
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
File: sUIEOsH4lSfPigbXJijjaYM8grE.mft (raw, json)
Hash identifier: nVuyeF06/MBDHtHdjh48Q90wxtGMpPMw7RfQB0gKRkk=
Subject key identifier: 35:DD:FD:5D:F4:81:63:AB:85:6C:C8:8D:76:55:A4:E1:2C:4C:A1:B5
Authority key identifier: B1:42:04:3A:C1:F8:95:27:CF:8A:06:D7:26:28:E3:69:83:3C:82:B1
Certificate issuer: /CN=b142043ac1f89527cf8a06d72628e369833c82b1
Certificate serial: 0196A4D33A0EE130CAAFD6F4B0A1FD04B690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
Manifest number: 099A
Signing time: Tue 06 May 2025 09:00:28 +0000
Manifest this update: Tue 06 May 2025 09:00:28 +0000
Manifest next update: Wed 07 May 2025 09:00:28 +0000
Files and hashes: 1: sUIEOsH4lSfPigbXJijjaYM8grE.crl (hash: srxCo1mBDbVFNUMHWCgwDQEqWHhWQyx7iHPQSM2szao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:3a:0e:e1:30:ca:af:d6:f4:b0:a1:fd:04:b6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b142043ac1f89527cf8a06d72628e369833c82b1
Validity
Not Before: May 6 09:00:28 2025 GMT
Not After : May 7 09:00:28 2025 GMT
Subject: CN=35ddfd5df48163ab856cc88d7655a4e12c4ca1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:f5:6f:8d:ab:8c:17:5c:e5:e4:84:83:09:
3b:2c:7f:a9:7f:0e:e8:46:1b:71:af:1e:68:e4:8e:
41:31:69:74:d1:32:3f:f3:56:14:4c:25:ce:4b:ec:
2e:29:b4:cd:3d:62:66:19:af:c4:5f:19:38:dd:63:
71:f6:af:ee:49:c4:4a:84:62:0d:74:11:de:63:ac:
a0:b8:e6:61:f7:04:d1:03:c8:24:b9:ec:30:76:76:
8e:4d:31:f6:66:e2:d2:00:81:26:44:c3:e2:a5:ac:
4f:6a:09:37:11:41:2f:0e:37:b4:c0:3d:ee:bb:ff:
6d:9c:3e:3b:e8:27:73:09:6a:8a:5f:e6:90:91:c5:
49:dd:d1:0c:57:2d:4a:f4:e1:99:cb:b6:10:ea:2b:
34:84:45:6b:55:f0:cd:36:2a:80:8f:4e:a5:f2:48:
ee:d4:86:fd:65:02:c4:73:b7:cb:59:78:b2:d5:52:
8d:3b:06:dc:ad:a3:6f:3b:2d:18:05:f6:5b:dc:fe:
d7:4f:54:30:69:10:e4:c2:46:29:77:46:33:c0:43:
f9:83:17:31:23:5e:c4:64:9b:9a:98:94:68:8d:a2:
b5:8b:e5:e0:55:5b:21:ea:63:70:7c:24:62:aa:23:
f1:53:d9:6e:8b:b1:87:0f:a3:4b:69:80:c8:96:32:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DD:FD:5D:F4:81:63:AB:85:6C:C8:8D:76:55:A4:E1:2C:4C:A1:B5
X509v3 Authority Key Identifier:
keyid:B1:42:04:3A:C1:F8:95:27:CF:8A:06:D7:26:28:E3:69:83:3C:82:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:85:d0:e0:8f:de:30:3f:80:8a:71:61:82:62:51:2e:ca:04:
05:2c:5a:4d:50:bf:8d:43:f8:8e:1b:a7:6d:f8:7e:59:d2:bc:
f5:da:bc:f1:8d:26:07:e3:57:58:78:5a:ca:74:14:9b:c2:8e:
d4:d8:a6:e2:39:7b:0d:b9:3a:2a:68:df:e6:65:90:90:3b:43:
a7:ac:cf:2b:89:01:a4:93:9f:6c:01:00:11:e2:9b:e5:27:0b:
59:58:cf:c8:c5:c8:a8:3d:8a:61:6e:64:56:9e:bf:61:08:ce:
49:ad:27:d0:fc:ec:a8:76:9b:55:f4:cd:ee:a3:cd:e0:99:8b:
7f:31:46:52:6b:f9:6e:f1:ed:d4:0b:b3:14:2f:4d:90:55:29:
c0:01:8b:71:36:b5:90:49:39:bf:21:ab:33:72:f4:7e:bb:3b:
b7:62:8a:c1:50:14:bf:78:d2:f2:41:15:94:e4:4a:a0:d0:41:
f3:53:b4:4f:67:da:9e:c6:e5:13:35:df:68:8c:1d:4a:81:34:
4d:17:88:a1:67:cb:ef:c8:11:f9:1c:0b:a1:03:85:1a:a5:bf:
cb:ab:37:1f:97:35:95:bc:17:8b:bf:e9:68:6e:7b:a6:85:bd:
85:95:3f:80:b7:a8:00:76:3e:fd:6f:12:f2:ab:5e:b4:b9:2f:
7d:31:2d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:27 2025 by rpki-client