Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
File: 7rPhE8z67uGZa6kMRhQH_OKQqds.mft (raw, json)
Hash identifier: O0705RQEQj/QX1rELbYq/KXgTvXCVra/GWDKonjyBpQ=
Subject key identifier: F4:F7:8E:29:CE:49:67:B1:26:B2:FF:B5:27:42:A0:7D:4E:85:07:CA
Authority key identifier: EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
Certificate issuer: /CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Certificate serial: 0198082A65EC70BFFEF7FCA3FE5BAF6A6047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
Manifest number: 12A0
Signing time: Mon 14 Jul 2025 09:00:53 +0000
Manifest this update: Mon 14 Jul 2025 09:00:53 +0000
Manifest next update: Tue 15 Jul 2025 09:00:53 +0000
Files and hashes: 1: 7rPhE8z67uGZa6kMRhQH_OKQqds.crl (hash: qk9aQ3QqEdtESCBmkjv3yI6zMKfaM7owor7DL9ueiQ0=)
2: XiTX8PRRbjXruYbuuuJUYnL12Hc.roa (hash: 9YQjgU1UXlyr6JjfJF2PAwxgn/9h4L92vADp3ZCOwiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:2a:65:ec:70:bf:fe:f7:fc:a3:fe:5b:af:6a:60:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Validity
Not Before: Jul 14 09:00:53 2025 GMT
Not After : Jul 15 09:00:53 2025 GMT
Subject: CN=f4f78e29ce4967b126b2ffb52742a07d4e8507ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:ae:e7:a1:f1:f6:69:9f:2e:f0:15:85:26:
1a:74:a7:99:7e:81:f0:fe:5c:f0:45:fb:b7:f9:e8:
7f:9a:70:ee:5f:a5:0f:1e:9a:37:9b:ab:9e:4e:c8:
7c:96:60:de:82:b5:80:69:26:27:48:1a:9d:65:62:
3c:91:f1:6b:b7:59:dc:74:74:7a:da:b0:1f:b8:51:
43:31:57:08:0a:17:90:e1:ff:95:df:71:a6:aa:0c:
4b:76:00:33:c2:90:5f:ab:a9:42:16:0f:21:c1:71:
55:d0:12:a1:fb:c3:62:cc:e2:ea:07:52:ca:b0:4a:
14:39:97:8c:20:b3:fa:b5:ed:23:e3:82:48:67:88:
34:cb:62:fe:03:61:60:2f:77:ad:d2:33:41:eb:fe:
49:ba:ed:5d:32:83:f1:98:fd:12:ed:db:78:49:3d:
64:62:db:f2:84:11:39:85:a7:2d:ad:3d:1d:29:ce:
cc:da:bb:88:82:18:ad:7c:f1:e6:94:f2:81:17:3b:
ee:9a:49:6d:69:25:37:19:ec:3d:c7:56:b3:20:96:
4e:ad:e6:36:92:57:6d:f0:5d:f1:11:93:29:b9:67:
6d:35:d8:66:c5:49:05:b2:27:2e:ff:48:d7:31:51:
eb:1a:85:37:eb:ef:a5:a8:a2:a8:1a:66:ef:ba:7c:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F7:8E:29:CE:49:67:B1:26:B2:FF:B5:27:42:A0:7D:4E:85:07:CA
X509v3 Authority Key Identifier:
keyid:EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:49:c9:8a:e4:98:b8:30:62:b8:87:85:76:e1:f6:01:d3:1f:
34:a2:bc:df:9b:fb:60:a5:55:77:5d:15:93:f6:21:35:76:3a:
72:d8:aa:4f:97:47:bd:ea:12:39:28:1d:8c:1f:5f:50:b5:95:
98:2c:a3:ca:fc:82:74:59:1a:21:32:af:0f:6e:1f:63:40:f1:
0e:63:63:15:d9:d9:95:1f:07:b3:a7:69:20:c0:6d:99:ae:b6:
c8:65:1d:91:e3:0e:e5:5e:e4:a2:f0:67:21:05:c6:07:00:2a:
e7:93:45:3b:59:a7:bd:5d:bb:2e:16:4e:9a:4b:44:cc:94:91:
79:eb:e7:66:18:0c:2a:ce:e3:f5:88:2e:13:99:3a:d7:37:2d:
5c:a2:d3:36:3b:73:03:4a:f9:96:5d:fe:98:c3:83:02:50:69:
db:55:9c:a0:ee:8f:58:7a:44:7c:a1:e1:c6:53:ec:3b:01:2c:
9a:c8:43:26:0e:d7:ca:e5:27:a3:c1:9d:d1:cd:be:6b:77:10:
87:e7:c7:ce:bb:cf:69:a3:20:49:b0:9e:cc:0a:dd:da:cd:56:
fc:78:0a:ba:61:d2:4b:34:d9:cf:02:80:40:b8:34:26:0f:aa:
72:48:39:9f:4c:26:da:23:bf:fe:0c:b3:3a:18:f4:e2:a2:94:
69:79:88:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:44:46 2025 by rpki-client