Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
File: IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft (raw, json)
Hash identifier: Sk7qB1K3iqz4gkM9ZEIShOKV8jgUCSS18HUOOGiDU4I=
Subject key identifier: 26:35:07:58:F7:28:66:2C:9F:0E:01:AA:B9:E6:CA:A3:2E:FF:53:AC
Authority key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Certificate issuer: /CN=219885ea020e65006314ee9480def3b3efc039e3
Certificate serial: 01979C04D3FD3B616F2BD6971ECB9B848EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
Manifest number: 15A8
Signing time: Mon 23 Jun 2025 09:00:51 +0000
Manifest this update: Mon 23 Jun 2025 09:00:51 +0000
Manifest next update: Tue 24 Jun 2025 09:00:51 +0000
Files and hashes: 1: IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl (hash: Z6wP77Lvrwi+OCnJmiWr2pLZTCfJILxqe3vdfr0H3+8=)
2: mcM8_9lyrTG-MMDFjvFoLzh0EcU.roa (hash: wA7gawHVSiIwq+RZjpXudHmsZpXyv8YQLjD76SZRvpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:04:d3:fd:3b:61:6f:2b:d6:97:1e:cb:9b:84:8e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219885ea020e65006314ee9480def3b3efc039e3
Validity
Not Before: Jun 23 09:00:51 2025 GMT
Not After : Jun 24 09:00:51 2025 GMT
Subject: CN=26350758f728662c9f0e01aab9e6caa32eff53ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:8e:7e:36:18:4a:dc:34:4b:d9:f4:0d:7a:
43:b4:29:2b:7a:38:15:e9:6b:92:ed:83:dc:60:65:
f5:53:49:4d:c0:b0:cc:46:d2:9d:48:f8:4b:91:2e:
0d:61:b8:8a:ed:95:3e:4d:18:7d:82:18:6f:a1:52:
33:c3:10:87:ad:cd:4e:88:60:dc:d1:1c:40:cf:0c:
d1:83:34:7b:63:48:2f:05:ee:b2:f0:0e:08:75:c3:
4e:98:6c:2f:6e:b9:c5:cb:98:d3:2b:b6:c4:e3:b4:
e2:e1:ec:ca:a3:3f:1d:24:54:97:7f:59:80:b9:60:
21:6f:c5:e0:e2:66:ef:45:7f:b5:79:5d:00:61:d1:
8d:dd:19:f9:d7:05:0c:90:d4:b5:c4:e1:e1:e3:42:
87:3c:8b:f9:8a:58:38:ff:7d:a4:11:c6:a2:b5:32:
aa:c7:be:70:a0:2f:1c:a6:dc:c3:5d:c5:30:d8:7b:
33:6b:39:11:7c:54:83:82:5e:72:63:6a:47:c9:b0:
20:53:f4:9e:ca:a7:26:43:9f:3a:45:5a:17:30:5a:
f0:a3:3b:3e:f5:bf:9d:c5:d5:30:41:f8:b3:9e:a6:
af:11:c4:5d:2a:d9:d9:50:e9:d4:b0:e8:23:f7:6c:
c7:2d:e8:70:eb:04:e4:12:88:65:af:e2:64:ff:0f:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:35:07:58:F7:28:66:2C:9F:0E:01:AA:B9:E6:CA:A3:2E:FF:53:AC
X509v3 Authority Key Identifier:
keyid:21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8a:1b:6a:9a:d2:24:cd:bd:1a:ff:96:88:84:80:50:1e:ce:
73:65:63:f0:5c:e3:cf:e7:eb:2b:e7:55:78:a9:25:95:f5:38:
cd:4b:09:97:5e:7a:bd:9a:84:c5:39:d5:ef:e6:7d:9f:d9:b8:
e1:04:49:a2:11:4e:17:0d:07:b9:23:03:9d:0b:56:3c:5e:31:
60:0a:2b:5a:b6:99:2f:e0:f7:d3:7a:81:26:28:9e:9e:67:d2:
77:80:bd:2c:a1:9c:50:df:c5:dd:46:c4:b0:57:23:55:38:88:
40:e7:30:c6:da:6d:eb:64:ab:4f:9f:de:c3:ed:75:f6:a1:72:
78:1a:f4:72:4b:3b:ba:3f:7e:46:36:4f:9e:a8:bf:f9:56:dc:
dc:8c:08:77:e7:03:89:61:5d:5f:67:eb:f7:61:70:b4:9d:23:
6c:bf:1f:75:85:84:ec:59:b0:2a:c1:08:93:ae:0b:33:7a:f5:
40:50:83:e6:56:74:78:55:e9:6f:9a:aa:8e:c7:a2:43:55:17:
c1:d8:56:18:b4:2a:6f:88:39:eb:ee:da:eb:e2:20:4f:68:e6:
67:f3:83:0a:5d:00:6b:cf:d5:05:f4:4d:4a:36:f8:05:c4:ce:
e8:3b:3a:d3:5d:bd:5a:be:42:26:4c:96:6b:13:b8:06:7d:0f:
fe:e9:c2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:46 2025 by rpki-client