
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
File: fgdwhBDMdkNEuM-k8-NopeJStlA.mft (raw, json)
Hash identifier: QcODhYbnqzP9334eehOoDFAphbYr+gz0fb+31LULzNg=
Subject key identifier: 0E:17:7C:EE:0D:9C:2F:1D:E7:99:60:58:6E:C1:EA:C4:B2:EB:3C:CB
Authority key identifier: 7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
Certificate issuer: /CN=7e07708410cc764344b8cfa4f3e368a5e252b650
Certificate serial: 0199DBF20014AEE6CDDAB4C003368C652A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
Manifest number: 0AF8
Signing time: Mon 13 Oct 2025 05:01:34 +0000
Manifest this update: Mon 13 Oct 2025 05:01:34 +0000
Manifest next update: Tue 14 Oct 2025 05:01:34 +0000
Files and hashes: 1: fgdwhBDMdkNEuM-k8-NopeJStlA.crl (hash: /AZBXYW2h4uXiGq4q+T6x+ZhggsBIQCi5pTAPNAhLDU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:db:f2:00:14:ae:e6:cd:da:b4:c0:03:36:8c:65:2a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e07708410cc764344b8cfa4f3e368a5e252b650
Validity
Not Before: Oct 13 05:01:34 2025 GMT
Not After : Oct 14 05:01:34 2025 GMT
Subject: CN=0e177cee0d9c2f1de79960586ec1eac4b2eb3ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:86:9b:06:d3:f7:57:b9:2c:37:e5:fd:e6:
f0:78:04:7c:2c:94:d8:a5:33:00:bd:01:f0:bc:b3:
96:f8:36:e3:ed:a1:f1:7b:a4:99:78:5c:7e:57:87:
3e:50:46:ee:8c:e4:25:2a:89:57:d9:f2:29:40:88:
f2:90:e3:ff:1d:58:60:b0:ad:51:fa:13:2b:22:67:
ea:26:d3:87:68:15:aa:e6:ee:25:a8:c4:97:ec:54:
d9:f2:12:32:08:e9:7b:23:87:17:e1:6d:af:c3:c6:
ba:d7:68:00:64:00:77:c5:97:da:12:d8:af:fc:db:
ec:ed:c5:36:92:e0:07:b1:de:52:94:c4:dc:39:bb:
33:4d:e6:09:d1:ba:de:34:43:9e:d5:d9:53:87:e1:
b7:ef:c3:a1:72:cb:be:e7:24:9a:14:3e:9b:cc:4d:
7a:8e:a7:2c:bb:8f:07:4a:8b:bd:e5:c8:6a:d3:c9:
dd:f8:3f:ba:fd:29:5e:fd:62:af:33:f6:d1:30:74:
f0:6c:78:53:60:c8:b5:d5:c4:86:79:62:af:cf:6b:
c5:93:14:d1:da:06:91:4c:c7:2a:a8:9a:e6:09:fd:
f3:a4:0a:34:53:14:ad:f0:33:73:6c:d1:84:d0:92:
b2:e0:6e:99:2f:1f:4c:2b:64:bd:f2:06:1d:bc:04:
53:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:17:7C:EE:0D:9C:2F:1D:E7:99:60:58:6E:C1:EA:C4:B2:EB:3C:CB
X509v3 Authority Key Identifier:
keyid:7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c2:7b:43:70:f6:68:ed:1c:98:21:6b:cb:8f:8e:4e:7f:cd:
fb:cc:a6:e9:8a:14:83:7a:11:26:30:a4:ff:a6:f4:47:ab:ab:
fa:7e:9f:35:62:44:3a:67:d4:e0:e1:ea:2f:1c:78:20:5b:b1:
57:1a:b3:34:f3:3b:2e:6f:f9:61:81:b4:8c:90:c2:ba:de:a0:
e2:4a:db:89:d7:46:59:52:58:74:0a:ed:a8:37:e3:34:d1:94:
74:da:b7:6e:0c:2a:86:e0:bd:b4:30:c1:91:bd:be:2f:08:82:
b1:26:a1:d8:ce:9e:b4:e1:0a:ff:26:52:e8:0c:8d:74:e5:b1:
20:b0:78:f9:16:7a:63:0d:9f:34:e3:9b:0e:33:0f:7f:bd:ec:
a1:ec:60:18:6c:12:37:d1:ed:3c:a7:e3:1f:ba:33:c7:30:f8:
4d:4b:5c:bf:9a:1a:0d:6c:7d:39:8f:91:46:ff:dc:4e:5f:1f:
47:23:c9:d4:52:28:20:3a:71:61:25:77:9a:b8:f9:8d:7b:0c:
c5:f2:47:49:f2:f1:67:73:7e:16:58:e8:94:b6:be:38:3d:af:
58:02:70:a9:49:d3:2c:64:a4:e3:3b:70:e4:f4:79:5f:1b:68:
a1:b4:0e:1b:cc:dd:6f:3d:98:11:6d:d1:38:6d:f0:6f:fa:18:
af:cf:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:07:32 2025 by rpki-client