Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
File: qNU0ujy0JM9cXjuiVLojJQgGWLA.mft (raw, json)
Hash identifier: krB0HmZqByjL5JZoXBFCzSNY+r23psuSyNg7djpjMQI=
Subject key identifier: E5:F2:EC:75:7B:95:0D:D7:F7:2A:2C:81:23:89:C3:BB:51:24:04:1C
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Certificate issuer: /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial: 01997A868B22C1F2A5838AF889E1252AC607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
Manifest number: 07E2
Signing time: Wed 24 Sep 2025 07:01:01 +0000
Manifest this update: Wed 24 Sep 2025 07:01:01 +0000
Manifest next update: Thu 25 Sep 2025 07:01:01 +0000
Files and hashes: 1: oATe-_oISha7IgG23AEM218xrRE.roa (hash: uddGyx2jLyok/qpchLVARkXw2HFXXOE6m1d81wn4B4M=)
2: qNU0ujy0JM9cXjuiVLojJQgGWLA.crl (hash: ZtP7+wSIlA3Fk1cHKglo9um8YF/vqwVuepybpjKRmsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:86:8b:22:c1:f2:a5:83:8a:f8:89:e1:25:2a:c6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Validity
Not Before: Sep 24 07:01:01 2025 GMT
Not After : Sep 25 07:01:01 2025 GMT
Subject: CN=e5f2ec757b950dd7f72a2c812389c3bb5124041c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:5b:7b:25:72:49:1b:88:b0:c8:ac:1a:3f:
59:b0:f3:a9:85:de:a6:5e:6a:11:0b:dc:9c:ac:4a:
f7:d7:69:82:c3:9b:7c:c4:e1:aa:d3:32:53:7a:d3:
23:af:05:4d:75:1b:78:0d:6d:96:04:2a:c6:d7:a4:
ca:93:99:fd:c9:c4:2d:b5:e6:5a:04:de:6e:9c:df:
fe:fe:54:a3:da:2d:3b:94:36:bd:28:6a:7a:b2:05:
6a:05:12:87:04:5a:03:b0:98:a5:17:3a:cd:e8:1b:
a4:dc:6d:d1:e7:83:4d:d0:fb:d3:fc:f9:8a:7e:84:
39:98:d7:8b:ca:22:67:b8:40:e0:f8:34:f8:00:f5:
d1:62:3b:99:98:11:2b:99:e4:80:d8:b8:87:e3:30:
3b:b2:e1:52:d5:6e:e8:17:f0:16:b8:f2:a6:7d:41:
15:83:42:97:33:e1:b4:86:a4:e6:64:a9:a8:7b:3c:
13:62:65:49:b3:55:f0:a8:8b:82:23:b5:a1:3c:53:
1b:e4:50:16:38:1f:09:c6:31:31:37:03:4b:61:8b:
96:f8:d7:91:95:ce:9c:8b:1a:c2:e5:7b:5c:51:85:
2d:2c:13:19:3f:40:fd:f2:1a:7e:a6:45:62:9c:ec:
46:85:1c:e8:c3:40:f1:73:2e:b0:ec:c0:b7:24:28:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F2:EC:75:7B:95:0D:D7:F7:2A:2C:81:23:89:C3:BB:51:24:04:1C
X509v3 Authority Key Identifier:
keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:13:9a:57:4c:2c:19:b9:dc:68:23:1f:dd:ee:eb:db:7e:63:
d2:4a:70:f7:4d:d6:fc:fa:9c:d3:c9:8c:d2:5e:fc:82:37:24:
a4:fd:6b:d5:8f:69:8f:8c:21:52:d6:c9:ef:7b:27:a2:9c:43:
6d:c9:7f:a8:ae:71:72:28:85:29:b6:8b:f0:b0:12:92:7c:d3:
19:20:e9:41:09:27:03:cf:b9:4f:89:5d:f7:22:ae:4d:c5:89:
23:cd:13:d9:4e:17:67:4b:9e:e0:6c:48:a9:58:e4:80:ec:b5:
b7:b2:21:e5:58:b2:a7:92:35:f4:b3:b2:1d:6a:46:b2:7a:b7:
61:9a:62:46:06:83:55:27:dc:4d:8b:a6:e4:ed:47:70:7d:91:
f6:8c:0c:c1:54:c9:38:cd:32:15:d7:9c:39:4e:0c:bc:ad:0c:
92:24:b5:a9:b3:b2:ad:91:ee:3d:3c:b0:84:f4:db:38:ab:15:
87:5e:85:bd:57:85:2d:c4:21:98:b4:8b:1c:0f:10:1a:36:73:
d9:7e:18:34:b6:19:07:b0:4f:3d:f4:66:2e:cc:c5:6d:c9:1d:
26:10:ed:39:75:f0:62:7a:f4:d0:d8:a7:2f:76:e4:ed:8a:a6:
35:23:6c:4f:3f:1f:53:f2:7a:ca:07:ee:5a:33:3e:8a:12:07:
06:be:f8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:39 2025 by rpki-client