Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft
File: ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft (raw, json)
Hash identifier: hGtv5bxOMXAY4mi2E3ImUIF97I6p+OsdPdxtMYUh3j8=
Subject key identifier: B8:21:77:73:37:55:48:B4:0E:33:5F:05:7D:0B:BB:91:97:58:5A:13
Authority key identifier: 81:EE:E1:7F:DB:CB:09:DB:BC:EE:F6:63:C6:15:7B:5F:E3:08:1F:F4
Certificate issuer: /CN=81eee17fdbcb09dbbceef663c6157b5fe3081ff4
Certificate serial: 0198074E7CB9B314A2D7050D1691B35AE532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7hf9vLCdu87vZjxhV7X-MIH_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft
Manifest number: 15E0
Signing time: Mon 14 Jul 2025 05:00:40 +0000
Manifest this update: Mon 14 Jul 2025 05:00:40 +0000
Manifest next update: Tue 15 Jul 2025 05:00:40 +0000
Files and hashes: 1: F4qvGIYkJR23AR8i3U55htWfFrA.roa (hash: sLcl2GBXiso+t+Z5Jf9zcobxR79ID28gM2VuGSdiFAw=)
2: ge7hf9vLCdu87vZjxhV7X-MIH_Q.crl (hash: iDquzkWUwdKjuddO7mYvmD7BjRfAi/wnYCKr+RyUr6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:07:4e:7c:b9:b3:14:a2:d7:05:0d:16:91:b3:5a:e5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eee17fdbcb09dbbceef663c6157b5fe3081ff4
Validity
Not Before: Jul 14 05:00:40 2025 GMT
Not After : Jul 15 05:00:40 2025 GMT
Subject: CN=b8217773375548b40e335f057d0bbb9197585a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:2e:b3:61:ca:17:15:c1:95:a2:76:8f:e5:
f9:6e:5c:4f:81:8f:05:9a:00:9d:79:04:0e:06:17:
d6:f1:16:f9:66:0f:cc:eb:ec:13:d3:cb:90:89:90:
22:45:5e:13:d1:67:47:58:1e:a9:e9:75:12:c8:0e:
43:65:e8:7f:65:a1:04:d7:90:b5:e0:ba:f9:61:bf:
7a:b6:a8:27:0d:7f:69:a9:c9:37:c2:bf:42:7b:af:
c7:7b:bc:af:9e:bc:94:90:af:f8:d0:52:0f:0c:a5:
80:08:cf:27:51:3f:11:dd:55:a2:a4:a3:f5:9d:c2:
0f:a5:9a:11:56:a8:09:c4:f1:7f:14:55:c4:9e:96:
78:4b:42:28:df:4f:0e:52:b8:e1:e4:53:3e:22:7e:
5d:5e:3f:dd:4e:eb:91:f4:46:74:bb:1a:d7:48:6a:
c0:f6:5a:b1:b9:77:41:61:9d:62:cf:f3:c4:04:67:
87:4f:25:84:cd:2f:9c:61:53:f8:e8:0a:6f:fb:a8:
f8:9a:30:85:5a:b3:3f:9a:64:0a:5a:70:22:59:db:
50:01:da:1a:d8:7d:d9:4c:44:81:69:46:69:0d:16:
48:5a:86:6b:35:40:0d:27:40:a3:e1:5d:a2:2b:53:
b5:93:24:3d:d4:e9:1c:87:c9:cc:18:17:4a:1b:e3:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:21:77:73:37:55:48:B4:0E:33:5F:05:7D:0B:BB:91:97:58:5A:13
X509v3 Authority Key Identifier:
keyid:81:EE:E1:7F:DB:CB:09:DB:BC:EE:F6:63:C6:15:7B:5F:E3:08:1F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7hf9vLCdu87vZjxhV7X-MIH_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5f:89:32:f9:29:d9:5e:31:df:f7:d7:5d:87:61:8d:c4:62:
d7:bc:8f:d5:fa:93:7c:71:f0:50:cb:eb:b1:d5:78:a9:4a:95:
ff:9f:f0:c0:1d:96:8e:13:4e:3f:cf:b5:a6:a0:4d:1c:27:0a:
a9:04:7a:5d:b1:d9:55:32:97:2b:a6:ee:e5:0d:4b:6f:54:85:
bf:e6:1a:53:5f:d5:b8:55:dc:47:e0:ce:36:4e:b4:89:71:3f:
23:9f:1b:41:7b:be:94:f9:dc:40:cb:8d:5a:23:2a:4b:38:4e:
e5:4b:ea:5b:77:13:48:f3:f3:22:08:50:de:94:e0:2e:b1:47:
7f:c2:f6:96:b1:bb:47:bc:56:a0:f7:20:3f:17:cc:c8:57:e2:
4a:26:e5:af:6b:8e:3b:53:d7:1e:84:45:0a:75:86:d1:04:b9:
19:e1:fc:87:fe:43:25:92:34:8c:85:40:1f:5b:4e:1d:ff:03:
f3:7f:c8:74:0f:2d:0d:d8:cc:23:fb:eb:0c:34:c3:d3:b6:32:
b5:eb:8a:db:af:39:91:60:13:8c:df:59:38:ad:5f:3e:10:e2:
a1:b5:bf:d8:16:fa:88:8e:d4:2b:9c:78:2f:d5:62:cb:2b:52:
8b:14:7c:0a:d5:aa:03:98:ee:a4:f3:22:98:4a:7a:cb:36:b7:
b2:30:38:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgHTny5sxSi1wUNFpGzWuUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZWVlMTdmZGJjYjA5ZGJiY2VlZjY2M2M2MTU3YjVmZTMw
ODFmZjQwHhcNMjUwNzE0MDUwMDQwWhcNMjUwNzE1MDUwMDQwWjAzMTEwLwYDVQQD
EyhiODIxNzc3MzM3NTU0OGI0MGUzMzVmMDU3ZDBiYmI5MTk3NTg1YTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikwus2HKFxXBlaJ2j+X5blxPgY8F
mgCdeQQOBhfW8Rb5Zg/M6+wT08uQiZAiRV4T0WdHWB6p6XUSyA5DZeh/ZaEE15C1
4Lr5Yb96tqgnDX9pqck3wr9Ce6/He7yvnryUkK/40FIPDKWACM8nUT8R3VWipKP1
ncIPpZoRVqgJxPF/FFXEnpZ4S0Io308OUrjh5FM+In5dXj/dTuuR9EZ0uxrXSGrA
9lqxuXdBYZ1iz/PEBGeHTyWEzS+cYVP46Apv+6j4mjCFWrM/mmQKWnAiWdtQAdoa
2H3ZTESBaUZpDRZIWoZrNUANJ0Cj4V2iK1O1kyQ91Okch8nMGBdKG+MPUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLghd3M3VUi0DjNfBX0Lu5GXWFoTMB8GA1UdIwQY
MBaAFIHu4X/bywnbvO72Y8YVe1/jCB/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2U3aGY5dkxDZHU4N3ZaanhoVjdYLU1JSF9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82NTBhNmItNDgyNi00YzFlLWE5NzIt
NDhhZDE0YmE3NDk4LzEvZ2U3aGY5dkxDZHU4N3ZaanhoVjdYLU1JSF9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82NTBhNmItNDgyNi00YzFlLWE5NzItNDhhZDE0YmE3NDk4
LzEvZ2U3aGY5dkxDZHU4N3ZaanhoVjdYLU1JSF9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfF+JMvkp
2V4x3/fXXYdhjcRi17yP1fqTfHHwUMvrsdV4qUqV/5/wwB2WjhNOP8+1pqBNHCcK
qQR6XbHZVTKXK6bu5Q1Lb1SFv+YaU1/VuFXcR+DONk60iXE/I58bQXu+lPncQMuN
WiMqSzhO5UvqW3cTSPPzIghQ3pTgLrFHf8L2lrG7R7xWoPcgPxfMyFfiSiblr2uO
O1PXHoRFCnWG0QS5GeH8h/5DJZI0jIVAH1tOHf8D83/IdA8tDdjMI/vrDDTD07Yy
teuK2685kWATjN9ZOK1fPhDiobW/2Bb6iI7UK5x4L9ViyytSixR8CtWqA5jupPMi
mEp6yza3sjA4zw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:43 2025 by rpki-client