2:2a:aa:a8:d1:1b:
b3:c8:2a:0a:d9:23:1e:9b:ee:c0:f1:51:ed:79:22:a3:1c:ee:
e6:c3:0b:11:c9:d3:21:35:8f:c9:3d:2d:f2:c1:83:aa:5b:46:
43:4b:99:fb:23:de:3c:b7:08:20:eb:35:00:9d:a1:b8:0a:ff:
6b:a1:14:10:bd:3d:cb:81:a6:34:b6:b3:80:fd:6f:db:74:17:
c4:35:a2:99:d8:e7:99:68:92:1a:54:07:10:6f:ed:6f:0b:ca:
57:cc:36:c4:08:47:61:48:13:2d:b2:5b:65:70:b7:c9:a1:80:
a1:fb:1b:f4:e9:b4:26:95:8d:40:62:fa:97:ae:3b:1a:41:65:
55:98:d8:18:40:20:92:85:d9:e9:97:46:74:99:38:4c:40:50:
6c:d9:9d:b4:55:a6:60:61:1c:40:a6:a0:93:f3:89:7e:56:ad:
3d:48:39:8b:78:78:98:ae:0b:d6:16:ec:b2:04:09:96:9c:c8:
2e:4c:f9:a4:c8:a6:44:92:33:0f:bf:33:16:4e:b8:79:fc:44:
d9:e0:cd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:06 2025 by rpki-client