Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
File: gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft (raw, json)
Hash identifier: 1qwZyl60atYI8hkUdJrKOQaf+J3DeaRikhT68jmdV5E=
Subject key identifier: 49:A4:43:97:59:86:2D:59:66:BE:8C:9F:40:55:AD:F7:6E:95:63:3E
Authority key identifier: 81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
Certificate issuer: /CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Certificate serial: 01979B97C39BBAB0CE296A78E130A377F77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
Manifest number: 15AF
Signing time: Mon 23 Jun 2025 07:01:43 +0000
Manifest this update: Mon 23 Jun 2025 07:01:43 +0000
Manifest next update: Tue 24 Jun 2025 07:01:43 +0000
Files and hashes: 1: boA84qDGPvl_6lnRHS_XzFFeG1U.roa (hash: mKsVzVhgFbQeWFBOvfQBj+TUfoFvXQ5IHepTPgh5BKs=)
2: gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl (hash: /MNXdZ+3lJn+eNr2w/Ee5BuoTPL1OeeO+aZSYy/Uyz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:97:c3:9b:ba:b0:ce:29:6a:78:e1:30:a3:77:f7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Validity
Not Before: Jun 23 07:01:43 2025 GMT
Not After : Jun 24 07:01:43 2025 GMT
Subject: CN=49a4439759862d5966be8c9f4055adf76e95633e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:d4:eb:60:5d:58:44:1b:e7:b8:4c:66:1a:
85:b7:ad:c4:a6:50:82:e2:39:56:05:0b:bb:df:4d:
92:af:d5:fe:d8:82:df:56:76:b4:f2:42:38:49:9b:
e6:12:d1:12:6e:d8:34:b7:fa:93:17:f4:99:05:58:
0c:38:47:78:b7:b4:82:8b:71:20:bf:67:8d:18:4b:
62:1d:3c:dc:f2:31:16:d2:41:af:8d:8f:6a:2e:de:
ea:89:01:d0:19:9e:01:97:0b:25:c9:52:8f:d3:0a:
4a:c2:12:05:a4:02:99:52:70:ab:76:85:81:7a:66:
8c:0d:25:14:59:3d:47:1c:8b:80:d2:06:ec:ae:6c:
e6:34:1c:4d:8a:2d:b0:d6:be:45:3e:09:fb:8f:f6:
61:d3:ec:a7:01:3c:9e:3a:0c:27:4d:39:26:58:7b:
32:ba:a8:ae:10:64:0e:89:7c:c4:17:c3:48:3f:ac:
ee:84:e2:dc:43:ab:8d:49:42:57:a1:2f:07:41:06:
8c:7b:43:bd:85:34:05:d3:78:7b:c4:7b:df:a9:79:
ec:c0:6b:99:41:51:f6:21:d2:ba:eb:7f:6f:0a:d3:
76:25:6c:f4:07:d1:5a:00:1c:55:0f:b8:7c:cd:e2:
e6:89:c1:53:74:03:97:b4:30:6b:2c:18:40:e2:2b:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A4:43:97:59:86:2D:59:66:BE:8C:9F:40:55:AD:F7:6E:95:63:3E
X509v3 Authority Key Identifier:
keyid:81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:40:50:67:50:d8:ce:36:a1:4a:96:47:1c:8f:e6:7a:f1:d8:
09:9a:28:46:c7:f9:a6:d1:7e:47:14:c7:a5:2e:c0:52:e1:3d:
93:7f:ad:c1:34:03:59:a8:26:15:ff:43:79:fb:b0:eb:57:02:
57:91:57:10:4c:d4:10:86:74:2d:88:c6:11:db:6e:26:51:2a:
84:e4:b3:56:f9:9a:8a:93:67:7e:fe:66:0d:5e:70:4e:67:2b:
83:b8:39:f6:12:b5:5f:3d:4b:29:b0:e5:07:27:50:93:5c:17:
c5:17:63:ef:ce:0f:59:6c:75:2e:7b:fc:3d:ac:96:77:7d:8e:
a7:ec:49:ee:52:e3:bf:cc:50:2d:eb:14:2f:a3:44:d0:33:b7:
16:78:0e:0e:09:2d:0f:aa:bb:04:13:b7:29:6c:4e:88:95:b1:
7f:06:f8:41:31:57:b2:21:a4:90:f9:75:93:80:2f:c9:b5:20:
fe:4d:b2:03:3f:db:3a:35:7b:13:cb:03:ba:c7:87:bc:2b:3b:
44:57:93:68:a1:55:37:ff:8d:77:ee:88:a6:5f:56:63:15:0c:
9b:e4:6c:a2:61:e4:f1:19:e8:3e:fa:12:3c:0a:29:70:e1:8c:
4a:e8:d3:1e:bb:fc:b1:b2:1f:da:b5:e0:0b:0b:aa:73:b0:19:
a5:52:26:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:33:15 2025 by rpki-client