Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
File: MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft (raw, json)
Hash identifier: UneM7jGtsFxY45ngbz/fkqqLXW4ghHgjgEFsQFjg+UQ=
Subject key identifier: F9:6B:7E:8B:73:52:A8:02:4C:8B:A1:22:2E:F6:84:20:AC:1A:2F:B0
Authority key identifier: 30:07:77:C3:B4:41:44:FD:30:56:BF:4B:84:54:50:CB:7F:AB:9C:2D
Certificate issuer: /CN=300777c3b44144fd3056bf4b845450cb7fab9c2d
Certificate serial: 01979BCDB4C82CA6819A538EBE59D0AE26E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAd3w7RBRP0wVr9LhFRQy3-rnC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
Manifest number: 113D
Signing time: Mon 23 Jun 2025 08:00:38 +0000
Manifest this update: Mon 23 Jun 2025 08:00:38 +0000
Manifest next update: Tue 24 Jun 2025 08:00:38 +0000
Files and hashes: 1: BBdbuotjTMjXRl3JAeP7HEvXWvI.roa (hash: oe7eC03oYJfwYH0zG5KTjbcXBldNHb2+R11az4Gn4S0=)
2: MAd3w7RBRP0wVr9LhFRQy3-rnC0.crl (hash: LUW/q4nlhsXi2Y0cqrjavxRZQMTnq2DIHITVPd7Ro/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:cd:b4:c8:2c:a6:81:9a:53:8e:be:59:d0:ae:26:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300777c3b44144fd3056bf4b845450cb7fab9c2d
Validity
Not Before: Jun 23 08:00:38 2025 GMT
Not After : Jun 24 08:00:38 2025 GMT
Subject: CN=f96b7e8b7352a8024c8ba1222ef68420ac1a2fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:89:e9:88:ea:a2:ff:c2:77:b9:56:c1:8a:
e5:9b:90:0b:59:3d:88:6b:ec:1d:be:e9:98:af:28:
57:39:b4:bc:9b:0c:20:93:db:5e:06:88:ba:fb:4e:
d5:fa:3a:b8:09:40:7e:ac:63:fb:7f:85:f0:4f:55:
51:10:fe:4f:8d:4d:0a:0d:c9:b2:52:69:99:6b:1f:
87:cf:1c:4d:10:b4:0c:cf:95:90:29:0e:d6:12:e6:
02:94:d0:9c:41:6d:a8:d5:ee:25:dd:d7:3f:40:78:
29:03:f8:b3:3c:ab:9c:4a:8b:9f:b4:9f:d6:58:36:
24:b0:40:de:e2:f9:3d:49:7d:16:6e:35:d4:2d:53:
bc:c1:87:9e:dc:aa:36:03:c7:10:15:3f:bf:a4:43:
6c:2b:e5:ae:30:67:d3:f2:7c:80:31:f2:52:a1:11:
fc:bd:89:be:23:4c:9e:93:e0:5e:36:51:9f:d7:b5:
48:5f:6f:0d:f2:eb:5f:d9:55:89:56:ac:3a:54:1a:
f9:dc:c8:1b:d7:ea:4d:20:b7:1b:70:f2:e2:ad:72:
c6:d8:71:c1:c4:d8:f1:46:6e:40:a8:21:e0:46:9b:
5d:48:8b:f2:1f:1e:77:da:82:2a:08:ff:f0:2f:aa:
e3:8f:5d:53:fd:02:d8:1b:69:71:63:a0:65:de:64:
c4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6B:7E:8B:73:52:A8:02:4C:8B:A1:22:2E:F6:84:20:AC:1A:2F:B0
X509v3 Authority Key Identifier:
keyid:30:07:77:C3:B4:41:44:FD:30:56:BF:4B:84:54:50:CB:7F:AB:9C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAd3w7RBRP0wVr9LhFRQy3-rnC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:96:8b:0b:44:ae:47:20:9c:d5:9e:91:68:2a:1c:ac:1f:ae:
53:10:36:52:c7:fb:2a:05:e6:4c:54:85:ee:71:e8:dc:5b:dc:
0f:cf:c3:f6:29:aa:92:68:8d:47:74:75:35:1c:24:c5:48:32:
fa:3f:fe:5c:81:33:db:2f:62:39:62:1f:bb:dd:c2:28:c6:ec:
09:04:83:62:f5:e9:ac:70:6f:f6:79:ee:ed:b4:e6:df:8d:32:
46:58:a1:7c:3a:68:ad:6b:08:68:db:2d:2c:34:ed:33:da:90:
57:74:68:06:49:6e:47:50:90:4a:6e:22:c8:af:8d:78:4d:04:
43:e3:67:3a:7f:73:9d:76:56:cb:e9:e8:85:bd:a5:32:da:12:
4c:a4:d4:42:58:3f:b8:17:aa:04:61:a0:2e:d0:b4:03:fa:7f:
9c:ae:38:6f:96:5d:ac:cd:4b:62:cd:2a:13:2a:14:54:26:3f:
1f:5a:06:10:89:dc:b9:38:b1:e5:7c:7b:c8:7d:72:79:82:c3:
af:12:7b:7c:5a:9a:18:9f:20:ba:15:19:85:db:5c:bf:47:cb:
ba:57:f5:50:e0:73:f2:3d:0b:2b:ca:91:5a:d2:13:c9:26:f5:
bb:e7:c7:4f:dd:ac:53:41:5a:bb:37:16:5d:b7:66:39:39:e5:
ea:9a:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:57:49 2025 by rpki-client