Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
File: YpnP38Adrmf6buMXlIB3DEUrrCI.mft (raw, json)
Hash identifier: gAwUjPofXknl/OEK/2YVKVrL/xe7/SljBxWFvE8WKDw=
Subject key identifier: 57:AD:27:C5:BE:05:94:5A:65:7F:E5:20:78:97:C1:23:2B:1D:35:29
Authority key identifier: 62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
Certificate issuer: /CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Certificate serial: 01987E9D1413EDADB2B1D81A5F6345A7614B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 09:01:20 +0000
Manifest this update: Wed 06 Aug 2025 09:01:20 +0000
Manifest next update: Thu 07 Aug 2025 09:01:20 +0000
Files and hashes: 1: Mkph3bTd1xJZVg1WlaswgHrEuSg.roa (hash: l36JgOHpzZ+Jn9f8sIbdhy0YGZNW92MlOpmEM1lS6Ko=)
2: YpnP38Adrmf6buMXlIB3DEUrrCI.crl (hash: qP2LP34lfzTyhIfkGz5K7qMsNboyeCbdIce19iF9dfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9d:14:13:ed:ad:b2:b1:d8:1a:5f:63:45:a7:61:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Validity
Not Before: Aug 6 09:01:20 2025 GMT
Not After : Aug 7 09:01:20 2025 GMT
Subject: CN=57ad27c5be05945a657fe5207897c1232b1d3529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:1d:49:03:78:e3:73:bf:f3:47:b1:e3:60:
ba:51:c0:e6:03:7a:f4:cf:0e:74:f7:cb:cc:f4:16:
65:e6:f2:4d:b7:cc:14:2f:21:6b:8e:cb:8f:c9:81:
7f:ca:f6:b4:8a:8c:7c:00:4a:df:95:24:d1:c6:09:
e7:6c:08:10:ce:c5:73:bb:da:57:33:3f:ee:2e:84:
1f:c6:1c:77:18:d1:cb:1b:72:44:16:da:81:87:de:
9d:9e:80:e7:8f:92:52:05:3b:c8:13:9f:bf:d4:eb:
65:0e:c2:4d:58:87:a6:8f:1e:4b:d6:5e:59:12:ef:
28:c0:1e:09:20:d3:e9:0e:ca:4d:b0:c1:34:59:b6:
c4:fc:1f:4e:8b:b6:9b:50:fe:85:04:fe:2a:dc:7d:
1f:0a:71:c8:cc:44:77:37:ad:d8:20:58:e3:36:d2:
49:7a:56:03:42:22:3f:a0:01:4f:a3:f3:87:c5:47:
7f:0f:c1:90:a9:e8:3b:ac:c4:41:32:5b:26:e1:b4:
93:d6:91:d5:c4:c0:ff:b6:ea:5e:e9:c9:08:13:fd:
21:bc:f9:ea:1d:92:b7:ca:93:1d:0c:fd:a3:59:bd:
b3:a0:69:7f:40:0c:6f:7b:45:a5:48:96:25:e7:29:
a6:29:22:13:38:49:f4:96:43:07:f9:86:35:0d:ce:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AD:27:C5:BE:05:94:5A:65:7F:E5:20:78:97:C1:23:2B:1D:35:29
X509v3 Authority Key Identifier:
keyid:62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:81:5f:3b:5f:1e:35:f0:55:8f:83:1e:39:46:fc:70:86:96:
60:c3:37:52:97:8b:8d:7c:6e:c7:0e:94:95:37:ff:b9:6d:75:
9b:ec:5d:89:94:5b:f7:67:46:09:3b:ea:8e:a6:3e:0c:fd:67:
21:22:f3:c8:02:70:20:aa:fa:d7:e2:c1:f9:fc:6b:77:05:54:
1a:62:25:a9:04:30:70:33:69:61:c3:f8:87:06:a6:ac:40:23:
cf:09:23:66:73:08:74:b7:a4:cd:b9:a6:22:0c:f8:3a:3a:0e:
2d:3e:86:ab:75:b4:e4:3c:69:16:d3:c6:66:63:b2:5d:e5:89:
3b:ae:54:19:bb:28:ca:b7:29:9b:b6:31:7c:9e:06:66:66:c6:
51:c5:4b:f6:34:74:1a:bc:77:19:47:a0:49:5c:10:a3:79:b5:
27:c5:32:34:c7:4e:d0:15:6e:1b:3f:c9:80:9f:b6:cf:f3:e5:
b1:c9:0e:b6:04:82:f6:9f:e7:9c:1a:a9:1d:f7:2c:25:81:12:
01:33:51:2c:a9:fa:e5:5c:d1:5c:e7:0c:73:9e:f1:8a:b9:35:
6d:f0:98:11:89:cd:f1:c5:a8:b3:a1:11:57:90:8b:e6:f0:1d:
17:3c:94:6a:be:14:ac:1b:f9:67:5f:75:ec:25:35:99:d6:25:
c0:72:43:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:53 2025 by rpki-client