
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.mft
File: 9Z1WxSx3M_g753SvpHu9VdKHl6w.mft (raw, json)
Hash identifier: MPaNu4L2L5dPq9KJhAltqSkrVBbYV9+Ilyep8k6De88=
Subject key identifier: 56:7B:87:B4:66:B7:5D:68:22:96:50:3D:67:23:DA:F7:A8:84:60:6D
Authority key identifier: F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
Certificate issuer: /CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Certificate serial: 0197BF363BB6DFA1682DDF6A9E44810999D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.mft
Manifest number: 1547
Signing time: Mon 30 Jun 2025 05:01:31 +0000
Manifest this update: Mon 30 Jun 2025 05:01:31 +0000
Manifest next update: Tue 01 Jul 2025 05:01:31 +0000
Files and hashes: 1: 9Z1WxSx3M_g753SvpHu9VdKHl6w.crl (hash: QtAUSthvtFCVIi4Uq68hMy1lDRJmq36Rcy3Rl80ioQM=)
2: LiwZdmL5RU2B6zVphh68eF-_QCM.roa (hash: 12dQ0T9H1SC1JmN6bqW5YJuYyqtLY06teqdtY4jNB1w=)
3: bpOMGbazzT-BkrDmumTqfQYBlb0.roa (hash: l6XZ6lFWNL3LE9dGosqgBQ/Pd0UpxiEBjNXYRa8ne5I=)
4: tt4fD2Y3ZwUbIvtBwlNhZEkz_s0.roa (hash: +3QbGwJKO1wVzcZZV/GJcxqJzgKbCl/1gOdPe63EVdE=)
5: yX7sG3wpFe9yZYaNAimw1pZQPYs.roa (hash: QivAR9rkVn6zuWjKGwBCmHSlxo+GMM5mhMT5ya37DwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:36:3b:b6:df:a1:68:2d:df:6a:9e:44:81:09:99:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Validity
Not Before: Jun 30 05:01:31 2025 GMT
Not After : Jul 1 05:01:31 2025 GMT
Subject: CN=567b87b466b75d682296503d6723daf7a884606d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:72:76:a8:07:62:f3:ce:20:ff:e2:12:26:
91:c0:77:aa:a1:43:8d:2d:c7:fc:81:98:72:09:94:
2f:00:0e:f3:d8:b3:57:54:64:29:42:28:e8:a6:12:
e2:13:03:e0:d5:7b:70:d7:8a:89:ed:e7:af:34:4b:
05:05:fa:99:28:b3:fa:62:81:6d:40:37:a3:53:cb:
16:0f:16:12:56:63:a9:ae:0a:9c:6f:cb:18:28:f0:
21:5f:fa:a8:b8:03:48:f4:c4:c6:a6:ed:98:2d:03:
4a:0f:36:e3:7e:d7:db:f3:f6:52:48:34:73:f9:72:
2c:a3:dd:0a:ef:42:63:18:55:c2:60:55:27:73:2f:
04:36:b2:2e:37:90:35:15:a5:5a:2d:4b:f6:4c:26:
26:93:3b:32:70:62:06:d2:5e:d8:4d:a7:69:7a:2b:
a2:6a:32:20:9b:e4:90:ff:8f:e2:34:7c:b9:cf:f1:
8e:ba:2a:32:06:21:d3:17:da:8f:0b:ef:a4:bb:f7:
92:c8:0b:19:34:31:68:d9:ea:d8:73:5a:ff:bb:59:
f4:b5:5b:41:61:a7:a1:d5:cf:80:1a:74:82:38:74:
01:f8:d4:85:d4:f1:2b:e1:95:6d:da:b6:c7:df:57:
c2:53:4d:95:a2:22:92:bd:6c:ac:5b:df:93:5c:d8:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7B:87:B4:66:B7:5D:68:22:96:50:3D:67:23:DA:F7:A8:84:60:6D
X509v3 Authority Key Identifier:
keyid:F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1d:34:08:8a:9c:6c:37:98:5d:4a:40:1b:2e:e6:1a:19:40:
25:92:b6:4e:43:88:6d:9c:b5:89:a1:78:52:a5:97:a7:5b:85:
e7:a2:b8:12:75:75:4f:d3:84:ff:7b:5b:5c:fc:4b:40:bc:b5:
3c:dc:a3:60:f1:73:2a:b0:13:3c:0a:02:3a:d9:5d:8a:55:ca:
a3:2a:bb:fe:9c:0d:06:26:48:af:44:2e:32:45:ab:03:71:2d:
88:54:4a:8f:c4:7d:79:9e:00:4d:f2:83:6b:3a:4f:9e:9a:ab:
ea:28:14:8c:ee:70:78:6b:d9:69:6c:5d:ec:43:8b:64:da:ca:
5e:eb:7e:31:0f:d0:96:33:74:14:94:ce:10:d7:50:10:fa:d0:
e4:25:f6:58:8d:4b:5e:17:77:b0:bf:ab:da:58:10:fe:c5:0c:
73:5a:a6:bb:4e:23:2f:5a:75:26:de:f4:12:02:61:7c:a0:a1:
8e:dd:f8:01:c4:e0:c6:d9:64:df:e9:3a:5b:e4:14:dc:10:72:
a0:00:9e:50:44:40:07:11:48:51:cc:8b:5a:cd:92:1d:a5:22:
f1:fd:16:21:33:7b:01:c9:f0:6e:1f:20:7b:89:a8:75:ff:f3:
41:4f:30:47:dd:2c:23:3a:b9:e9:1c:a9:d5:95:13:7e:77:3c:
49:fe:78:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:16:38 2025 by rpki-client