Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
File: F43VHX5As0tDn4_fTQUUEcU0cuo.mft (raw, json)
Hash identifier: q1l6aYLArxOTs7MdQd611ePJ/u1SvtCDqEMSsjUwp8w=
Subject key identifier: B3:CF:F8:76:41:33:2A:EA:AC:CD:34:6E:FE:D5:F3:B3:6D:99:D1:88
Authority key identifier: 17:8D:D5:1D:7E:40:B3:4B:43:9F:8F:DF:4D:05:14:11:C5:34:72:EA
Certificate issuer: /CN=178dd51d7e40b34b439f8fdf4d051411c53472ea
Certificate serial: 0197A198F6ED1D3F0155EE91B76FC1339229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
Manifest number: 0370
Signing time: Tue 24 Jun 2025 11:00:45 +0000
Manifest this update: Tue 24 Jun 2025 11:00:45 +0000
Manifest next update: Wed 25 Jun 2025 11:00:45 +0000
Files and hashes: 1: F43VHX5As0tDn4_fTQUUEcU0cuo.crl (hash: qNImS77BnpLggImrqU1UylWuCX4ybeydmXwdvH82Dvs=)
2: sY0r0y4AruQYBO-qa1jtodSMRJI.roa (hash: fgiZ0pPukyfp5f/cG9pJMs5XjY+lIWQ3prMocyZ72Vo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a1:98:f6:ed:1d:3f:01:55:ee:91:b7:6f:c1:33:92:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178dd51d7e40b34b439f8fdf4d051411c53472ea
Validity
Not Before: Jun 24 11:00:45 2025 GMT
Not After : Jun 25 11:00:45 2025 GMT
Subject: CN=b3cff87641332aeaaccd346efed5f3b36d99d188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:78:d2:fc:2d:c5:81:0b:8c:87:96:11:6e:
f5:56:e6:dd:8a:0b:2c:d6:59:9c:39:16:42:fd:db:
fc:d7:0e:a3:f9:0b:4b:8a:2f:e2:4d:08:80:a8:02:
be:43:c4:a5:af:fd:34:5c:46:d0:54:d4:67:47:d5:
c0:ed:ac:22:9a:94:f9:7f:ff:4c:f7:20:1d:0b:d1:
cc:f8:6c:ee:1c:f3:92:d0:8f:33:77:27:92:df:ba:
2d:c7:00:56:da:6e:46:1c:03:a9:e6:af:98:f2:ba:
6e:67:61:df:0b:8d:0f:f4:da:ea:eb:bf:7a:2a:ae:
19:c2:64:75:fd:62:81:df:0e:6d:f0:3b:9d:02:b1:
81:bf:3d:9f:8c:b2:57:52:61:d7:f0:81:19:82:69:
01:d7:b9:35:13:65:82:77:49:5e:7d:94:13:84:2b:
2e:b8:d0:7c:89:f1:35:a5:e5:60:2c:3c:d9:52:1a:
2c:11:8c:68:c4:eb:f3:57:d1:8b:50:e5:cd:23:14:
00:d3:88:a2:b3:cc:4c:cb:9e:24:4e:27:03:78:a1:
5e:aa:56:50:e3:18:47:fe:7d:e1:b9:61:a6:37:72:
30:cd:c1:f6:75:3c:52:2d:dc:0b:81:55:70:33:c2:
89:65:6f:f2:47:4e:76:60:99:b6:3d:6e:69:3c:98:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CF:F8:76:41:33:2A:EA:AC:CD:34:6E:FE:D5:F3:B3:6D:99:D1:88
X509v3 Authority Key Identifier:
keyid:17:8D:D5:1D:7E:40:B3:4B:43:9F:8F:DF:4D:05:14:11:C5:34:72:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8c:1d:5f:7b:cd:e9:2a:17:6f:d7:f2:1c:bf:03:45:a8:c2:
40:9f:43:60:72:1e:79:47:90:ba:09:37:f6:82:56:75:90:f5:
d9:27:98:4a:3f:e7:da:e4:62:4d:0b:b8:cf:b0:a9:78:84:71:
2d:21:21:53:61:9e:12:68:97:8b:d2:eb:0c:b4:2d:85:3e:03:
fe:20:34:f0:a2:b0:6a:eb:65:4b:84:92:cb:c4:45:7c:63:22:
96:96:1b:af:36:d4:5e:ce:3a:9e:7b:a6:01:92:3d:e1:42:16:
46:d8:d6:af:5e:ad:4c:f0:5b:c5:39:00:6f:dd:20:fe:d2:13:
a2:a7:29:e1:e1:34:fd:de:70:2c:22:af:4f:40:8c:60:b4:0d:
9a:e9:b7:8d:73:25:d5:49:5d:61:f7:90:43:1f:4b:24:06:f5:
c5:29:89:98:ae:8b:c5:5e:9e:79:55:f6:ae:0c:2c:ee:8c:51:
dd:48:a0:21:79:50:76:b7:aa:e4:d0:f2:06:16:e0:6a:6b:86:
7e:4c:d4:e1:d1:3a:c0:01:b5:54:3d:79:76:94:1f:50:d7:1b:
15:55:df:20:de:62:96:34:46:90:be:33:87:bc:2b:13:e7:1e:
a9:d9:42:1e:43:bb:8e:ac:16:78:de:7c:18:5f:4d:4c:8c:fa:
21:ae:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:35:49 2025 by rpki-client