Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
File: vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft (raw, json)
Hash identifier: gUH7qQsXAbleGJTgHHSmRaC5pDA4GmpJ0sBxH4z2Geg=
Subject key identifier: 27:E6:8E:F8:EB:F6:C0:17:92:B4:FE:32:EA:01:3E:E5:E9:AB:29:41
Authority key identifier: BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
Certificate issuer: /CN=bd974dc8c645ed235145caaa1355ba85f5257634
Certificate serial: 0197C801C27216A8C167085B90DC5F21D0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
Manifest number: 12DA
Signing time: Tue 01 Jul 2025 22:00:47 +0000
Manifest this update: Tue 01 Jul 2025 22:00:47 +0000
Manifest next update: Wed 02 Jul 2025 22:00:47 +0000
Files and hashes: 1: uulQ7vEdGhsy6Awn7kfrVQnLiMU.roa (hash: tZVgJDesulw5XmQQyaxeLBz/Dpnfz7Z3L4uwLGw8CzQ=)
2: vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl (hash: cjdt6EAM9MTOBwW/xAzDwKoGqBwCYgESF/4e70IAjxs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:01:c2:72:16:a8:c1:67:08:5b:90:dc:5f:21:d0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd974dc8c645ed235145caaa1355ba85f5257634
Validity
Not Before: Jul 1 22:00:47 2025 GMT
Not After : Jul 2 22:00:47 2025 GMT
Subject: CN=27e68ef8ebf6c01792b4fe32ea013ee5e9ab2941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:30:27:1f:c5:cf:9b:24:bd:48:cb:b6:84:
b4:46:04:1a:c7:37:70:ff:70:eb:34:b8:21:e7:14:
ad:dd:f8:2d:7f:fc:b9:21:d9:93:56:42:29:eb:fe:
4d:7d:00:ab:14:f6:bb:3d:18:95:1c:6b:07:7b:d3:
76:5e:bb:1c:73:2c:34:a1:30:94:0a:c8:af:cf:5e:
67:01:f9:d6:1a:96:83:6a:b2:77:d0:90:81:f6:ca:
89:ce:06:fc:52:4b:22:cb:db:5a:f3:45:01:d8:e7:
88:1e:80:3b:dd:87:f0:b8:48:52:01:89:b9:5f:0f:
a9:3a:19:63:33:2f:74:cf:ba:f5:0c:bc:1b:ab:25:
14:0d:dc:0c:7b:c3:ea:a8:fc:05:5d:3f:93:3e:40:
cc:c5:39:12:bc:e1:91:57:24:46:98:d9:66:66:8a:
cd:06:37:7f:5d:38:97:d1:16:a1:a3:ce:44:c0:da:
3c:dd:a3:88:c3:9d:67:40:12:b4:e2:27:5d:78:22:
c4:24:2d:3c:31:20:2f:0a:da:06:fb:1c:b0:d6:24:
98:4a:91:47:a5:e2:64:25:ef:60:b3:40:03:56:6e:
3d:f7:1f:78:3a:f2:06:4c:15:32:63:45:1c:8c:6f:
c7:38:15:4c:0f:b8:58:2f:30:a5:66:de:08:1d:4a:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E6:8E:F8:EB:F6:C0:17:92:B4:FE:32:EA:01:3E:E5:E9:AB:29:41
X509v3 Authority Key Identifier:
keyid:BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e9:01:f0:5c:a1:26:a6:ca:0f:e9:bc:d2:84:76:35:88:1d:
6a:00:10:9c:d7:b0:3f:ef:b1:47:b6:0c:2f:eb:5c:28:7e:28:
eb:2e:a1:0d:64:1f:7d:98:1e:b8:f6:f7:73:a7:d0:69:7f:ab:
c9:bd:48:27:d0:64:bf:ff:20:2d:17:4e:c0:9b:40:7d:07:41:
60:2f:9f:07:23:3e:59:60:67:31:9b:58:1b:41:3c:00:17:ab:
59:98:96:6c:08:96:fd:0f:10:61:72:86:5b:b3:b4:e6:56:8a:
9e:24:c5:45:60:ab:e5:0f:a6:5a:f0:66:8d:87:1f:c7:f9:9a:
b2:50:c8:6d:86:12:37:27:2e:8c:1d:0d:9b:74:19:64:2f:7b:
34:33:97:f9:ef:05:ab:ec:bb:7a:19:2e:5b:85:3f:07:29:1b:
07:be:d0:5d:47:55:14:41:06:9a:89:dd:35:8a:e3:52:0b:2c:
26:52:18:3b:e4:59:e5:88:cf:10:86:9d:fa:18:e2:f6:32:67:
fa:be:d3:a3:e7:9b:10:ce:67:09:3d:14:f2:1a:3c:6c:ed:40:
21:06:53:c5:ec:53:49:0a:0e:67:53:51:ba:b3:fb:f1:fb:0e:
61:5c:4d:66:16:57:3c:d2:7a:8e:67:9d:85:17:4e:0b:f6:4c:
f6:40:52:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:34:25 2025 by rpki-client