Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
File: TORqOpla2FRclax7aSMcpiT8iJM.mft (raw, json)
Hash identifier: EqPsbjiLj0abHrHTklXBkIcTiBQkrVYg85VmezbVvL4=
Subject key identifier: 27:9F:F5:97:8B:FE:DF:63:E4:DA:32:F2:6D:F4:F5:D1:15:CA:34:8E
Authority key identifier: 4C:E4:6A:3A:99:5A:D8:54:5C:95:AC:7B:69:23:1C:A6:24:FC:88:93
Certificate issuer: /CN=4ce46a3a995ad8545c95ac7b69231ca624fc8893
Certificate serial: 019A0B5D8EA860A4BA28ACEC9EEE4D71A91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
Manifest number: 11CF
Signing time: Wed 22 Oct 2025 10:01:11 +0000
Manifest this update: Wed 22 Oct 2025 10:01:11 +0000
Manifest next update: Thu 23 Oct 2025 10:01:11 +0000
Files and hashes: 1: TORqOpla2FRclax7aSMcpiT8iJM.crl (hash: +sfPDzJqQqmRLiMbU7GGjHDpDEP26D3FuI+5I5GoBQ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:8e:a8:60:a4:ba:28:ac:ec:9e:ee:4d:71:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce46a3a995ad8545c95ac7b69231ca624fc8893
Validity
Not Before: Oct 22 10:01:11 2025 GMT
Not After : Oct 23 10:01:11 2025 GMT
Subject: CN=279ff5978bfedf63e4da32f26df4f5d115ca348e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f8:c9:c0:11:5c:49:ee:46:aa:70:93:0b:9c:
2f:9d:b7:13:54:79:75:e4:5c:f0:93:3b:1c:0e:49:
28:4b:ad:d4:74:7d:1c:aa:fb:da:53:09:01:8b:9b:
95:8c:28:42:37:46:51:7a:6f:dc:21:bc:1e:be:7a:
be:49:16:9c:08:3b:a5:1c:7c:2f:8a:d4:f3:38:5a:
97:96:9f:67:6f:a6:c9:bc:64:f5:df:06:7f:0e:0e:
9f:c6:59:e1:1e:2e:5b:62:71:31:9d:28:9f:fa:cf:
bc:69:f6:62:c2:60:02:1f:d8:69:98:6a:11:58:35:
c5:70:e5:7a:cf:e0:c0:f4:f6:ca:33:5d:30:1c:38:
8f:19:1e:22:0a:1a:23:23:4a:f3:cf:b3:80:20:29:
0c:6c:90:2c:78:ae:60:84:13:32:69:51:d4:53:78:
0a:fb:5d:26:41:9f:34:59:cc:6b:30:19:ee:cf:64:
91:9b:eb:1d:99:b1:83:13:19:64:af:d9:ca:92:8e:
a2:cf:41:1c:28:f3:78:1d:02:d4:66:ce:5b:3f:94:
2d:45:38:87:74:e0:91:73:cf:7d:3d:bf:19:4c:4f:
4f:1e:20:ed:06:c8:c3:78:ea:86:4a:4d:2e:1a:40:
68:69:f2:f4:b0:f1:f2:b8:58:61:9b:29:63:f8:02:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9F:F5:97:8B:FE:DF:63:E4:DA:32:F2:6D:F4:F5:D1:15:CA:34:8E
X509v3 Authority Key Identifier:
keyid:4C:E4:6A:3A:99:5A:D8:54:5C:95:AC:7B:69:23:1C:A6:24:FC:88:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9a:d5:2c:7c:76:99:81:5c:46:49:45:a9:82:1a:8b:8b:a6:
81:6c:bb:fa:dd:9a:79:ce:0b:5d:12:65:77:34:3f:f3:48:eb:
d9:6b:a4:5e:3a:84:f4:84:70:b3:45:79:0a:7e:1f:30:32:55:
63:40:3b:fc:81:ac:f9:98:73:a4:7c:17:06:ee:7b:10:3d:f6:
70:6f:44:1f:1b:b4:55:86:34:34:a3:28:aa:c1:6e:fe:c6:03:
38:39:d0:dc:ff:03:63:34:08:31:88:c6:ef:4f:cb:f3:3a:87:
fb:2f:a3:88:03:df:2a:2e:4c:be:c9:fc:00:d4:bc:0d:c2:88:
37:9f:37:4e:12:60:57:69:70:69:22:23:5f:f8:ab:07:31:3f:
57:c0:e5:e0:fd:a7:20:2b:75:2b:3a:b9:7c:91:20:dd:e1:90:
58:54:7f:e5:20:fe:56:7c:6f:79:61:66:37:54:c3:9b:16:35:
10:eb:68:4a:bb:51:bf:95:95:92:fb:65:34:ed:bb:36:b9:e3:
ed:b7:fa:f4:1b:45:7b:a0:ef:2b:3d:e9:52:a4:ca:0c:06:9d:
15:41:94:42:c3:93:a8:dc:48:9f:bc:71:34:05:3a:c0:28:e8:
e2:92:b0:cd:5a:3c:fc:f8:0e:1f:af:ba:72:30:60:4c:31:5d:
ed:ee:7a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:56 2025 by rpki-client