Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
File: rKL3dI_jY9xZOem4VPwAQDEw66U.mft (raw, json)
Hash identifier: I9tel84u2C/N/LIq5khok69Ucd2h4dlqaxcZx++NDMY=
Subject key identifier: 1F:CF:AD:F6:CD:DB:6D:3A:61:EC:A9:B7:D3:ED:07:9C:5A:04:8D:7E
Authority key identifier: AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
Certificate issuer: /CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Certificate serial: 0197E41E4119FA58EED78B2124D0438C55AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
Manifest number: 1242
Signing time: Mon 07 Jul 2025 09:01:17 +0000
Manifest this update: Mon 07 Jul 2025 09:01:17 +0000
Manifest next update: Tue 08 Jul 2025 09:01:17 +0000
Files and hashes: 1: j1MFNSh109TR4xhuIO7hEIzzLx0.roa (hash: m4Zoo8iLf6w6vYmDzKqVKXqfQB+bfWM+4JfQ0Ih+lSM=)
2: rKL3dI_jY9xZOem4VPwAQDEw66U.crl (hash: SQww+AST4OVyBEbVz9Rt1fy+7oYUXVjzDB8HA1EMopc=)
3: u7VG8MqdZGcH4gUtF3RkiJXAbmg.roa (hash: 2LYlYxgKHIzR/5x4DJBXFV3DllJcEY1kUeTRo0v7v2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:1e:41:19:fa:58:ee:d7:8b:21:24:d0:43:8c:55:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Validity
Not Before: Jul 7 09:01:17 2025 GMT
Not After : Jul 8 09:01:17 2025 GMT
Subject: CN=1fcfadf6cddb6d3a61eca9b7d3ed079c5a048d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:30:9c:88:68:34:8f:e5:ec:11:bc:62:11:
11:c4:ca:9e:7c:ea:bf:a3:75:69:3e:67:d8:91:1e:
72:f8:b4:25:be:fd:c2:7e:e5:c4:0d:3f:77:58:d9:
ca:84:34:b4:d3:f0:1f:d8:a8:aa:a4:e0:96:dc:f3:
1f:a1:32:da:fd:df:c5:7a:27:e4:a6:68:f5:cf:f9:
0e:5e:08:58:84:4e:25:c0:48:6b:6b:13:21:03:f9:
60:62:69:c8:42:41:7e:ab:f8:a3:a6:e6:89:c0:fc:
8b:a2:ff:5e:0f:d5:c2:de:6d:9c:54:e6:84:e6:f8:
2b:9a:8d:45:52:c9:c4:96:2e:b8:3f:41:1b:80:ad:
b3:05:79:1d:40:c7:c6:e6:27:6c:4e:a9:a4:03:7a:
d3:02:60:a7:48:ca:23:cd:c9:49:ca:f9:70:54:29:
2d:d9:de:92:07:56:0b:81:c4:1b:a0:8d:f1:ef:e0:
d8:63:be:d6:c8:bf:f3:0f:fd:38:a0:f6:71:d0:be:
d2:67:ad:de:64:2e:04:d6:67:3b:f2:04:46:0b:f3:
31:68:c9:a1:e2:35:1d:5c:16:4f:b2:5c:16:37:6e:
db:e8:dc:85:ea:34:e8:a7:75:ee:ec:79:dd:66:41:
6a:c4:57:ae:b5:73:41:5e:79:09:28:33:89:1d:11:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CF:AD:F6:CD:DB:6D:3A:61:EC:A9:B7:D3:ED:07:9C:5A:04:8D:7E
X509v3 Authority Key Identifier:
keyid:AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:51:6a:3e:e1:f0:34:ae:f8:a1:0c:62:70:52:8b:19:2f:b7:
be:53:c1:9d:76:da:0c:bb:df:66:f8:34:95:bc:19:aa:cf:c2:
8e:59:ef:4c:28:26:31:b2:1f:b7:78:fd:7c:e9:23:01:e1:27:
fe:6d:bf:1a:1f:cf:eb:c1:08:60:23:18:3b:64:93:9d:a1:a0:
e7:30:84:91:ad:3d:e6:22:2c:ee:18:9c:30:3d:df:b9:ef:05:
c1:78:f9:97:ac:1c:69:79:78:68:a3:a9:0a:d7:e9:fb:dc:de:
71:f6:0b:1c:c8:10:16:9c:66:47:7a:27:a5:b9:1d:c6:c2:80:
cf:6f:f0:ce:10:d6:77:bc:00:be:8a:65:47:4f:dd:39:5f:79:
18:fc:19:e8:cb:b9:4a:c1:14:bc:b8:43:fb:cc:15:a5:16:a4:
bc:ed:c8:66:9d:a5:f2:a4:f1:d7:03:5f:32:ff:00:4e:9b:ec:
dc:63:57:54:e5:1f:20:b5:9a:80:1a:c0:fa:b6:18:89:ad:41:
86:57:e4:bf:cc:b6:d2:0a:45:7c:00:c3:61:cc:b3:ca:52:a8:
79:6d:8d:9f:2b:0e:47:8d:b2:1f:ff:ac:33:ca:af:d5:16:cf:
75:86:50:59:e4:c2:97:dd:f9:ce:8c:c3:a1:e3:a1:54:9e:f3:
f9:0c:b1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:55:25 2025 by rpki-client