Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
File: frsTAxu1qUujKTO0JdyRUBYclSg.mft (raw, json)
Hash identifier: 6GDaBsnirAWFa7Niu7fMXq9AZ57KsV4rQQF/LrYZx78=
Subject key identifier: 87:8F:09:A1:25:FC:07:20:00:6A:B5:1B:D5:69:DB:62:50:62:BC:21
Authority key identifier: 7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
Certificate issuer: /CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Certificate serial: 019889201C917AC6D869FB7F777900B1FA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
Manifest number: 0286
Signing time: Fri 08 Aug 2025 10:00:39 +0000
Manifest this update: Fri 08 Aug 2025 10:00:39 +0000
Manifest next update: Sat 09 Aug 2025 10:00:39 +0000
Files and hashes: 1: 1GrjD_MVlSSqPSOTstmSZn6OW-8.roa (hash: 0bCgzOJOxNfXuOJ/KwofBbHHt3oNngCqpnJt0zyGNL8=)
2: frsTAxu1qUujKTO0JdyRUBYclSg.crl (hash: iqF4+4b7nuH4ekDbNJQM6xB1do1grdmhkOIAYquP7kE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:1c:91:7a:c6:d8:69:fb:7f:77:79:00:b1:fa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Validity
Not Before: Aug 8 10:00:39 2025 GMT
Not After : Aug 9 10:00:39 2025 GMT
Subject: CN=878f09a125fc0720006ab51bd569db625062bc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:55:a3:62:3f:56:b7:8f:6a:ef:5a:08:f2:
75:ca:7a:b0:23:bd:ca:f0:b4:6b:4f:a9:05:4b:74:
30:dd:c1:49:d3:ae:c3:42:9b:a7:a2:05:56:0d:de:
26:8b:85:7d:fc:57:17:56:d7:65:e6:53:19:3b:1f:
f5:4e:fa:5a:ab:91:8f:c2:c3:c1:62:46:ea:02:93:
12:c1:68:ce:37:59:ee:44:de:f5:de:e7:07:d4:ce:
5c:3e:2e:aa:47:cf:26:f7:77:90:e7:14:8b:f1:dc:
ea:1c:bb:18:e2:06:85:a0:12:ad:ad:f7:53:03:fe:
c8:d8:73:37:71:09:47:86:66:26:87:9f:de:1a:ad:
61:45:cb:9b:d7:8e:63:11:d7:1b:ac:aa:c9:85:96:
e5:cc:75:31:c2:76:1d:cd:7d:a0:13:6b:ef:a0:63:
7b:95:0d:4d:9a:13:cb:6f:4f:7d:4b:80:b7:e1:de:
97:fd:f6:c9:cb:85:c7:c5:09:a8:cf:1b:59:3d:28:
1d:c5:14:10:6a:d6:25:5d:db:a4:ea:de:0e:9b:fe:
38:0c:c8:5e:cc:90:3d:e0:06:12:89:bc:88:20:d6:
a2:0c:43:79:30:d5:a7:65:a4:c1:28:b6:9f:4e:4e:
5b:15:8a:fa:bc:17:93:cd:2a:8e:8b:91:04:65:11:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8F:09:A1:25:FC:07:20:00:6A:B5:1B:D5:69:DB:62:50:62:BC:21
X509v3 Authority Key Identifier:
keyid:7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8b:e2:14:35:2a:53:ee:72:d2:59:98:41:f2:69:55:0d:e9:
ab:4d:19:3f:ad:2b:01:77:ba:03:71:5d:7d:90:40:71:78:f1:
85:0a:74:43:62:f7:b9:b3:7f:45:9f:bc:95:2a:c3:d8:7e:54:
b0:d0:6b:26:e5:24:d7:32:b6:75:4e:1a:ab:6a:f8:d7:5b:56:
00:eb:a7:c0:17:c9:64:04:58:4c:22:9e:e2:6d:e7:9a:93:c7:
c9:97:11:94:d6:52:3f:7c:54:e5:cb:fd:d7:8a:fb:78:ac:3e:
1e:d3:3b:43:40:fd:fc:e5:6f:f4:5a:40:94:0f:48:69:dd:ea:
85:7a:54:98:d5:5e:ef:75:18:2c:05:3f:06:09:a1:c9:d4:d5:
7a:8f:61:f1:c6:1d:1c:0e:8a:21:ef:9b:19:18:0e:01:34:8a:
53:d0:02:70:12:5e:74:51:6d:a3:b7:ec:f6:6e:4e:ad:62:58:
41:88:65:59:39:32:f1:39:49:59:6d:94:05:62:b3:16:b1:25:
f6:48:7f:7c:ce:34:d9:6f:49:ec:db:58:98:44:a8:11:72:6c:
e2:4d:ea:4a:bb:16:45:88:19:58:77:4e:c6:87:6f:51:93:4b:
3d:05:c3:b2:64:b7:d8:d0:b8:3e:51:b4:3b:d1:8e:c3:fa:c3:
3e:0b:a4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:06:46 2025 by rpki-client