
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87da4595-b2df-4df0-89fe-7fe9cfe9c626/0/830BCCAFFC27299D2A467BE30814501E1044D208.mft
File: 830BCCAFFC27299D2A467BE30814501E1044D208.mft (raw, json)
Hash identifier: +15iHYPBuiRsXf4NpHpoMi0KBu6qNJi3cLNWNlekz04=
Subject key identifier: 25:0E:23:04:7A:CB:05:86:D6:AB:48:1A:B9:B9:D9:5E:5A:EA:E3:E9
Authority key identifier: 83:0B:CC:AF:FC:27:29:9D:2A:46:7B:E3:08:14:50:1E:10:44:D2:08
Certificate issuer: /CN=830bccaffc27299d2a467be30814501e1044d208
Certificate serial: 5C15B861C6EC7AD9119FE3A591D2F671A83C651B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwvMr_wnKZ0qRnvjCBRQHhBE0gg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87da4595-b2df-4df0-89fe-7fe9cfe9c626/0/830BCCAFFC27299D2A467BE30814501E1044D208.mft
Manifest number: 03
Signing time: Mon 07 Jul 2025 00:41:33 +0000
Manifest this update: Mon 07 Jul 2025 00:36:33 +0000
Manifest next update: Tue 08 Jul 2025 03:39:33 +0000
Files and hashes: 1: AS211575.asa (hash: HdnK8NipcGGf9nwHvvRjbOncwtqxxp0F4QaPvTb74T8=)
2: 830BCCAFFC27299D2A467BE30814501E1044D208.crl (hash: wURVWjyq40pADdbyaV58e2vgFRY6bEnKs8k4DBrr2ZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:15:b8:61:c6:ec:7a:d9:11:9f:e3:a5:91:d2:f6:71:a8:3c:65:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830bccaffc27299d2a467be30814501e1044d208
Validity
Not Before: Jul 7 00:36:33 2025 GMT
Not After : Jul 8 03:39:33 2025 GMT
Subject: CN=250E23047ACB0586D6AB481AB9B9D95E5AEAE3E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:13:56:cc:fc:a8:e0:bd:36:ca:e5:8d:d4:
c3:4d:d1:ce:33:e2:54:76:8c:c0:ed:bb:e9:6a:1d:
ee:c1:c9:d4:4f:9f:ae:eb:a3:2a:96:5a:62:09:9f:
1b:53:30:7a:6b:91:ea:8e:de:d5:f6:b8:aa:d7:27:
e7:ed:e4:31:33:0e:c7:6a:8a:1c:76:8f:d3:1b:86:
21:06:cb:af:e4:24:58:ad:9a:14:19:07:a4:c1:1c:
c9:21:a3:22:f4:25:04:ea:ec:03:5a:27:82:e7:1b:
1a:e5:16:07:b7:4a:b7:df:13:b4:ba:a0:f3:67:f0:
62:e2:38:28:fc:3c:a7:ad:b7:a3:7b:36:19:df:8c:
5a:a3:b8:2a:32:4f:d7:02:0c:f1:67:58:c7:f5:83:
c9:b8:a5:0d:ad:4f:9e:ae:0e:f8:ed:40:c9:0d:11:
b1:33:ad:91:0e:42:cb:9a:f7:94:50:65:97:41:57:
17:31:b0:ac:50:b8:40:30:94:69:81:1f:88:4e:ea:
bf:c1:ac:3f:54:74:b3:0b:7a:f5:b6:eb:79:c3:07:
b8:e9:79:1b:b5:cb:b5:cf:92:ab:c8:80:c0:7c:28:
d8:e2:05:7f:9f:ea:fd:3b:eb:42:53:e8:92:9e:73:
5b:23:bf:1c:9c:8c:cb:e7:ac:92:ec:95:fc:66:4a:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0E:23:04:7A:CB:05:86:D6:AB:48:1A:B9:B9:D9:5E:5A:EA:E3:E9
X509v3 Authority Key Identifier:
keyid:83:0B:CC:AF:FC:27:29:9D:2A:46:7B:E3:08:14:50:1E:10:44:D2:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/87da4595-b2df-4df0-89fe-7fe9cfe9c626/0/830BCCAFFC27299D2A467BE30814501E1044D208.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwvMr_wnKZ0qRnvjCBRQHhBE0gg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87da4595-b2df-4df0-89fe-7fe9cfe9c626/0/830BCCAFFC27299D2A467BE30814501E1044D208.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:57:f6:cd:25:81:58:66:09:7d:76:71:c1:26:1a:cf:f8:a8:
8d:4e:92:b1:fe:2a:4d:83:93:f3:cb:ed:d6:13:07:55:29:94:
89:13:be:2d:9a:11:f9:1e:b5:ee:50:80:75:7d:cf:e2:2c:35:
8d:66:e7:75:6b:d9:73:cc:81:fe:1a:b2:30:dc:e5:16:d6:39:
e3:ad:47:ef:f8:48:e4:b9:15:ba:c3:76:2b:7a:b6:e3:ac:82:
1b:71:82:ba:38:71:e3:cc:96:ca:c2:14:f4:a9:2c:8f:00:70:
3c:06:f7:7c:17:06:c0:48:a5:47:9b:00:d6:a1:f6:43:95:74:
3d:ca:c5:5d:f4:75:4b:af:88:ce:4c:9f:1e:ef:ad:6f:e2:be:
d8:8a:65:7e:d7:6e:9d:f0:c2:ad:1c:c6:0a:ff:f9:fa:49:7b:
ec:cd:42:29:b2:5d:25:d2:85:17:c1:90:d9:88:ba:9e:22:8a:
e8:26:01:e9:f9:03:7c:bd:66:53:c1:17:11:99:3c:23:89:21:
23:3c:3e:8c:76:e9:e5:ac:ae:40:c8:09:f1:78:b2:51:8f:19:
4f:43:66:ef:d9:76:0b:68:51:e2:3c:89:d6:33:30:2b:eb:94:
25:c4:2b:5b:1d:46:da:49:c2:bc:61:84:c8:7d:d7:b9:7c:69:
4a:43:5e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:25 2025 by rpki-client