Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
File: SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft (raw, json)
Hash identifier: WTRUOgBFNQNAN+TIbD7StVgzD5klJsiG5Q4WXUrl1jU=
Subject key identifier: 64:B7:A3:C3:89:E9:27:63:88:FA:DC:F9:C8:DF:2A:1E:EA:21:C8:83
Authority key identifier: 48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
Certificate issuer: /CN=48559018adff16eadf5551b2cb74d8f6860cd044
Certificate serial: 019A38A32E24C464F83D593361DD36F31151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
Manifest number: 0B2E
Signing time: Fri 31 Oct 2025 05:00:09 +0000
Manifest this update: Fri 31 Oct 2025 05:00:09 +0000
Manifest next update: Sat 01 Nov 2025 05:00:09 +0000
Files and hashes: 1: DlNfl6KgR_MUNI_dJxw9ErXDeIE.roa (hash: eSCVIU9rH872alqy7/aU0fAeLMAeeiberdc7Lc5APRo=)
2: SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl (hash: 4XE9MxixZewQFoCPbM8/fq6s5o1taosxixjCH916x3s=)
3: kNzmfkRSfsPZfyUkp0lW7AHAG-c.roa (hash: P6poTIVQZa8F+UuuStCgTYtjT3XTXjtd8ThSIr53awM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:38:a3:2e:24:c4:64:f8:3d:59:33:61:dd:36:f3:11:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48559018adff16eadf5551b2cb74d8f6860cd044
Validity
Not Before: Oct 31 05:00:09 2025 GMT
Not After : Nov 1 05:00:09 2025 GMT
Subject: CN=64b7a3c389e9276388fadcf9c8df2a1eea21c883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:e0:0c:86:cb:47:b2:d1:47:b5:00:27:9f:
fd:01:e9:10:a3:68:83:ba:1a:9e:86:16:90:d1:06:
5d:ed:09:07:6f:84:ea:5c:3a:de:fe:66:bc:98:0e:
35:b5:01:1c:c4:ec:3b:4f:e4:b1:26:21:61:12:26:
70:d1:a1:85:21:ef:85:22:41:bd:20:48:e4:6a:46:
7c:e6:3a:2e:3a:63:1a:0c:82:b8:7b:6c:d5:a6:7b:
0a:5a:95:26:82:24:27:1e:26:02:9a:58:4c:da:fd:
ea:ef:8f:56:fd:e1:15:37:e2:81:30:f7:69:68:4b:
04:75:fc:8d:1f:fa:00:aa:c1:b7:12:d8:f2:12:a4:
aa:a1:aa:28:ca:2e:9a:c6:f7:69:0a:8a:af:2c:ce:
63:15:74:09:18:a4:7e:b3:b2:01:49:39:cc:99:00:
ac:9b:20:10:35:16:6f:34:1c:e5:27:71:76:d0:86:
b8:68:8d:fc:cf:27:37:cc:a3:e2:33:a7:a4:1c:e7:
9b:e9:ee:e1:ca:54:d0:04:20:57:01:40:5d:c2:7e:
99:a6:29:f0:ab:8e:ab:f6:6a:56:76:68:1c:66:35:
d5:53:b9:a6:88:8e:e2:99:c8:88:2e:0c:69:25:12:
c3:01:fe:5f:d6:95:cd:7e:fb:db:c4:ff:94:b1:e7:
8b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B7:A3:C3:89:E9:27:63:88:FA:DC:F9:C8:DF:2A:1E:EA:21:C8:83
X509v3 Authority Key Identifier:
keyid:48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ea:b8:b0:79:62:4c:de:a9:b2:23:8b:b2:6a:e8:3d:d2:1d:
bd:22:f5:c7:03:fc:5d:2d:6d:07:a5:54:92:30:be:a0:e8:f2:
f4:ea:d4:db:dd:52:a5:c0:b8:f8:ca:90:ab:42:2b:0f:7f:12:
f4:74:4a:20:75:22:1f:8a:e5:04:67:f2:3b:c1:79:ae:3c:e6:
72:58:54:9b:51:83:14:e0:ab:1e:67:50:b3:72:ae:22:e7:d7:
9b:6a:fc:4f:d0:84:c2:ae:f5:a8:82:d1:ce:e5:b7:ce:60:1e:
1a:02:c9:93:97:0e:4b:8c:7f:e8:c7:96:5e:27:00:7f:8a:e5:
0a:ba:2d:86:e1:17:e0:80:de:89:7e:4a:01:f2:ed:ca:2b:d1:
a2:0f:16:82:87:40:f3:43:c4:91:b1:b2:9b:88:0f:65:24:8d:
15:53:aa:b0:fc:b5:b3:e8:05:59:73:59:af:61:34:cc:09:40:
6e:0a:d2:d9:11:0c:b8:22:b7:1c:af:d8:60:2d:11:3e:c8:3d:
af:1c:7e:f3:90:bc:f5:01:27:0e:99:b8:10:3c:ca:49:de:d0:
ac:24:25:38:ce:c1:a2:ef:14:4b:9f:e6:c5:5e:0f:38:fa:d6:
17:3b:1c:58:d0:7d:94:62:b9:fe:ba:3d:f0:52:bb:1f:a0:2d:
56:dd:6c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:13 2025 by rpki-client