Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
File: vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft (raw, json)
Hash identifier: zTDyrOJ303rQTUsWgT6b7eIT/cGhvjto/A8x9XBqgmk=
Subject key identifier: FC:F9:16:B7:AD:DA:29:F8:99:6D:82:25:04:F6:98:A9:43:68:AF:83
Authority key identifier: BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
Certificate issuer: /CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Certificate serial: 019A09DCC8F1829B4C4929CDF22F419404D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
Manifest number: 02DA
Signing time: Wed 22 Oct 2025 03:00:55 +0000
Manifest this update: Wed 22 Oct 2025 03:00:55 +0000
Manifest next update: Thu 23 Oct 2025 03:00:55 +0000
Files and hashes: 1: vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl (hash: i7IaLL5B7DGnQd3ayedMEhqhyMqAuAP4S9uMqi+N8sc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:c8:f1:82:9b:4c:49:29:cd:f2:2f:41:94:04:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Validity
Not Before: Oct 22 03:00:55 2025 GMT
Not After : Oct 23 03:00:55 2025 GMT
Subject: CN=fcf916b7adda29f8996d822504f698a94368af83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:1d:f7:01:a5:1d:d6:50:83:07:f9:f8:4c:
6e:3a:9b:03:fc:a9:61:80:3b:11:3d:c0:3a:0e:47:
05:f5:5c:b4:b2:98:ed:3a:67:c5:b4:c8:31:93:7a:
da:4e:29:03:03:ec:4d:01:e8:af:e5:9e:70:ee:91:
88:db:ea:c3:f7:cf:17:5c:61:d0:ea:c8:0e:a9:eb:
82:e6:0c:5a:7d:5d:30:7b:82:7c:ff:09:9c:c0:40:
7e:87:cb:c9:f8:15:ef:35:1a:f1:ea:dc:d5:23:27:
83:b1:ee:bf:c2:75:47:38:33:a0:5d:08:5a:f1:f8:
45:f3:c3:44:51:55:5f:2a:9c:d0:a8:82:ad:8f:7c:
2b:fe:2b:50:02:e7:c4:f9:84:e4:3c:89:e9:32:47:
3f:f6:ff:fc:27:e3:c1:71:54:9b:bf:17:12:99:4a:
39:96:e5:ee:78:e6:52:42:70:aa:bf:3b:c1:b0:45:
f6:f2:76:c8:47:89:17:36:1b:a4:5a:8f:a4:9f:2f:
29:e7:65:fa:a8:ff:0c:c2:4e:e3:28:27:c0:94:01:
7a:cb:7c:b9:b7:b9:f9:9e:b6:34:f1:32:10:32:ff:
e6:d6:ef:37:e3:e9:75:5c:7c:98:96:36:b3:2c:9b:
9e:b4:bf:11:53:4a:5f:2f:f1:45:04:8a:93:67:be:
22:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F9:16:B7:AD:DA:29:F8:99:6D:82:25:04:F6:98:A9:43:68:AF:83
X509v3 Authority Key Identifier:
keyid:BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4b:10:06:89:67:d5:06:6a:78:97:1b:f6:e0:6c:20:21:a4:
37:0b:fe:a4:52:a3:38:7a:de:6d:ef:22:ed:f3:a9:31:84:b5:
d4:55:08:84:77:c8:1e:ee:a2:44:19:b1:71:a9:e7:28:6c:07:
f4:f8:4b:11:1b:44:88:b0:0f:62:73:f6:bb:1f:de:a0:fe:cc:
c4:66:cc:ab:18:29:a3:91:38:15:ac:de:64:6a:94:d7:4a:18:
0f:35:f1:24:10:d4:72:66:80:1c:1e:9f:58:d2:e9:4f:e1:ae:
8a:cb:d3:f3:11:5a:28:2f:65:40:8f:18:51:3e:3a:0c:39:bb:
f3:80:d2:8b:31:b2:7c:08:ea:01:d4:bd:59:3c:f3:0e:c1:53:
8f:71:bd:da:fc:e3:07:9e:86:87:a8:65:7b:ba:b6:58:bd:33:
88:90:be:bb:66:65:3b:5a:c3:32:ae:32:c7:7b:9f:36:0a:70:
a8:9a:a6:6b:47:fe:c9:79:cb:03:2c:c2:c4:5e:24:e9:9c:84:
93:32:34:9c:c7:a6:1e:33:40:f3:7c:00:00:4b:29:27:99:6c:
93:99:e1:a1:ed:fa:f5:ba:52:3a:bd:6e:cb:6e:99:8d:ae:cd:
f6:3d:8e:f5:64:1e:e8:33:f7:77:08:32:36:2f:d2:ca:0f:68:
d4:57:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:47 2025 by rpki-client