Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
File: yWyebTIz4sJBILhdFxec-10zR4Q.mft (raw, json)
Hash identifier: FF6BIJaYewQbrzOvCUQtSw20SV/x7PrYzyRC6vCeymY=
Subject key identifier: D5:8B:AA:CC:16:E3:25:5C:3D:21:45:DE:5C:B9:8F:29:04:0E:CB:A0
Authority key identifier: C9:6C:9E:6D:32:33:E2:C2:41:20:B8:5D:17:17:9C:FB:5D:33:47:84
Certificate issuer: /CN=c96c9e6d3233e2c24120b85d17179cfb5d334784
Certificate serial: 0197F3C7FCB01803E94671ECB237256EC37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWyebTIz4sJBILhdFxec-10zR4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
Manifest number: 05C3
Signing time: Thu 10 Jul 2025 10:00:59 +0000
Manifest this update: Thu 10 Jul 2025 10:00:59 +0000
Manifest next update: Fri 11 Jul 2025 10:00:59 +0000
Files and hashes: 1: VZHF0nE3qVwIIpqdmF6QQh7nLs0.roa (hash: mQT6bJlTC89LqB3D9GVMba8EFmBGqFt+S6QYF8yZZKY=)
2: yWyebTIz4sJBILhdFxec-10zR4Q.crl (hash: e4An2kRvvccHIoAc/dh9kgVveJHn7Haxk1p+lG5qgag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:c7:fc:b0:18:03:e9:46:71:ec:b2:37:25:6e:c3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96c9e6d3233e2c24120b85d17179cfb5d334784
Validity
Not Before: Jul 10 10:00:59 2025 GMT
Not After : Jul 11 10:00:59 2025 GMT
Subject: CN=d58baacc16e3255c3d2145de5cb98f29040ecba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:12:93:7a:19:eb:a5:c9:1a:e2:e8:2d:b8:
b6:e9:6a:d2:2f:12:0f:86:a2:78:e5:f5:9e:ff:b6:
e6:30:99:59:35:89:27:3d:e3:4b:0a:a2:e8:84:10:
30:77:22:eb:a8:f4:e3:f7:c9:1c:72:c1:d7:b5:18:
4e:a9:ff:7a:b4:7c:1e:27:1f:54:b3:71:89:ae:b3:
8a:99:64:cd:fc:e9:5b:87:80:46:04:1f:4e:78:77:
35:50:20:45:27:87:f9:08:e3:5d:69:3e:4c:bb:97:
89:70:ef:05:5b:37:f8:3c:be:a8:66:01:d1:c8:98:
f4:eb:1a:22:ce:71:71:55:d5:4b:06:fe:3f:19:af:
ae:b3:b7:c0:79:f6:75:5b:29:01:52:2b:a2:17:8e:
a9:a7:3b:89:6f:d6:26:cb:46:cc:e2:8b:a6:f5:99:
a4:0a:04:64:b5:d4:1c:35:01:e8:4a:ce:82:98:99:
9d:18:a9:68:24:7a:e8:ce:0f:b1:1a:14:7d:40:cb:
eb:e4:df:ec:c4:3a:1b:96:9b:5a:c1:21:de:ca:ce:
99:cc:a9:1a:84:5a:0f:5d:45:f0:17:75:9d:eb:50:
77:ad:c9:82:38:c1:80:25:51:76:e8:96:14:6d:69:
6b:b2:52:19:e7:1a:59:7d:56:3b:7e:5c:1a:2c:14:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:AA:CC:16:E3:25:5C:3D:21:45:DE:5C:B9:8F:29:04:0E:CB:A0
X509v3 Authority Key Identifier:
keyid:C9:6C:9E:6D:32:33:E2:C2:41:20:B8:5D:17:17:9C:FB:5D:33:47:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWyebTIz4sJBILhdFxec-10zR4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f8:f1:10:0b:8c:c8:df:33:e8:32:c5:b5:50:0d:a6:8f:be:
33:75:76:cb:4d:2a:25:4a:5c:a9:b3:60:51:8b:75:d8:02:05:
68:38:8b:77:77:88:ad:c0:68:cd:35:46:b8:7d:8d:99:0c:b6:
d4:30:14:a5:06:e8:a4:4d:f4:3e:c9:78:a7:6a:35:8a:41:1a:
c4:cb:62:86:ac:ed:37:69:bd:a0:b9:f1:96:25:00:14:cf:24:
85:8b:66:53:b8:32:4b:2a:48:e2:dc:b3:15:08:3c:6c:23:1e:
0b:43:37:ab:19:3b:b6:81:9a:15:fb:da:05:86:73:d6:72:ad:
91:c2:f2:c9:60:f8:73:2b:b7:28:02:47:7c:36:2b:38:95:2a:
0a:ce:28:05:4d:be:53:64:30:ee:d8:aa:93:c0:4d:9d:20:84:
2b:56:1e:ad:1b:4f:4c:fa:30:b8:3a:38:be:12:4a:71:47:d1:
11:94:47:d0:04:8a:d7:d8:e1:0e:69:6b:ab:a4:92:e3:35:96:
91:25:ac:83:7a:dd:83:5e:c6:61:a8:46:cc:a7:e3:f0:fe:33:
c3:4f:d1:da:5f:9a:1a:1f:fd:64:90:ff:f5:50:fb:46:60:e9:
60:cb:86:56:38:a0:b6:f9:4f:a5:d4:9b:59:09:2a:04:35:c5:
e6:3e:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:22 2025 by rpki-client