Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
File: JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft (raw, json)
Hash identifier: +cNLbPTsMdXPhJLOo5GTQ1T2z7lz9mP9Nb4UhIHQHeE=
Subject key identifier: F0:83:23:A5:41:40:B8:3D:E8:95:88:04:17:BD:39:5A:2C:92:BB:97
Authority key identifier: 24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
Certificate issuer: /CN=24954f608ac12b684ef865f39af0e94e250b9454
Certificate serial: 0199F0C1EA4F9F5BAA8B4D9AF2A0514D4282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
Manifest number: 0E3B
Signing time: Fri 17 Oct 2025 06:01:04 +0000
Manifest this update: Fri 17 Oct 2025 06:01:04 +0000
Manifest next update: Sat 18 Oct 2025 06:01:04 +0000
Files and hashes: 1: JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl (hash: F4iybkmHztOsJgD3OKWIgzI9+dSs63y5dNn4k84k37c=)
2: MGwydjWSRkebMXZzXi4Q1wnQhQY.roa (hash: ppLwXZ59Our2Z5s5lQZSznHueKLv+6A7NwUPkwubwqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f0:c1:ea:4f:9f:5b:aa:8b:4d:9a:f2:a0:51:4d:42:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24954f608ac12b684ef865f39af0e94e250b9454
Validity
Not Before: Oct 17 06:01:04 2025 GMT
Not After : Oct 18 06:01:04 2025 GMT
Subject: CN=f08323a54140b83de895880417bd395a2c92bb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:44:fc:07:03:e0:cd:f8:c7:ac:a6:01:1f:
7b:c2:29:11:ce:1b:8e:49:d8:b6:04:91:27:06:52:
14:07:1e:1e:ab:3e:88:74:0d:49:ba:a5:b5:b3:60:
38:2d:2c:59:cd:b1:84:c3:c8:3a:9a:e6:a8:34:b7:
9b:52:1f:e4:98:dd:d1:63:db:a7:ba:dd:e1:4a:68:
19:4a:54:33:83:e7:07:6d:e5:e2:a4:53:df:ab:a9:
36:1a:be:62:54:69:c0:87:0b:38:35:6c:65:2e:91:
3d:69:18:1c:2c:d9:de:3c:73:b1:67:5b:ae:ce:95:
db:92:f0:cf:5c:4a:1a:3b:25:f9:ce:16:a2:89:ac:
3a:02:78:19:54:8a:20:f2:df:bb:35:4d:c2:bb:81:
fb:b8:30:49:46:88:6d:7c:bf:0a:e8:f9:e9:86:a5:
7c:4d:07:0a:14:a5:63:e3:38:6e:e7:1d:1d:43:93:
27:4e:e6:0a:78:fe:db:cc:84:fd:76:b1:c4:7f:d1:
b7:7b:12:5d:2b:0b:be:74:3d:d5:4c:52:57:43:a6:
73:51:1c:c1:35:dd:f9:83:a0:3d:a6:ae:ad:c6:44:
46:47:29:17:9d:36:23:d4:88:20:00:e8:b3:f5:4e:
c7:eb:eb:f6:55:d4:d9:9b:ee:fa:09:40:cc:bb:29:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:83:23:A5:41:40:B8:3D:E8:95:88:04:17:BD:39:5A:2C:92:BB:97
X509v3 Authority Key Identifier:
keyid:24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5c:97:6c:40:65:d0:81:e7:c8:c7:2c:39:5c:8d:e8:65:8e:
f5:1e:b9:97:4a:4a:b0:dd:3c:b1:c1:c7:07:cb:2f:5e:5e:0b:
c9:61:b8:c9:6b:ed:38:f5:af:e8:4c:a1:5c:3b:05:e8:ef:1e:
03:68:a3:80:59:4b:e6:59:ed:3b:d9:cf:39:d1:d0:d5:be:c0:
cf:86:f9:af:79:f8:97:e1:77:64:52:5c:85:11:0b:f3:06:c8:
dc:fa:b6:86:80:e9:08:34:7d:92:78:e4:70:22:64:54:16:52:
ce:d5:b9:09:9e:56:97:e3:3d:42:b6:97:9c:22:e6:65:81:d7:
8e:b4:8b:5e:6a:5e:ef:30:07:20:aa:6d:bf:4d:91:c1:bf:a5:
e8:39:39:95:ed:2b:b5:a9:1c:94:9d:e5:36:04:93:3a:ab:7d:
32:89:ae:b3:4b:4e:00:39:d2:0b:dd:1d:7b:d5:5c:35:0c:f4:
bd:39:29:72:10:90:21:23:01:34:4e:a5:6b:5a:b0:16:47:84:
97:3d:99:b2:66:4f:10:09:50:ce:2f:8f:2e:d4:bd:73:4d:44:
c6:94:81:96:68:6e:a8:b4:ee:2e:23:58:8a:85:f3:7e:d4:f6:
23:dc:a0:ce:38:d3:53:f1:10:11:3d:51:6d:09:d2:e5:b7:72:
69:9a:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:10:03 2025 by rpki-client