Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
File: 1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft (raw, json)
Hash identifier: ncUohKjWun4JGXRuFtUMH6DsahNKcCUxKd/bFslAr4I=
Subject key identifier: B8:98:25:63:85:11:0E:C5:B4:31:BC:0E:78:B0:89:5D:55:05:FD:D9
Authority key identifier: 1A:78:01:A0:A4:5F:EE:2C:AD:49:A5:10:10:71:39:5A:4B:F0:46:FA
Certificate issuer: /CN=1a7801a0a45fee2cad49a5101071395a4bf046fa
Certificate serial: 53D08A7506492F2345B12349C6974A4B51DBE6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GngBoKRf7iytSaUQEHE5WkvwRvo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
Manifest number: 01EC
Signing time: Mon 21 Jul 2025 05:06:56 +0000
Manifest this update: Mon 21 Jul 2025 05:01:56 +0000
Manifest next update: Tue 22 Jul 2025 06:59:56 +0000
Files and hashes: 1: 323030313a3637633a313830343a3a2f34382d3438203d3e20323134343836.roa (hash: 1nPQzGJag6lw540UIscUM9owVGr1DZNIl1AFUvQr+XA=)
2: 1A7801A0A45FEE2CAD49A5101071395A4BF046FA.crl (hash: kSC6encaNjLYtyDayx64H/z8hJTTTAmZUsEbK8z66xA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d0:8a:75:06:49:2f:23:45:b1:23:49:c6:97:4a:4b:51:db:e6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7801a0a45fee2cad49a5101071395a4bf046fa
Validity
Not Before: Jul 21 05:01:56 2025 GMT
Not After : Jul 22 06:59:56 2025 GMT
Subject: CN=B898256385110EC5B431BC0E78B0895D5505FDD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:4f:6f:57:5b:70:20:dd:16:3f:20:0a:26:
5d:7f:3f:b5:ab:d7:89:a5:2c:ad:68:93:15:02:ea:
5c:a1:50:3c:f6:1d:eb:20:a1:bc:da:93:29:51:98:
6c:f9:87:13:a6:57:16:fd:7e:df:32:95:e9:6d:86:
01:23:76:28:92:5e:cd:81:27:47:bf:57:11:ba:a6:
cc:94:6d:f5:30:19:f3:5d:05:db:7f:11:00:19:f6:
a1:06:e3:8f:83:45:57:92:94:7a:a6:3c:7e:c4:af:
14:3c:c2:10:60:2e:f9:83:32:09:f3:89:19:bf:c7:
51:3b:4e:86:c3:a6:d8:46:dc:0a:a4:73:cf:4b:4e:
e9:95:78:48:fc:93:a8:d0:1d:cd:39:ce:37:22:05:
8d:e7:60:6e:1a:89:9d:cc:52:63:b7:d8:05:df:7d:
d8:94:58:a8:c3:56:24:da:92:32:f4:ca:2e:f1:36:
0c:6a:3e:5d:db:af:59:32:cb:e7:e2:6a:fd:24:09:
61:bc:65:ae:13:08:8e:2a:c1:aa:33:13:17:91:fd:
70:cd:f2:38:a1:23:52:91:1f:1b:44:88:4d:02:53:
46:d4:4c:9b:c1:0c:81:32:24:f7:45:8e:43:24:b1:
07:1b:c0:dc:9a:51:87:c9:fc:0c:a9:c7:8f:14:91:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:98:25:63:85:11:0E:C5:B4:31:BC:0E:78:B0:89:5D:55:05:FD:D9
X509v3 Authority Key Identifier:
keyid:1A:78:01:A0:A4:5F:EE:2C:AD:49:A5:10:10:71:39:5A:4B:F0:46:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GngBoKRf7iytSaUQEHE5WkvwRvo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c2:7a:9b:17:40:da:22:06:e6:87:96:8b:2c:c1:42:07:fd:
92:57:f1:4a:84:d3:4d:cf:b2:63:d5:48:a1:88:41:4e:0a:2f:
6c:d7:e6:e5:fb:14:fe:b0:e7:5c:e6:ed:03:e0:0c:bd:9e:90:
05:ab:e1:03:c5:5e:0a:84:c5:37:31:8f:b6:01:b4:b2:84:c9:
16:8c:fc:b5:32:de:47:c9:fd:e9:e6:bb:bb:cf:d0:47:e3:f4:
76:75:ff:7c:2f:a8:84:68:6a:36:35:1f:d8:fd:f6:7c:b4:5d:
ae:4a:d9:97:bd:8a:8e:30:43:c1:20:a6:bf:e8:af:fc:54:af:
4c:81:7f:24:0c:d4:f7:7c:c1:98:0a:44:c6:a6:d4:c8:38:24:
37:c0:8f:90:3b:af:93:e1:b5:a3:38:17:5b:c4:b7:c7:d6:93:
76:e4:33:c6:28:92:3b:d4:c4:97:58:99:f5:48:1b:a8:d5:1b:
af:fa:4b:a7:ad:c5:81:ce:b9:7d:bd:db:aa:b4:70:02:18:b0:
7d:90:9c:30:a2:99:7f:54:a3:18:00:13:b0:0b:cf:8b:bc:36:
cd:a7:74:c0:5e:b4:24:8b:90:f4:3f:1f:a7:81:d6:03:c9:5b:
80:96:a6:85:6b:34:7b:ab:d8:12:3e:4f:ec:3e:9d:c0:2b:bb:
de:0f:ea:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:10:21 2025 by rpki-client