Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
File: JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft (raw, json)
Hash identifier: +GsYIG5L4k8ae3If2Zt4Ekbi5JWBAcX9XSWV4BcknPw=
Subject key identifier: FE:94:EF:B0:04:EC:C6:B3:7A:7B:18:0D:88:F4:32:D2:B0:35:30:71
Authority key identifier: 25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
Certificate issuer: /CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Certificate serial: 019932362878F8819D7F8BCD549F1A156CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
Manifest number: 068B
Signing time: Wed 10 Sep 2025 06:00:34 +0000
Manifest this update: Wed 10 Sep 2025 06:00:34 +0000
Manifest next update: Thu 11 Sep 2025 06:00:34 +0000
Files and hashes: 1: 5BcCQkgLdnh-Rt93X31HRwkCbrc.roa (hash: rSwMDZZ1exx7LBTp6JZrBkob55KlLmWScTSybDByPwM=)
2: JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl (hash: iTDfjTzwO4mQ4/vE45Vnwou/oCwOH0J5Yw9MtjzKKlg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:28:78:f8:81:9d:7f:8b:cd:54:9f:1a:15:6c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Validity
Not Before: Sep 10 06:00:34 2025 GMT
Not After : Sep 11 06:00:34 2025 GMT
Subject: CN=fe94efb004ecc6b37a7b180d88f432d2b0353071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:3b:9c:0f:b6:f4:e0:a9:56:0d:b2:bf:7b:
02:2c:11:48:36:6d:3c:d7:f9:83:76:ae:56:c3:b0:
8d:8b:15:2e:23:ee:9a:1a:1a:30:c8:51:9f:f8:6d:
ea:1a:e9:a8:18:12:f6:60:b0:77:32:8f:bf:ab:39:
fb:d7:4f:e5:7e:32:25:fe:93:16:55:c2:fd:d6:b1:
3d:38:08:43:83:43:ba:6f:3e:fe:a2:5a:b1:4a:6f:
9b:38:53:ee:21:d9:b7:72:a7:99:89:a0:34:60:5c:
b9:7f:5c:ce:2d:32:5e:6b:78:1a:aa:6a:36:b4:18:
19:b2:57:8d:48:5e:d5:8b:b7:60:80:b9:68:18:c7:
b4:2b:d6:cf:53:2d:85:5c:50:86:e4:45:7f:96:91:
29:67:8c:d8:65:a1:cd:4f:93:0d:eb:a8:1a:39:73:
c8:b0:f7:24:5c:94:74:2a:e4:0b:e6:e9:b3:4f:51:
8f:e8:60:ee:ab:eb:48:f5:69:1d:47:dd:db:46:bb:
6e:e5:5e:d2:b3:f1:7c:b0:6d:77:28:f6:13:0e:25:
63:bc:d7:f9:f8:cc:3e:19:16:4b:b1:65:ea:af:23:
34:b7:a1:2b:48:71:f3:f6:74:c2:d7:74:a9:fe:9f:
b4:8d:19:2d:ca:07:7f:d7:36:3e:5c:e1:85:bf:35:
4a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:94:EF:B0:04:EC:C6:B3:7A:7B:18:0D:88:F4:32:D2:B0:35:30:71
X509v3 Authority Key Identifier:
keyid:25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:eb:ca:1f:cd:77:eb:4b:f1:e1:eb:36:d8:38:de:7b:78:12:
61:4c:a2:44:16:49:45:ea:93:50:03:5f:09:ce:a8:29:ee:ef:
df:62:3e:44:e9:89:98:61:12:d8:69:02:17:8d:6c:d3:76:7e:
65:2a:82:c6:9d:a0:0b:30:0f:63:41:91:37:bb:6e:f9:39:49:
0c:a7:8f:b1:ba:69:be:1c:f7:71:7e:c3:d0:6b:b7:d5:19:40:
20:d2:b9:44:5b:10:59:f4:a2:f9:fe:6e:2e:a1:54:e7:82:55:
68:ea:4a:ca:14:29:73:42:a1:22:c9:c4:fc:a2:f0:17:41:4a:
bf:0c:b5:33:c4:9b:66:b4:0c:9f:af:b4:0b:c9:9b:e1:0c:ec:
04:67:86:49:d1:59:cc:74:38:a8:09:0a:78:06:01:b5:d5:00:
e7:c2:0d:88:fe:6f:ad:bd:be:c5:33:3d:9f:bd:0b:31:b0:c3:
38:23:39:f9:13:dd:72:2c:7c:21:bb:d5:6a:8e:ea:0d:82:14:
00:35:c8:9d:fd:8d:1f:69:08:68:cf:00:f5:1f:68:ed:7f:00:
99:61:34:cd:bf:28:23:17:5c:d5:0d:fa:0d:21:f6:82:8d:14:
ba:b3:12:bf:bc:8f:47:c8:01:7d:fe:b7:47:64:4e:7a:dd:ad:
66:11:c6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:31 2026 by rpki-client