Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
File: o6mFw54-kRuYDpOgZkAVfp4FLSM.mft (raw, json)
Hash identifier: sJwkCbdeyAoXQrBjubr+94/xZ4QYyZiGKc/9PdB/Cww=
Subject key identifier: 8F:37:4B:90:35:C2:3F:3F:23:A9:98:96:3C:D3:26:FF:37:DC:C3:81
Authority key identifier: A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
Certificate issuer: /CN=a3a985c39e3e911b980e93a06640157e9e052d23
Certificate serial: 01975723DCC088CE946662B1C8E169530B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
Manifest number: 10EF
Signing time: Tue 10 Jun 2025 00:00:57 +0000
Manifest this update: Tue 10 Jun 2025 00:00:57 +0000
Manifest next update: Wed 11 Jun 2025 00:00:57 +0000
Files and hashes: 1: 3REEAprnZIBusO6q6WWrCX9P-HM.roa (hash: vH8qgeYWcERpU9E7qeOHsrxBazYwgyfC550mI+D0FkE=)
2: o6mFw54-kRuYDpOgZkAVfp4FLSM.crl (hash: Z3E2QRFasTznUD+JJOIq+EH+vo/uoFrUsp510R3VVYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:23:dc:c0:88:ce:94:66:62:b1:c8:e1:69:53:0b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a985c39e3e911b980e93a06640157e9e052d23
Validity
Not Before: Jun 10 00:00:57 2025 GMT
Not After : Jun 11 00:00:57 2025 GMT
Subject: CN=8f374b9035c23f3f23a998963cd326ff37dcc381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:1c:78:13:89:58:31:92:1d:82:54:fe:1b:
e2:4d:1e:85:b1:4c:f8:cb:68:f0:e5:e3:48:ea:0e:
9d:96:be:55:16:cd:5f:f6:53:3a:07:bb:7b:2b:94:
b3:f6:a6:b9:d7:50:56:a7:e0:a5:b8:9f:d4:ca:ba:
5f:09:bb:9a:99:dc:9b:97:28:41:c7:51:d4:39:57:
9c:63:b0:7c:b9:85:b4:47:56:58:df:65:cf:da:b9:
cd:cd:d4:12:d4:35:6d:da:f8:7b:76:23:07:b4:e6:
47:e6:af:55:a4:ca:89:84:45:2d:0d:2c:33:fe:12:
bd:ce:fd:f0:f9:79:b4:fa:de:25:4c:15:2c:6d:6c:
80:5a:9c:52:88:fa:aa:68:4a:a8:51:ec:ec:6e:43:
63:50:56:e3:07:6c:25:3c:d5:0f:7f:68:81:86:6e:
00:95:64:79:4a:e3:03:c0:28:9c:c3:cd:b5:00:27:
12:7d:d1:19:93:a3:9d:02:a6:ef:78:7c:63:5d:85:
97:56:21:54:af:09:4b:3f:ab:35:4c:20:75:c1:d7:
c5:9d:f1:15:fd:fe:19:ca:1d:38:22:7f:33:63:d2:
fb:f1:e1:b8:e8:50:89:f3:df:24:47:bc:46:2e:6a:
04:ca:87:d5:67:79:6e:b1:bf:65:d6:e9:1f:e8:40:
1d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:4B:90:35:C2:3F:3F:23:A9:98:96:3C:D3:26:FF:37:DC:C3:81
X509v3 Authority Key Identifier:
keyid:A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:66:6f:5e:1a:fa:20:c7:b9:1b:98:ba:ed:7f:01:c9:95:a8:
0e:7d:3f:49:ba:84:c8:b2:55:41:ff:39:5e:ba:09:b1:2d:26:
17:5c:ad:ad:70:b7:ae:c0:79:e4:f6:ca:72:4e:e2:44:1e:36:
1b:49:94:c6:b2:e7:68:f5:28:70:47:89:04:dc:70:47:5e:8d:
9f:74:6f:18:a7:f1:1f:08:94:ef:5d:cd:30:cb:9d:a5:05:5b:
05:a5:17:59:c6:24:66:0f:e1:fc:3e:14:23:ab:2e:61:df:c3:
0b:fb:7d:15:69:85:fe:ea:c2:c5:14:59:6b:53:1c:f2:0a:fc:
af:56:76:f7:b9:c8:f8:f2:62:3f:74:f0:06:02:9f:cf:d4:cc:
0a:ea:d6:48:6d:26:37:90:d8:2f:e8:8c:c6:da:69:cb:b3:ab:
67:3c:43:51:ee:df:c6:1f:4a:18:e0:7a:dc:87:7d:06:72:5d:
8d:27:45:79:fe:27:b7:11:b3:b2:0b:79:2c:68:2e:b3:29:f1:
ed:d8:e6:40:20:fa:7f:aa:e6:7d:1d:54:7d:5c:e4:65:cb:fe:
19:e1:52:b7:69:a3:bc:ed:30:67:e6:12:71:90:bd:44:60:f0:
17:d2:57:72:4e:a3:d0:49:ee:0f:f0:fa:0d:fc:6a:ad:f2:2a:
cf:81:b6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:50 2025 by rpki-client