Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
File: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft (raw, json)
Hash identifier: 9/615zSRxzCF6KRgtxdKFwQwx8hMVfAJ2DsWsol8zFg=
Subject key identifier: 2A:4B:C7:93:DE:70:26:A1:F9:CE:FE:1D:0E:36:55:54:78:A6:FC:D0
Authority key identifier: 64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
Certificate issuer: /CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Certificate serial: 019858D90EA41BDAEB4E186341204379C0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
Manifest number: 0ECE
Signing time: Wed 30 Jul 2025 01:01:16 +0000
Manifest this update: Wed 30 Jul 2025 01:01:16 +0000
Manifest next update: Thu 31 Jul 2025 01:01:16 +0000
Files and hashes: 1: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl (hash: Gg39qyio4P1phxqINvI849r1saUI4ZVSI3YQ+dcuG3s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:d9:0e:a4:1b:da:eb:4e:18:63:41:20:43:79:c0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Validity
Not Before: Jul 30 01:01:16 2025 GMT
Not After : Jul 31 01:01:16 2025 GMT
Subject: CN=2a4bc793de7026a1f9cefe1d0e36555478a6fcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:2f:d1:fc:99:37:92:3a:57:14:0f:6d:a1:
6a:18:9a:0a:ab:72:ef:a1:93:35:99:b3:9f:96:cb:
5a:24:95:5e:9e:13:1f:ae:90:60:cf:f7:a0:b3:9c:
57:2e:fc:91:27:4c:94:3d:b8:fd:33:a9:9b:1a:2b:
cf:e2:e3:bf:22:00:5b:16:20:23:e2:14:07:9f:bf:
cf:bc:f2:a9:08:e2:0a:7c:a4:a6:38:45:bf:24:64:
c9:60:4b:10:34:53:2e:46:55:4f:e4:d7:54:77:eb:
35:87:2e:5f:2f:30:ce:7b:36:ba:66:c9:8c:43:2a:
2f:7e:d1:47:2c:f6:27:cf:bc:09:f8:b6:7b:ae:75:
55:92:04:8c:80:0c:78:78:be:42:fb:c1:59:41:b5:
98:a8:90:58:89:7a:73:9c:4e:64:9c:14:a0:57:93:
8d:bf:f6:1d:9e:af:49:cf:eb:8e:c5:04:cf:53:b1:
12:cb:e0:92:6e:b6:dd:a6:d2:14:1d:5a:a3:1a:a4:
54:28:c6:e6:9c:c2:7e:77:c6:dc:97:f3:b7:de:c6:
7c:21:fd:71:9e:44:fe:33:aa:8a:93:a1:50:97:82:
0d:d7:fd:ee:53:b9:2f:c9:77:1b:7d:83:15:f9:ff:
2a:35:52:cb:d3:f1:be:dc:5c:09:9e:59:e6:ae:14:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4B:C7:93:DE:70:26:A1:F9:CE:FE:1D:0E:36:55:54:78:A6:FC:D0
X509v3 Authority Key Identifier:
keyid:64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ee:55:84:8e:d7:7c:e3:b3:ee:45:a1:62:5c:ed:cd:bc:6e:
68:c6:b6:8b:06:63:4b:bb:e0:ae:8e:ad:b4:44:1c:c7:d3:a2:
1e:34:12:cc:17:fb:d6:15:ab:03:26:f4:d7:a7:fa:b9:ad:2e:
01:20:39:54:b5:5d:f2:2d:fd:8c:27:6f:8e:b7:bd:82:11:ea:
1b:66:96:cb:13:03:67:cd:5b:a3:76:06:f5:5f:13:d5:c1:7e:
69:bd:f1:6d:db:0f:48:74:a5:cc:d0:19:bd:6a:31:54:5d:dc:
53:ba:d3:a9:4f:5f:0a:f3:cd:94:2c:db:37:ef:10:b4:4e:b7:
06:21:8f:a3:a2:74:0c:42:86:c3:8d:2b:23:e1:d2:13:0c:14:
d1:78:9a:30:ec:36:46:2d:0c:5e:08:42:16:b0:a2:ea:23:9e:
67:41:b4:a4:ca:2b:42:9a:bf:e5:26:71:bc:92:a4:00:a9:82:
67:99:76:ee:c3:9a:19:cf:4b:db:de:61:95:23:e8:88:1f:83:
73:1d:1f:f1:b1:14:c9:36:be:02:23:5e:3f:bf:b4:c7:26:35:
d3:f3:f5:00:30:a8:1b:24:3e:72:96:8c:05:b5:7a:ff:0d:26:
bc:4f:ac:52:7b:0d:bf:91:75:1c:88:2b:39:23:16:13:ef:59:
83:39:75:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:13 2025 by rpki-client