Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
File: 8iyKma2nf70-JAFPXiTxr2lQXCM.mft (raw, json)
Hash identifier: exYtNJjBIwq7Svl1MPHbCEPyRrX520cnAXlAUzYQ2wU=
Subject key identifier: A8:12:5E:A3:B2:49:2E:D2:E9:84:AB:EE:B6:15:D4:4B:4E:A3:02:62
Authority key identifier: F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
Certificate issuer: /CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Certificate serial: 019902CB5115BEFFEF7567E6362E04EE117B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
Manifest number: 1661
Signing time: Mon 01 Sep 2025 01:01:42 +0000
Manifest this update: Mon 01 Sep 2025 01:01:42 +0000
Manifest next update: Tue 02 Sep 2025 01:01:42 +0000
Files and hashes: 1: 8iyKma2nf70-JAFPXiTxr2lQXCM.crl (hash: ZbJ+8b0Qopz29Hic4rAolxSys+md0Uw1dl7+mmWIlfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:02:cb:51:15:be:ff:ef:75:67:e6:36:2e:04:ee:11:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Validity
Not Before: Sep 1 01:01:42 2025 GMT
Not After : Sep 2 01:01:42 2025 GMT
Subject: CN=a8125ea3b2492ed2e984abeeb615d44b4ea30262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:cc:d5:18:ee:24:97:84:a5:f6:45:d3:bd:
18:b7:40:df:34:0a:51:72:8e:9c:64:9d:b4:fe:29:
47:57:90:11:19:bb:18:c6:94:2a:54:0f:c5:4b:bc:
27:d8:d8:a4:1a:74:d6:88:eb:30:f6:a2:d6:88:43:
c8:ec:ff:31:20:9c:bd:f6:df:ec:47:29:d7:89:ca:
02:a8:08:99:b4:82:50:76:55:88:fd:2e:8d:39:fc:
92:01:6b:aa:3d:30:88:07:44:bd:24:52:64:22:20:
d8:1c:e8:2e:f2:a9:7e:a0:67:4f:e3:e0:6f:4d:10:
09:b5:89:d9:7b:5d:9c:79:7b:04:8f:15:3c:fa:7b:
d0:43:a3:8c:80:da:1d:c3:5a:a9:16:e9:c2:0e:60:
f7:dd:00:ba:be:56:04:76:cc:3f:b4:73:c7:a7:da:
c8:12:eb:9c:9d:cf:75:df:6b:05:ef:3b:e6:71:11:
20:d5:b0:3e:19:2e:d1:16:b4:7f:be:23:e7:46:4b:
3b:36:57:13:1f:78:1e:5b:2d:18:52:fc:a1:e2:37:
7f:ea:5d:99:39:26:62:a2:e1:13:23:7f:c7:cc:6b:
2c:88:9e:1b:64:c3:4c:8f:fd:95:2b:a9:23:13:03:
db:6c:47:06:7f:4e:6e:5c:41:e3:61:6d:e2:3c:6e:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:12:5E:A3:B2:49:2E:D2:E9:84:AB:EE:B6:15:D4:4B:4E:A3:02:62
X509v3 Authority Key Identifier:
keyid:F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:02:75:7e:99:fe:de:f2:f6:c9:e6:36:ab:c7:e3:90:f7:82:
e3:98:e8:7a:a1:2e:c2:98:80:c2:72:fa:67:e5:29:cc:19:c8:
52:61:0a:3b:bc:2e:c4:6d:26:22:d5:fd:b4:06:a3:d1:6a:8b:
8e:8f:05:94:de:e1:75:ff:57:ff:2e:48:6b:b5:b1:46:dc:ef:
05:33:e9:a7:04:7d:ab:c9:b9:21:e7:8b:9a:01:d8:51:ba:9e:
8f:5a:f8:a1:39:87:a0:9e:6f:81:db:1b:5d:d6:88:6a:ca:1e:
c9:11:73:57:0a:1b:8c:11:53:f8:9a:d3:d1:c6:0f:6c:6c:b5:
0c:23:53:79:93:16:8f:12:9b:5e:9f:26:a0:2a:fe:44:f5:5a:
3d:6d:8b:c4:4e:60:5d:13:b9:d6:c0:86:8f:a5:49:d5:a4:3d:
62:89:6f:c3:6d:e8:0d:f9:66:2f:87:ca:4d:4f:c5:75:84:7f:
70:90:93:46:f2:10:f4:0f:b2:de:e8:54:5f:35:8c:93:28:1c:
11:13:f9:da:ad:ff:3c:48:da:5a:fd:6e:da:83:0a:f3:2c:4c:
81:bc:77:5a:99:55:49:2d:d7:cc:35:16:da:98:dd:ec:57:82:
d1:f8:a8:49:91:51:6f:16:94:69:2c:2d:1c:ca:5b:df:0c:85:
90:72:b1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:49 2025 by rpki-client