Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
File: iloI9Bw3MCfggbXByoqAC_GFXZ8.mft (raw, json)
Hash identifier: bZzfnmsePhPdSqAIGK4vb83v/BryKzUgc8wk3+TuNuY=
Subject key identifier: 48:70:8F:8A:13:96:6C:59:99:3D:FE:43:80:6C:47:97:D6:A3:AB:79
Authority key identifier: 8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
Certificate issuer: /CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Certificate serial: 0198F38E2A5984D3B264BF88555A998D0765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
Manifest number: 0A21
Signing time: Fri 29 Aug 2025 02:00:37 +0000
Manifest this update: Fri 29 Aug 2025 02:00:37 +0000
Manifest next update: Sat 30 Aug 2025 02:00:37 +0000
Files and hashes: 1: iloI9Bw3MCfggbXByoqAC_GFXZ8.crl (hash: VECzEG5/BGfi4XAbupVrHZ2i5iiL7SuGjyKBctrLAKg=)
2: yECgV0Zjm63pdebLZV2oJguqmFo.roa (hash: TFpt7mIhig+6+4covOB47Kn/9EddQnuc9xQ22XL602I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f3:8e:2a:59:84:d3:b2:64:bf:88:55:5a:99:8d:07:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Validity
Not Before: Aug 29 02:00:37 2025 GMT
Not After : Aug 30 02:00:37 2025 GMT
Subject: CN=48708f8a13966c59993dfe43806c4797d6a3ab79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:c6:ff:16:1a:0a:72:49:39:0b:49:48:aa:
90:f5:47:ba:a0:de:eb:f8:53:eb:20:78:42:aa:6a:
af:33:22:00:0e:f9:80:f2:ee:d6:4a:4e:e9:e1:c8:
55:0d:2d:08:24:2e:f3:1c:4f:e0:7e:6a:91:05:95:
b8:31:17:42:00:df:6a:a1:e0:68:be:30:a6:98:6a:
e5:91:59:9f:36:9a:6c:7b:29:be:d5:60:7b:70:6f:
b7:65:6c:d6:57:d7:98:06:5a:01:84:f7:0d:ff:da:
c6:9c:15:bf:89:08:cf:50:48:69:77:2e:ed:3a:dd:
da:df:65:bf:65:51:ad:5f:49:c6:b1:b5:ae:29:fe:
f8:43:94:d8:22:42:71:f8:61:3c:0c:a3:70:13:c7:
ae:c8:18:46:b5:44:99:b3:44:87:0d:07:01:c8:58:
67:29:23:89:51:d3:ff:00:9a:97:3a:03:15:6a:c9:
4c:f7:e0:00:d9:21:59:2e:26:78:43:75:76:ea:25:
8c:6c:fe:06:ee:e4:f2:f7:54:c5:df:5c:11:b3:97:
aa:f2:f1:a9:ed:54:34:98:95:75:96:8e:55:a7:3c:
77:83:48:42:94:67:cf:93:c2:f9:7e:56:06:e3:4b:
97:3c:c1:d1:1e:8e:e8:e3:56:bc:7f:7e:ed:54:61:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:70:8F:8A:13:96:6C:59:99:3D:FE:43:80:6C:47:97:D6:A3:AB:79
X509v3 Authority Key Identifier:
keyid:8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:84:89:ee:6f:14:6f:84:94:19:27:27:5a:ca:eb:05:ed:bc:
b6:cc:3f:f0:cf:0b:88:ff:33:0d:e1:1a:ab:8f:fa:9a:30:8f:
cf:4d:72:f6:d8:7b:89:bf:42:9e:03:b6:9b:60:4c:98:11:b1:
39:d5:70:90:4f:09:f9:78:47:eb:ae:24:24:46:1c:17:63:a1:
b4:c7:d3:91:4a:60:1b:1f:05:26:7c:14:c0:8e:04:4b:e4:8c:
66:25:99:2e:3d:65:f0:66:82:f7:8b:16:33:99:0a:7e:23:da:
4f:a7:25:c1:f7:db:64:3e:64:ae:c8:e1:55:e9:2f:f6:df:6b:
35:b8:95:9f:4b:b3:8c:80:8c:17:ff:40:77:6e:dc:2e:12:75:
40:d9:1b:fa:a9:d8:85:d2:61:bd:71:ee:8d:e5:bc:ee:76:23:
f1:2d:9a:42:e8:d4:da:c2:13:59:e2:23:27:bb:a6:42:59:10:
bc:0c:f1:93:35:6f:18:f8:63:46:be:29:73:ab:e9:ac:b7:d6:
94:ec:51:d3:82:db:7f:54:45:c1:c7:9e:40:99:3b:72:d9:9a:
b7:57:9d:de:fb:bd:86:e3:f5:8d:e2:72:6b:3d:b1:a0:dc:40:
62:63:84:65:9d:16:8c:96:95:68:b8:49:82:7c:17:13:84:84:
8a:d5:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:18:22 2025 by rpki-client