Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
File: agPhC26juPNiz7I671icd3cefso.mft (raw, json)
Hash identifier: eNz7xvUqZIBifFYnMoriTMvGk03zc+OHgx+D5QMF8eg=
Subject key identifier: 68:9D:F3:D5:B7:9E:8E:44:EF:3A:16:A8:2D:38:95:4C:8B:60:29:E4
Authority key identifier: 6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA
Certificate issuer: /CN=6a03e10b6ea3b8f362cfb23aef589c77771e7eca
Certificate serial: 01980BCFABD29AF23C5AF0CA062691A3E78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
Manifest number: 07DB
Signing time: Tue 15 Jul 2025 02:00:15 +0000
Manifest this update: Tue 15 Jul 2025 02:00:15 +0000
Manifest next update: Wed 16 Jul 2025 02:00:15 +0000
Files and hashes: 1: 2vSSEUGyoECcbr-T4y2ubbHraKg.roa (hash: B7WLa2ysTg94FsBb1jS1WwKUUvVr7kQqcY57g1dK/4s=)
2: agPhC26juPNiz7I671icd3cefso.crl (hash: KiGSl891NF41ZWGAjNG2MKQAhIRyOKgvzp8dBkgdrGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0b:cf:ab:d2:9a:f2:3c:5a:f0:ca:06:26:91:a3:e7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a03e10b6ea3b8f362cfb23aef589c77771e7eca
Validity
Not Before: Jul 15 02:00:15 2025 GMT
Not After : Jul 16 02:00:15 2025 GMT
Subject: CN=689df3d5b79e8e44ef3a16a82d38954c8b6029e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:e0:77:cf:e4:67:e3:50:27:75:87:47:c4:
d8:fd:2d:33:77:58:df:b0:bb:ce:fc:bb:71:07:2c:
f8:2a:6d:50:d6:46:3f:45:a7:36:4e:9a:6a:22:92:
cb:1d:6c:39:20:49:24:8f:1a:bb:89:28:0f:9c:69:
43:0b:a1:60:bc:a6:88:33:05:62:1f:53:bb:bb:4d:
27:33:3c:f0:dc:7c:ca:c3:d8:bd:b0:bd:31:a6:03:
eb:41:1c:bc:79:0c:51:e6:0e:6c:5a:2c:4e:3e:2c:
c3:d5:4a:68:04:d2:f1:3c:c7:aa:0e:a6:04:e7:0e:
39:e7:5c:f9:96:0f:f1:5b:ca:30:a5:d2:43:00:47:
b0:2e:58:86:ae:30:f8:77:8e:25:3a:7c:e2:36:a9:
9a:f0:bf:0e:c9:c1:d4:59:b6:63:83:f8:be:5f:b3:
ec:61:66:7b:d3:71:1f:6f:2c:41:4f:d6:18:e0:bf:
92:ad:e5:6b:0c:21:12:b9:70:69:c6:d2:0a:bb:d2:
bd:5c:3e:f3:df:1e:93:e6:92:32:8a:b1:4a:31:d8:
78:56:fa:8d:28:b4:7f:fb:f2:b6:75:ce:62:ec:47:
03:d6:73:b9:a4:64:2e:35:99:8a:a7:19:b7:ad:9e:
9d:d7:93:c5:87:45:2b:03:2f:df:15:7f:cd:d2:21:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9D:F3:D5:B7:9E:8E:44:EF:3A:16:A8:2D:38:95:4C:8B:60:29:E4
X509v3 Authority Key Identifier:
keyid:6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:59:ed:c6:ac:c5:fd:4b:51:37:52:5b:21:0d:d7:1f:e3:9d:
a5:05:a6:05:e2:86:6f:d1:e5:a7:61:5e:72:a8:b5:da:bb:69:
5b:ad:0b:39:fb:d7:d3:77:77:2c:e5:dd:5e:c5:62:21:2c:a4:
55:22:49:45:b6:62:ae:b3:a0:9b:02:4c:66:1b:a9:e5:3e:c9:
f4:b7:d1:64:af:7e:a7:e5:3f:ec:64:5e:e8:f7:6e:0b:66:52:
bd:a5:35:f2:0e:4a:84:39:6d:ec:15:0b:0a:90:df:ab:7d:4b:
af:f2:b9:13:4f:15:70:2f:26:75:a9:65:0b:d9:ca:1e:e0:6f:
32:74:e8:a0:5d:cf:5b:6b:b2:cb:9b:aa:e5:39:ed:70:41:9c:
a0:9c:3d:db:31:f3:cf:fb:ca:ee:a9:cc:f4:6f:a0:95:1e:d4:
8e:5d:88:48:30:6e:95:20:b6:dc:7b:62:d9:ab:03:58:cc:52:
ec:9a:fe:fc:cd:1b:40:ea:49:79:cb:bd:48:ab:d1:fc:2b:f0:
9f:66:d8:c9:11:91:4c:fd:24:16:79:70:39:70:ed:9c:ab:78:
5f:5f:b1:fc:d0:b0:43:ca:9a:f2:12:cb:2a:76:4f:3d:a7:f8:
36:9c:4e:cb:21:a0:5f:b7:16:22:42:cd:79:1b:89:97:de:be:
f3:b5:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:31 2025 by rpki-client