Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.mft
File: FKYzWehOAMD54qID6tJ4GibZBOY.mft (raw, json)
Hash identifier: 9GykzFiGvFWePTmNrGu/sP7k6rQtGIZWlgNskOJTGd0=
Subject key identifier: 67:63:2C:ED:DB:22:AA:EB:F0:3C:26:37:F2:F3:91:84:62:9D:47:0E
Authority key identifier: 14:A6:33:59:E8:4E:00:C0:F9:E2:A2:03:EA:D2:78:1A:26:D9:04:E6
Certificate issuer: /CN=14a63359e84e00c0f9e2a203ead2781a26d904e6
Certificate serial: 01978B10D407F25DA36E093983FCA01E2627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKYzWehOAMD54qID6tJ4GibZBOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.mft
Manifest number: 095C
Signing time: Fri 20 Jun 2025 02:00:25 +0000
Manifest this update: Fri 20 Jun 2025 02:00:25 +0000
Manifest next update: Sat 21 Jun 2025 02:00:25 +0000
Files and hashes: 1: FKYzWehOAMD54qID6tJ4GibZBOY.crl (hash: fLdoqvwd/Os/tK4RXji6CjFpvhdXh7wAP+4Wv/hQ2QQ=)
2: _6aoVlBUwlPIw613OqnPUhF6Stw.roa (hash: cWQaozMHwttAsgSmgf91geachnA2gCeK71KFOrFjrOI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:10:d4:07:f2:5d:a3:6e:09:39:83:fc:a0:1e:26:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a63359e84e00c0f9e2a203ead2781a26d904e6
Validity
Not Before: Jun 20 02:00:25 2025 GMT
Not After : Jun 21 02:00:25 2025 GMT
Subject: CN=67632ceddb22aaebf03c2637f2f39184629d470e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:a6:5e:e1:e7:e8:f2:ac:c8:ae:5d:8c:a0:
c4:bf:ec:85:b3:2e:f2:a7:42:c6:ef:f8:7d:78:ab:
76:5a:91:4f:39:f0:b5:19:24:fb:67:fe:5c:4b:e5:
49:7f:56:b1:c0:23:46:29:85:a6:c8:b3:0b:52:43:
d2:f2:e6:78:ed:9f:de:69:6f:69:5a:3c:5a:4c:ac:
79:08:c5:68:2c:96:0c:4a:97:15:f1:6f:52:c6:a3:
d1:01:80:20:99:fe:ff:ad:8e:9c:c8:11:b6:0b:1b:
f4:63:c6:43:6c:ac:c8:42:b7:af:ea:70:c8:a6:bb:
bf:be:6c:41:51:ad:94:d2:f5:3a:de:51:36:22:34:
2e:e7:fe:cf:35:6e:8d:ce:c3:e3:ab:52:81:11:fc:
83:bc:65:f9:d7:00:62:d3:09:74:81:26:a5:10:19:
60:fe:57:c8:2a:c7:b1:8f:ba:d0:1a:e0:15:d1:16:
a3:76:dd:d6:79:13:fe:83:c2:79:1d:c7:11:50:b6:
2e:6c:65:5e:81:fc:fc:00:d0:9b:35:9d:f3:b0:75:
7a:26:5b:3d:15:e2:72:67:cc:2e:89:7b:20:b3:dc:
b2:eb:f4:59:75:2d:f8:06:9c:c4:68:b7:1b:af:d1:
7b:a3:21:2c:3d:31:b5:d5:29:8a:8e:1e:50:9b:c0:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:2C:ED:DB:22:AA:EB:F0:3C:26:37:F2:F3:91:84:62:9D:47:0E
X509v3 Authority Key Identifier:
keyid:14:A6:33:59:E8:4E:00:C0:F9:E2:A2:03:EA:D2:78:1A:26:D9:04:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKYzWehOAMD54qID6tJ4GibZBOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6f:ec:25:5b:a3:1b:54:40:c1:d1:60:92:7b:41:f5:a6:23:
db:12:04:c6:fa:09:0d:0c:14:78:76:65:8d:1b:24:de:10:7b:
f1:2c:a1:67:91:8d:25:b7:c7:83:dc:61:d5:0b:61:96:18:72:
4e:f3:86:06:28:b6:6e:10:fa:99:fe:d1:e8:e2:8d:5d:16:19:
ec:9f:ef:31:67:41:d1:60:d1:5c:8d:d0:e6:18:8e:aa:40:18:
9f:84:19:fd:e1:4e:e3:a4:3d:cc:65:52:e3:dd:66:a9:19:93:
c8:21:52:9d:1f:4b:71:c9:03:ff:bd:c7:9a:5c:fd:b3:4e:e0:
cf:73:f8:8a:80:c1:c6:d2:79:11:e6:c8:51:4c:6c:df:06:c8:
79:7e:64:08:f2:b2:e6:d5:50:f9:65:d9:07:24:cc:f7:ac:bd:
99:53:7c:a7:c5:aa:fb:6c:ae:58:7a:9d:1c:8d:f6:d0:23:9c:
5c:9d:70:66:74:64:0a:47:6f:2b:f2:c6:6c:43:26:df:16:90:
ab:80:aa:08:bb:28:36:92:b0:bd:c1:e5:6c:85:a1:e4:22:73:
0b:12:d6:1d:2b:f3:fa:94:37:7a:66:a4:3d:b1:8e:87:ca:cc:
ae:38:a6:9c:4b:b5:2d:3a:39:6f:f2:93:a7:f7:2c:a2:fb:d1:
97:39:a6:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeLENQH8l2jbgk5g/ygHiYnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YTYzMzU5ZTg0ZTAwYzBmOWUyYTIwM2VhZDI3ODFhMjZk
OTA0ZTYwHhcNMjUwNjIwMDIwMDI1WhcNMjUwNjIxMDIwMDI1WjAzMTEwLwYDVQQD
Eyg2NzYzMmNlZGRiMjJhYWViZjAzYzI2MzdmMmYzOTE4NDYyOWQ0NzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJemXuHn6PKsyK5djKDEv+yFsy7y
p0LG7/h9eKt2WpFPOfC1GST7Z/5cS+VJf1axwCNGKYWmyLMLUkPS8uZ47Z/eaW9p
WjxaTKx5CMVoLJYMSpcV8W9SxqPRAYAgmf7/rY6cyBG2Cxv0Y8ZDbKzIQrev6nDI
pru/vmxBUa2U0vU63lE2IjQu5/7PNW6NzsPjq1KBEfyDvGX51wBi0wl0gSalEBlg
/lfIKsexj7rQGuAV0Rajdt3WeRP+g8J5HccRULYubGVegfz8ANCbNZ3zsHV6Jls9
FeJyZ8wuiXsgs9yy6/RZdS34BpzEaLcbr9F7oyEsPTG11SmKjh5Qm8D75wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdjLO3bIqrr8DwmN/LzkYRinUcOMB8GA1UdIwQY
MBaAFBSmM1noTgDA+eKiA+rSeBom2QTmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktZeldlaE9BTUQ1NHFJRDZ0SjRHaWJaQk9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xYjZiMjEtNWViMi00YmY4LWI1NWQt
OWYxNzE1OTdhZTc4LzEvRktZeldlaE9BTUQ1NHFJRDZ0SjRHaWJaQk9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xYjZiMjEtNWViMi00YmY4LWI1NWQtOWYxNzE1OTdhZTc4
LzEvRktZeldlaE9BTUQ1NHFJRDZ0SjRHaWJaQk9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgm/sJVuj
G1RAwdFgkntB9aYj2xIExvoJDQwUeHZljRsk3hB78SyhZ5GNJbfHg9xh1Qthlhhy
TvOGBii2bhD6mf7R6OKNXRYZ7J/vMWdB0WDRXI3Q5hiOqkAYn4QZ/eFO46Q9zGVS
491mqRmTyCFSnR9LcckD/73Hmlz9s07gz3P4ioDBxtJ5EebIUUxs3wbIeX5kCPKy
5tVQ+WXZByTM96y9mVN8p8Wq+2yuWHqdHI320COcXJ1wZnRkCkdvK/LGbEMm3xaQ
q4CqCLsoNpKwvcHlbIWh5CJzCxLWHSvz+pQ3emakPbGOh8rMrjimnEu1LTo5b/KT
p/csovvRlzmmSw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:15:51 2025 by rpki-client