Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
File: SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft (raw, json)
Hash identifier: dBCpJMvsWLebeZmNTmA8g2eYsEBOQLX4tiJyux8lXT4=
Subject key identifier: 03:85:5F:8A:CA:7E:01:67:C6:E1:58:29:D1:09:C9:F3:AF:5A:F8:08
Authority key identifier: 48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
Certificate issuer: /CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Certificate serial: 019730BAFA4B96189AF100E822E6C7251872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
Manifest number: 14B1
Signing time: Mon 02 Jun 2025 13:00:49 +0000
Manifest this update: Mon 02 Jun 2025 13:00:49 +0000
Manifest next update: Tue 03 Jun 2025 13:00:49 +0000
Files and hashes: 1: 5ZSiu_Jf4uuM2tr9eexam4PdUnQ.roa (hash: 4s92BezBLCr6XDiFpPfCSDr/ke7pRUF4VnT2G98F0hQ=)
2: SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl (hash: BZq1ktmvAWS6gXIRXqoK1TDt3/048dWVyOyA/B4dLxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:ba:fa:4b:96:18:9a:f1:00:e8:22:e6:c7:25:18:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Validity
Not Before: Jun 2 13:00:49 2025 GMT
Not After : Jun 3 13:00:49 2025 GMT
Subject: CN=03855f8aca7e0167c6e15829d109c9f3af5af808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:95:ae:7b:1b:87:16:36:6c:05:56:4e:80:
39:ae:a1:5d:bb:2f:f0:80:85:de:6b:87:6b:1d:cd:
83:12:c2:d8:f3:bf:7c:65:f7:91:07:98:be:76:5b:
dc:ef:be:77:a2:a4:f9:b6:e7:7a:fb:32:b0:80:76:
37:a7:d0:8b:64:0f:95:a0:fa:9c:9c:ed:52:0a:e5:
73:80:70:ef:6c:af:11:a3:34:c7:1b:86:72:de:0b:
05:c5:43:eb:4d:70:4a:92:8b:e4:81:e0:bc:98:92:
b0:27:d9:18:ba:86:0d:85:5a:ef:b5:dc:33:77:78:
08:47:93:da:4c:20:80:c9:2c:67:3c:a3:64:02:9f:
6f:6e:d3:5f:bc:e0:e5:6a:7f:57:c3:7b:60:d6:62:
24:3c:ec:f3:79:2f:56:c3:13:0f:a6:f2:6e:06:60:
32:44:c5:0b:a4:6c:f6:86:a7:9d:df:47:70:97:a9:
e5:98:4e:3f:72:fe:5d:90:51:2e:df:2c:ea:25:43:
05:9d:b3:b5:a3:60:69:48:c9:4e:f7:96:9c:7b:41:
7c:0a:d8:9a:0a:4c:10:b3:80:1e:b9:ec:fb:68:fc:
3b:d9:1b:e1:7a:29:73:8d:1a:11:24:ca:c6:1c:88:
5d:4a:30:88:ef:ab:b5:c4:22:06:c6:70:02:69:f7:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:5F:8A:CA:7E:01:67:C6:E1:58:29:D1:09:C9:F3:AF:5A:F8:08
X509v3 Authority Key Identifier:
keyid:48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:79:e2:2f:3d:bb:c2:e4:b1:26:43:38:2c:13:23:da:b5:75:
23:78:b7:90:8f:a5:cc:2b:79:c8:dc:c5:a9:c4:4e:81:fb:51:
06:b8:4f:7a:08:66:e9:7e:9a:1c:ae:ef:37:38:91:c2:1a:b8:
dd:57:90:6e:c1:46:99:87:94:2d:23:81:d7:d3:ee:51:9f:d3:
dc:f5:f9:6d:26:60:29:91:cd:ae:1a:f0:b8:ca:33:ea:3a:d5:
63:46:4e:c0:7d:77:a6:74:29:50:ab:d1:7c:cf:01:7b:06:8f:
22:ed:4d:17:90:48:ac:ed:76:49:66:d4:e5:f7:54:4c:91:1f:
9e:cf:2a:2f:5e:d3:18:f6:79:47:9a:81:2c:3f:55:8c:e3:24:
6a:11:49:e6:ec:d6:0c:4e:c2:e3:87:3b:b2:e4:dd:9d:09:76:
6a:f9:fd:44:22:9b:c7:d3:bf:9b:d2:9f:2e:91:35:f5:03:a6:
a5:a9:64:9f:a5:df:8b:20:6f:a3:f4:73:ea:eb:f4:60:30:a4:
c9:17:e1:fd:db:2e:63:7c:7d:fd:f1:bd:f5:8b:b6:bb:a7:bc:
8e:61:68:92:46:d0:64:8a:50:26:ba:0d:53:5c:59:86:4d:07:
56:b2:2c:8d:5a:74:bf:36:e5:c1:c1:27:1c:6b:30:c0:72:c1:
8d:86:17:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZcwuvpLlhia8QDoIubHJRhyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZmVjMWFmMmYzMjFiMWQxYjgyODdhMWZkMDU1MTNjZTY2
ZTRjZmQwHhcNMjUwNjAyMTMwMDQ5WhcNMjUwNjAzMTMwMDQ5WjAzMTEwLwYDVQQD
EygwMzg1NWY4YWNhN2UwMTY3YzZlMTU4MjlkMTA5YzlmM2FmNWFmODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6WVrnsbhxY2bAVWToA5rqFduy/w
gIXea4drHc2DEsLY8798ZfeRB5i+dlvc7753oqT5tud6+zKwgHY3p9CLZA+VoPqc
nO1SCuVzgHDvbK8RozTHG4Zy3gsFxUPrTXBKkovkgeC8mJKwJ9kYuoYNhVrvtdwz
d3gIR5PaTCCAySxnPKNkAp9vbtNfvODlan9Xw3tg1mIkPOzzeS9WwxMPpvJuBmAy
RMULpGz2hqed30dwl6nlmE4/cv5dkFEu3yzqJUMFnbO1o2BpSMlO95ace0F8Ctia
CkwQs4Aeuez7aPw72RvheilzjRoRJMrGHIhdSjCI76u1xCIGxnACafexOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOFX4rKfgFnxuFYKdEJyfOvWvgIMB8GA1UdIwQY
MBaAFEj+wa8vMhsdG4KHof0FUTzmbkz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1A3QnJ5OHlHeDBiZ29laF9RVlJQT1p1VFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jOTAzNWQtZTU3Yi00M2YzLTkzZDEt
YzI3ZDFhODU1NjliLzEvU1A3QnJ5OHlHeDBiZ29laF9RVlJQT1p1VFAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jOTAzNWQtZTU3Yi00M2YzLTkzZDEtYzI3ZDFhODU1Njli
LzEvU1A3QnJ5OHlHeDBiZ29laF9RVlJQT1p1VFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr3niLz27
wuSxJkM4LBMj2rV1I3i3kI+lzCt5yNzFqcROgftRBrhPeghm6X6aHK7vNziRwhq4
3VeQbsFGmYeULSOB19PuUZ/T3PX5bSZgKZHNrhrwuMoz6jrVY0ZOwH13pnQpUKvR
fM8BewaPIu1NF5BIrO12SWbU5fdUTJEfns8qL17TGPZ5R5qBLD9VjOMkahFJ5uzW
DE7C44c7suTdnQl2avn9RCKbx9O/m9KfLpE19QOmpalkn6XfiyBvo/Rz6uv0YDCk
yRfh/dsuY3x9/fG99Yu2u6e8jmFokkbQZIpQJroNU1xZhk0HVrIsjVp0vzblwcEn
HGswwHLBjYYX4g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:32:11 2025 by rpki-client