Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.mft
File: i7tTj8T48ZhBAGQN2ENXZqYgZyM.mft (raw, json)
Hash identifier: Tl9aZl9t95cYHe1Fl3Wgkfc/0g3pSoxI7Rnl/4WrUDE=
Subject key identifier: D7:5B:71:6E:3C:DE:6C:D2:93:F3:D3:7D:FA:5C:12:58:EE:10:82:5F
Authority key identifier: 8B:BB:53:8F:C4:F8:F1:98:41:00:64:0D:D8:43:57:66:A6:20:67:23
Certificate issuer: /CN=8bbb538fc4f8f1984100640dd8435766a6206723
Certificate serial: 01979C046B630F877AA42F51F05BE14489CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7tTj8T48ZhBAGQN2ENXZqYgZyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.mft
Manifest number: 15AB
Signing time: Mon 23 Jun 2025 09:00:24 +0000
Manifest this update: Mon 23 Jun 2025 09:00:24 +0000
Manifest next update: Tue 24 Jun 2025 09:00:24 +0000
Files and hashes: 1: F-XmOCCi8zdRGEXsEW8GIj9dotE.roa (hash: aZqtC7YnlJ57aaBe7FRji3vyD3JPHZ6fm+Qh4aIyCFw=)
2: i7tTj8T48ZhBAGQN2ENXZqYgZyM.crl (hash: jABhhPJvcNc0/FfhmwQ4BN0Xpu5LYvwGyGSw3v3e3+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:04:6b:63:0f:87:7a:a4:2f:51:f0:5b:e1:44:89:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bbb538fc4f8f1984100640dd8435766a6206723
Validity
Not Before: Jun 23 09:00:24 2025 GMT
Not After : Jun 24 09:00:24 2025 GMT
Subject: CN=d75b716e3cde6cd293f3d37dfa5c1258ee10825f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:dc:9e:3a:21:d9:8a:d7:55:e1:72:5e:bf:
76:23:83:dd:21:28:33:b4:0a:3b:f2:91:21:22:8c:
be:d6:d9:ff:d9:27:b5:db:31:d8:2d:38:a6:6d:56:
51:74:8a:5f:0f:e6:b6:e5:43:f7:6a:73:39:05:88:
66:af:07:f9:53:18:66:8d:e9:bb:57:f4:b7:53:01:
3f:60:7f:3f:2a:ce:c0:a7:25:ad:d2:d4:55:5d:cb:
9f:05:ea:13:df:85:e8:f9:21:ca:f9:c7:b0:18:f0:
aa:d1:f6:7e:86:24:7e:c5:1b:2d:f7:b2:a2:90:c5:
7f:8c:7c:a6:ab:b7:13:0d:79:58:5c:3e:ff:8c:c4:
65:f7:f8:6a:cb:c3:36:70:0d:74:2b:36:71:5f:57:
b6:86:b9:9c:8c:6b:73:f0:99:03:aa:db:09:8e:e2:
21:61:ec:6a:f2:15:90:67:2e:ba:f2:e1:5d:1c:0d:
db:c5:b8:c4:1a:5d:63:c4:a0:57:12:98:8e:6c:03:
06:0e:13:02:02:fb:4e:21:c0:57:90:b5:67:92:a4:
09:a7:38:98:1d:08:ae:34:0d:d8:dc:e9:44:98:39:
5a:85:d2:9e:c9:9c:49:05:3c:23:21:e9:90:7d:16:
5f:c3:a7:c2:10:f4:e8:77:c1:cf:c2:45:e3:90:f7:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5B:71:6E:3C:DE:6C:D2:93:F3:D3:7D:FA:5C:12:58:EE:10:82:5F
X509v3 Authority Key Identifier:
keyid:8B:BB:53:8F:C4:F8:F1:98:41:00:64:0D:D8:43:57:66:A6:20:67:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7tTj8T48ZhBAGQN2ENXZqYgZyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:11:99:10:06:3b:29:2b:7f:b3:3f:e4:8a:4c:8c:ec:aa:55:
4c:f5:db:3b:86:01:a1:0b:25:69:ee:af:44:c1:7c:6d:de:fa:
4e:c8:72:07:b6:50:25:3d:1d:5c:cf:d7:48:f4:0f:9c:9f:2b:
bc:d8:ce:50:c6:27:7a:c4:ce:51:79:88:b8:b2:36:89:15:15:
2a:7d:8b:5c:6a:14:3e:72:2e:e6:ff:ce:c1:65:fa:51:53:7c:
ad:62:5a:bd:b3:a0:68:61:2f:8a:59:b1:01:da:16:66:19:f5:
6d:c3:42:37:51:fb:08:a7:58:00:04:97:7b:91:06:c1:88:2d:
58:2c:12:07:16:8f:78:24:b3:3c:2d:a4:dd:d1:0a:ea:bc:f0:
be:9a:a7:6e:1c:8a:b4:ca:d9:1a:c8:5f:c6:43:4b:e3:24:94:
1f:0c:c5:ed:b7:84:56:ee:d2:ea:07:fe:f1:04:e0:ca:4f:90:
96:40:cd:8e:1f:92:e8:47:3d:26:f0:29:d3:13:ae:87:24:27:
e6:c8:41:b8:9f:4e:dc:a1:bd:4d:f8:c2:50:15:0e:0d:31:f1:
7d:b0:1f:7d:71:f4:0a:63:29:26:85:ee:ec:8a:a5:fa:65:8b:
41:4a:82:f7:67:b3:02:5f:78:89:d5:03:3f:b2:4d:b6:0c:0f:
2d:f8:e1:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZecBGtjD4d6pC9R8FvhRInLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYmI1MzhmYzRmOGYxOTg0MTAwNjQwZGQ4NDM1NzY2YTYy
MDY3MjMwHhcNMjUwNjIzMDkwMDI0WhcNMjUwNjI0MDkwMDI0WjAzMTEwLwYDVQQD
EyhkNzViNzE2ZTNjZGU2Y2QyOTNmM2QzN2RmYTVjMTI1OGVlMTA4MjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuzcnjoh2YrXVeFyXr92I4PdISgz
tAo78pEhIoy+1tn/2Se12zHYLTimbVZRdIpfD+a25UP3anM5BYhmrwf5Uxhmjem7
V/S3UwE/YH8/Ks7ApyWt0tRVXcufBeoT34Xo+SHK+cewGPCq0fZ+hiR+xRst97Ki
kMV/jHymq7cTDXlYXD7/jMRl9/hqy8M2cA10KzZxX1e2hrmcjGtz8JkDqtsJjuIh
Yexq8hWQZy668uFdHA3bxbjEGl1jxKBXEpiObAMGDhMCAvtOIcBXkLVnkqQJpziY
HQiuNA3Y3OlEmDlahdKeyZxJBTwjIemQfRZfw6fCEPTod8HPwkXjkPeayQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdbcW483mzSk/PTffpcEljuEIJfMB8GA1UdIwQY
MBaAFIu7U4/E+PGYQQBkDdhDV2amIGcjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTd0VGo4VDQ4WmhCQUdRTjJFTlhacVlnWnlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iNDVmMjEtM2VlNi00NzEyLTk4ZmMt
Yjg5ODQwYTc0ODA5LzEvaTd0VGo4VDQ4WmhCQUdRTjJFTlhacVlnWnlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iNDVmMjEtM2VlNi00NzEyLTk4ZmMtYjg5ODQwYTc0ODA5
LzEvaTd0VGo4VDQ4WmhCQUdRTjJFTlhacVlnWnlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRGZEAY7
KSt/sz/kikyM7KpVTPXbO4YBoQslae6vRMF8bd76TshyB7ZQJT0dXM/XSPQPnJ8r
vNjOUMYnesTOUXmIuLI2iRUVKn2LXGoUPnIu5v/OwWX6UVN8rWJavbOgaGEvilmx
AdoWZhn1bcNCN1H7CKdYAASXe5EGwYgtWCwSBxaPeCSzPC2k3dEK6rzwvpqnbhyK
tMrZGshfxkNL4ySUHwzF7beEVu7S6gf+8QTgyk+QlkDNjh+S6Ec9JvAp0xOuhyQn
5shBuJ9O3KG9TfjCUBUODTHxfbAffXH0CmMpJoXu7Iql+mWLQUqC92ezAl94idUD
P7JNtgwPLfjh6Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:21:48 2025 by rpki-client