Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
File: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft (raw, json)
Hash identifier: DyQdfaiixl1cW+ynpUpgLLzD7nJ7iMnHFjYSyIvBeLw=
Subject key identifier: 23:54:04:D0:65:2B:9D:5D:E1:A9:FA:9B:8C:23:9C:83:4D:4D:75:B2
Authority key identifier: 2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
Certificate issuer: /CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Certificate serial: 019A4DAAB7F42C4E1F0A6811F9C83F07EDBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
Manifest number: 075D
Signing time: Tue 04 Nov 2025 07:00:25 +0000
Manifest this update: Tue 04 Nov 2025 07:00:25 +0000
Manifest next update: Wed 05 Nov 2025 07:00:25 +0000
Files and hashes: 1: HK2Vi8L-VSUrFJS43CFHzQJcbz8.roa (hash: E5YSpnMWbKYKY1PUN7i5gprBfIcHK0dY28fjbucPCYI=)
2: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl (hash: C/Oln75wpZNlPuvLkF0AeRRk1ivS04edDpzbNC8y8ZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b7:f4:2c:4e:1f:0a:68:11:f9:c8:3f:07:ed:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Validity
Not Before: Nov 4 07:00:25 2025 GMT
Not After : Nov 5 07:00:25 2025 GMT
Subject: CN=235404d0652b9d5de1a9fa9b8c239c834d4d75b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:ca:ea:5d:66:05:7c:2d:e3:de:8e:35:72:
ee:ac:fa:e0:fa:bf:5a:d6:1e:b2:ff:bf:c0:9a:e0:
51:b8:20:3e:ad:4e:37:90:de:36:05:74:07:e4:b8:
9d:17:75:53:9b:df:17:4f:27:6e:38:02:ee:9d:5e:
5b:7b:72:52:36:e0:8c:a6:ba:51:83:ab:33:ad:64:
15:bb:3a:65:b7:ba:f8:10:e8:0c:83:c3:2b:ae:4a:
df:47:e7:c8:d6:39:d7:3e:a6:cd:9a:55:aa:7e:65:
07:88:fb:81:92:4e:a4:17:4a:7f:2e:d3:a1:a1:82:
05:11:ce:21:31:cf:e0:92:12:f3:78:12:77:94:90:
ee:f6:0b:ce:0e:78:19:c9:39:a8:79:d8:73:61:37:
60:40:4c:2e:c5:73:b8:e4:74:d1:67:bb:fb:e2:3e:
85:9f:1a:ae:65:33:1d:89:5c:c6:03:9f:33:fb:a7:
f5:a5:8c:7d:9d:a8:22:f6:30:dd:bf:10:62:d7:62:
11:cc:3a:b5:7b:8e:f3:05:bd:b6:b7:e8:8c:83:8f:
79:77:4f:29:f5:ac:d5:08:d4:e5:19:6b:6c:22:4e:
2d:e9:56:69:c6:81:4f:8d:e7:6f:1c:1d:40:c6:d2:
ae:a4:27:ac:2b:11:43:f9:bc:08:77:eb:d2:31:b7:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:54:04:D0:65:2B:9D:5D:E1:A9:FA:9B:8C:23:9C:83:4D:4D:75:B2
X509v3 Authority Key Identifier:
keyid:2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:40:63:b7:b2:a8:52:00:46:e5:c6:3c:0d:4b:a5:06:74:67:
ab:9c:5a:71:81:85:0a:d3:f6:53:8f:5b:48:be:11:a2:72:6f:
d4:b0:6e:53:5c:39:1d:70:1c:12:b7:ee:6b:24:ce:50:51:42:
a2:85:9b:dd:db:43:78:4b:b3:e8:8b:7d:47:fb:78:3a:43:1e:
2e:88:12:4e:72:33:b8:bf:5b:e8:99:03:7e:8e:47:48:7a:dc:
d6:d4:4d:7b:bb:26:3b:77:1c:48:cb:7d:6b:75:49:00:d1:ea:
1d:dc:26:7f:22:d7:26:aa:da:2d:1d:39:78:90:a9:1b:7c:ff:
79:53:4f:23:0b:cb:8b:50:8d:73:7e:b9:47:b9:1e:b8:8e:a6:
52:05:1c:7a:7d:51:86:8b:e4:e3:51:32:f1:b6:cd:f9:eb:9f:
8d:98:c6:49:b9:bc:12:ff:e3:bb:d4:27:10:bd:e7:0b:52:06:
0a:16:bf:a3:05:69:c6:7c:69:c8:44:78:2a:cf:87:67:fa:50:
b7:f1:a8:01:38:e7:d8:fe:92:4c:f7:49:a3:04:3e:16:53:8c:
69:4f:a6:9f:ef:eb:90:c0:77:22:be:a1:86:90:da:df:77:f0:
87:c5:7e:de:05:56:ad:71:18:ea:c5:dc:08:77:e1:3e:d0:75:
04:c1:a9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:01 2025 by rpki-client