Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
File: oK89hVH73Tti9P_f1ZytQWHkRx4.mft (raw, json)
Hash identifier: +HwisryH6tCF0jg9IaHO/wHxM6qur59yiDIF0Sc3d+0=
Subject key identifier: 37:EF:61:71:07:EA:14:07:FE:8E:76:86:E1:1F:04:67:44:D8:45:54
Authority key identifier: A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
Certificate issuer: /CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Certificate serial: 01977D1E61A609A404C44EC8864D054DF876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
Manifest number: 0D1E
Signing time: Tue 17 Jun 2025 09:00:32 +0000
Manifest this update: Tue 17 Jun 2025 09:00:32 +0000
Manifest next update: Wed 18 Jun 2025 09:00:32 +0000
Files and hashes: 1: Fa0oKJS-5OytgjD9FfEKRTyYbH4.roa (hash: uvEwc2Oby4x64qeSjPHNoFr0vjSUe2G9BJiy9VMRAr0=)
2: oK89hVH73Tti9P_f1ZytQWHkRx4.crl (hash: 6/8q/RwqBRWxde7adyQ1miEzoOMpfLUR1wnXc6qh55g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1e:61:a6:09:a4:04:c4:4e:c8:86:4d:05:4d:f8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Validity
Not Before: Jun 17 09:00:32 2025 GMT
Not After : Jun 18 09:00:32 2025 GMT
Subject: CN=37ef617107ea1407fe8e7686e11f046744d84554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:93:c9:07:bc:0d:9c:81:00:0d:ae:be:39:
42:b6:b4:6e:f8:8a:d0:3e:5e:10:0e:c6:80:64:d5:
4e:6c:fb:1c:3f:21:2e:a9:c6:6c:c7:cb:10:36:d9:
18:23:8c:26:f9:78:44:0c:4d:19:8e:96:2b:10:92:
18:35:2a:11:d1:71:e7:48:b3:98:97:e6:8c:7b:85:
49:58:51:ab:72:24:0b:b4:70:e6:6f:3a:98:ba:70:
d9:d7:f4:74:9b:c9:c6:a7:76:e6:a4:71:5b:17:fe:
3f:43:54:ca:e2:e7:e0:de:d0:d4:54:3d:2e:62:04:
05:62:b9:b9:e6:06:ca:6e:6f:d3:77:24:56:b1:62:
c9:f0:e1:a3:2a:96:7e:a1:b7:45:06:f0:61:b9:c4:
c6:68:71:33:bd:81:83:7e:47:64:3f:5f:a7:6d:51:
4c:01:b3:03:29:bd:3e:8a:28:65:d7:be:f2:4a:07:
a1:01:b3:75:4c:25:5c:23:99:c5:cb:42:07:38:bc:
54:89:a9:ed:e0:fc:ee:8e:63:0e:40:77:7a:25:af:
dd:22:78:01:8f:42:a6:bb:39:79:f6:61:9f:d4:7a:
24:71:fa:38:58:17:5c:82:ca:11:cf:ed:33:79:50:
d0:20:9a:20:07:c3:35:5f:85:db:98:d3:51:cf:7c:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EF:61:71:07:EA:14:07:FE:8E:76:86:E1:1F:04:67:44:D8:45:54
X509v3 Authority Key Identifier:
keyid:A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8e:2d:ff:fa:57:34:50:e3:ef:f6:b0:10:8f:8f:a9:e5:2e:
da:60:82:17:37:c8:c0:35:32:15:1c:90:a8:d7:3d:04:88:e3:
78:b2:2f:77:6b:5d:a2:25:cf:c0:68:32:54:56:2e:e4:84:b9:
55:98:18:8c:fb:d3:da:64:74:7c:77:d7:a4:4d:3d:52:da:64:
b4:63:13:d0:45:86:9f:58:74:a8:2e:c8:eb:8a:20:46:73:55:
9d:11:ac:5d:2b:9d:22:22:90:2b:da:cd:ea:0a:09:02:27:ae:
94:8c:d4:34:d2:aa:c2:2c:b0:05:a3:05:be:37:9e:3a:5f:df:
a0:cf:37:6d:8f:ad:86:13:5b:38:91:ad:81:72:f7:37:c1:2d:
da:a1:db:29:50:01:a1:04:ee:e0:14:a3:9c:c3:be:4b:67:28:
c5:01:85:e0:13:cd:69:73:5f:78:44:ac:74:a0:cb:d2:db:bf:
3e:97:c5:58:96:ea:07:13:ba:d0:98:32:0a:9d:6a:c6:5b:a6:
2a:61:a5:1e:6c:35:76:12:94:4c:00:28:fd:a2:af:a6:a8:26:
bd:23:45:19:5d:17:3b:79:c9:89:72:e5:14:00:55:bf:96:74:
f1:49:fa:4d:9f:ba:a3:d5:ef:0f:d0:2e:3e:13:9b:a5:27:aa:
67:f6:ab:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:51 2025 by rpki-client