Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
File: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft (raw, json)
Hash identifier: XdqxlsQ79/v9AbI0W61Dh7hdwQpnkd1eVUrZGGcD9FY=
Subject key identifier: D7:4D:B0:55:F2:51:81:C5:46:4F:96:1F:5E:09:A9:33:DA:07:7E:EC
Authority key identifier: F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
Certificate issuer: /CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Certificate serial: 019807BD244258EEA9FAF458C2268767E030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
Manifest number: 0C87
Signing time: Mon 14 Jul 2025 07:01:32 +0000
Manifest this update: Mon 14 Jul 2025 07:01:32 +0000
Manifest next update: Tue 15 Jul 2025 07:01:32 +0000
Files and hashes: 1: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl (hash: p7ermnh+ppSGzXD80WJUSdUNcUQo8fHUhtfntB4ErI4=)
2: 1-eEKcv2-HlB3jOunD8sGEQP3iuo.roa (hash: 1bxmvhYpMOeABQ7wYp60dzQC7ktJL7nqMNn/zKkAUDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:07:bd:24:42:58:ee:a9:fa:f4:58:c2:26:87:67:e0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Validity
Not Before: Jul 14 07:01:32 2025 GMT
Not After : Jul 15 07:01:32 2025 GMT
Subject: CN=d74db055f25181c5464f961f5e09a933da077eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e9:57:6f:d1:9b:ac:f7:0a:6d:08:1b:be:03:
cd:23:21:f5:04:90:97:7e:fc:fb:37:27:a9:6e:9f:
86:7b:46:b6:1c:67:1a:09:8d:de:30:21:3e:de:03:
2a:70:ff:d4:c0:2d:34:4a:78:67:6a:d0:41:2a:75:
57:b9:75:36:6d:91:42:b7:88:fb:8a:f2:fc:27:22:
48:a5:6d:a9:ad:02:fa:33:dc:f7:52:a6:eb:5c:1c:
1d:00:aa:28:60:4c:40:54:23:ea:3c:c9:73:0e:9d:
9b:73:df:68:f6:ed:ec:8d:86:df:58:1b:8a:c0:28:
8d:ca:da:12:5a:26:39:3a:85:98:bc:ed:c8:74:b7:
a7:1b:7b:e6:5a:dd:42:ee:22:89:c5:f3:ef:96:81:
2d:63:6b:81:0b:c6:d1:09:e6:5c:f5:b0:fd:6a:92:
f5:1a:d3:9d:fd:e2:e4:a8:4a:b8:03:60:33:37:22:
83:cf:22:3c:fb:ca:83:6e:bb:eb:8a:0c:88:34:a8:
ff:91:eb:57:48:44:8f:4c:43:df:f1:b1:41:b7:00:
f2:4b:7d:ef:ef:36:b0:29:05:ca:b8:32:70:34:55:
63:14:53:88:61:f7:a2:0a:ad:34:31:86:53:40:75:
2d:ae:f4:dc:51:6e:45:b9:d2:68:d8:07:92:8c:70:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4D:B0:55:F2:51:81:C5:46:4F:96:1F:5E:09:A9:33:DA:07:7E:EC
X509v3 Authority Key Identifier:
keyid:F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d2:61:e7:a7:99:48:b8:37:f9:41:45:d8:5f:9e:6b:2a:c9:
0c:c9:9b:58:b6:32:52:21:0d:d8:d6:ec:e9:7c:63:30:1f:ad:
5a:63:45:75:ad:7e:25:8c:b5:a0:f9:1b:83:28:8c:13:b9:72:
d5:94:0d:55:d9:8e:28:28:00:13:3c:3e:13:b0:11:7a:64:1f:
41:9e:56:7b:5f:c3:f8:16:56:39:d7:16:fa:c0:3c:6f:6c:ca:
22:09:9c:3f:47:0d:11:da:40:4b:26:2f:07:9c:80:e3:ad:63:
1b:8d:15:84:19:1f:43:02:8c:25:81:4e:b4:26:9c:fb:73:cf:
6f:75:83:1b:2b:00:4a:e4:e8:a1:67:a5:87:27:ad:42:54:e0:
23:dd:76:81:72:e9:9c:f4:42:0d:f9:66:4f:a8:c2:e4:de:f4:
e1:01:7e:3a:c5:83:47:f6:b6:50:75:4d:a3:c1:60:ea:84:91:
7a:64:fc:57:95:46:84:1a:e8:a6:87:92:ae:aa:42:79:d6:03:
cc:7c:1a:04:c6:49:95:15:12:a8:34:cd:6d:1c:98:ac:13:14:
c4:89:c0:07:2d:ee:3e:8e:35:2a:d3:65:a0:35:ec:37:d6:5f:
57:ea:55:f1:5e:a7:de:52:67:64:23:1f:79:4b:59:0b:d4:40:
35:59:f0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:27 2025 by rpki-client