Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
File: aIPzR-OJH1c9-AFa1swzHM6wR2g.mft (raw, json)
Hash identifier: jHOKrtWMAnYlKq/TUb1Sf0RaCxjYE5FJCH9MQrmYE/c=
Subject key identifier: 10:0D:3C:A8:CC:8A:37:3E:D8:E7:68:D7:4F:CE:D8:A9:E8:8D:F4:0F
Authority key identifier: 68:83:F3:47:E3:89:1F:57:3D:F8:01:5A:D6:CC:33:1C:CE:B0:47:68
Certificate issuer: /CN=6883f347e3891f573df8015ad6cc331cceb04768
Certificate serial: 0197C07F8C193C4D03154CB7EEE171D6E340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIPzR-OJH1c9-AFa1swzHM6wR2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
Manifest number: 0563
Signing time: Mon 30 Jun 2025 11:01:13 +0000
Manifest this update: Mon 30 Jun 2025 11:01:13 +0000
Manifest next update: Tue 01 Jul 2025 11:01:13 +0000
Files and hashes: 1: aIPzR-OJH1c9-AFa1swzHM6wR2g.crl (hash: wnPog0ATW46BN5Kb/Cpxl+IbA73yCJ1856dpzxmZVgk=)
2: yzwcVTa4_EkxmkA3zs7RU2L0KuA.roa (hash: DiSWwAw7nqN/ZHYKb36GWp0hrc3vDQ6bPbUIBdkwyko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:7f:8c:19:3c:4d:03:15:4c:b7:ee:e1:71:d6:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6883f347e3891f573df8015ad6cc331cceb04768
Validity
Not Before: Jun 30 11:01:13 2025 GMT
Not After : Jul 1 11:01:13 2025 GMT
Subject: CN=100d3ca8cc8a373ed8e768d74fced8a9e88df40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d9:c2:b9:f7:96:c8:fe:f5:d7:ca:cc:b1:70:
15:45:66:80:d1:10:de:4a:d6:b6:a3:7f:30:ef:89:
dc:ca:e1:05:64:3b:78:23:38:36:c2:51:af:35:14:
8e:7b:e5:88:1b:34:00:4d:7b:7f:df:80:3c:82:de:
70:fc:b8:e4:d1:6b:d6:dd:db:ce:41:86:76:16:85:
5b:11:84:11:1e:81:20:e9:d0:07:58:6d:a2:db:52:
63:0f:14:ad:3a:f9:d4:fa:c5:ba:e7:48:4b:0d:b0:
55:12:ea:32:81:b9:38:c5:5e:17:78:b1:c1:07:19:
29:2f:40:ca:af:82:e7:7e:bd:ec:d4:e7:26:7a:6f:
65:bc:1c:ef:6b:54:aa:38:1b:cc:ef:d3:2d:15:79:
6f:d4:77:b2:1c:05:01:fd:03:26:ff:d7:99:fd:71:
d6:86:79:6a:2a:d9:cf:1b:2f:8c:dd:4a:16:6a:90:
64:59:a5:f1:72:de:a6:65:cb:e2:79:65:97:4d:32:
79:cc:fa:aa:d8:f5:04:b3:50:3d:50:10:62:20:8b:
89:48:d7:2f:03:e0:f9:29:06:37:db:7b:34:7a:36:
98:90:0e:b3:af:df:18:af:66:f1:e2:b0:14:dc:5a:
8d:d0:a5:57:39:2a:a5:ed:33:2c:14:3e:25:a5:a0:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0D:3C:A8:CC:8A:37:3E:D8:E7:68:D7:4F:CE:D8:A9:E8:8D:F4:0F
X509v3 Authority Key Identifier:
keyid:68:83:F3:47:E3:89:1F:57:3D:F8:01:5A:D6:CC:33:1C:CE:B0:47:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIPzR-OJH1c9-AFa1swzHM6wR2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fb:85:63:4d:70:05:0d:93:29:26:15:93:ac:b5:c1:89:05:
5a:a6:4c:78:d1:89:54:c4:b3:d9:90:1d:0b:f5:d1:a9:b6:a8:
68:49:cd:c2:81:6c:42:30:f7:87:1b:53:7a:0a:f4:5b:ad:82:
da:13:3a:1a:e5:51:e6:4a:8e:19:3c:41:cd:c5:0b:79:b9:25:
bf:50:2b:7a:a7:fc:d3:d9:39:7d:e3:8b:ed:5e:7b:3a:11:ee:
49:75:ce:72:7c:59:9c:75:81:53:61:3f:00:58:db:4d:bf:33:
95:f9:c4:53:60:0f:56:77:01:fa:d2:c1:96:b9:b7:4a:35:75:
b8:60:59:07:f2:6b:51:de:ef:69:60:2f:6f:fa:37:02:d3:41:
2c:13:d4:5f:a8:d0:b5:01:6a:49:20:8f:8f:9d:fc:9e:7f:23:
d1:c5:d8:e2:73:ac:8d:f7:4e:3f:b5:ef:8a:22:4c:f4:1a:be:
f2:ef:81:13:5e:12:03:40:1a:92:0f:4d:3e:88:38:62:7b:23:
cb:73:d5:f9:86:90:fb:1d:60:41:69:41:76:14:71:4e:2d:9e:
59:83:b6:ad:15:24:4e:89:be:8e:0a:53:f8:7d:02:25:67:53:
c8:cd:a0:81:93:08:03:97:a9:4d:d9:eb:af:87:dc:b8:08:49:
c4:13:9d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:14:27 2025 by rpki-client