Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
File: QlQ5sMp_FNqpthsRvRe9zBunOGw.mft (raw, json)
Hash identifier: U4F/sD6S59g2hgp0Jb+0ZCYXYTPSCrL8ulUkx2TFBao=
Subject key identifier: 26:99:D4:89:44:B6:70:8E:37:66:33:B3:18:21:EB:C4:09:18:8B:B9
Authority key identifier: 42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
Certificate issuer: /CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Certificate serial: 019913BE67AC300E89B103C305158640AE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
Manifest number: 064E
Signing time: Thu 04 Sep 2025 08:01:09 +0000
Manifest this update: Thu 04 Sep 2025 08:01:09 +0000
Manifest next update: Fri 05 Sep 2025 08:01:09 +0000
Files and hashes: 1: AKOMQZeZNylU7lZ2jfftfFZ_Z4U.roa (hash: Nv09RJ//WYPjGsqetOMSZHjfsxpAq/7Zyyhfe6u1lRs=)
2: QlQ5sMp_FNqpthsRvRe9zBunOGw.crl (hash: /n3OiwhKs7c/RLuAH5oMSOy2ocW9M0s0HnNDI9jwYRQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:13:be:67:ac:30:0e:89:b1:03:c3:05:15:86:40:ae:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Validity
Not Before: Sep 4 08:01:09 2025 GMT
Not After : Sep 5 08:01:09 2025 GMT
Subject: CN=2699d48944b6708e376633b31821ebc409188bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:8c:56:6c:d6:b2:30:e5:6d:cf:c4:d8:d0:
e5:d2:3a:16:07:dd:04:7a:f9:c5:96:b2:01:62:8b:
80:05:0f:39:ba:98:f9:da:d8:02:bd:aa:2a:7f:5b:
e8:76:59:56:8a:81:30:e8:cb:3d:0d:1d:29:45:fc:
83:b9:c1:d2:93:24:f7:49:1a:2b:a1:7e:60:b8:ec:
a5:eb:2e:17:f7:ab:dd:0d:07:39:72:2f:58:a8:12:
8c:8e:7f:6a:63:d8:19:c8:4a:2c:b0:e7:dd:ee:df:
f6:d3:f7:19:ae:98:16:5a:50:ae:e1:cc:2c:85:e9:
b9:01:25:00:8a:2b:a3:fd:f3:92:47:e7:f1:47:7e:
92:b3:f5:b0:11:43:f8:25:aa:3a:ac:78:74:e5:fd:
d9:0e:1f:de:80:0f:3f:04:67:b5:20:5e:de:b6:27:
5a:e1:ec:ef:40:7f:48:68:cc:97:c4:ce:ec:09:99:
4f:1d:20:e6:7c:b8:be:b8:93:ae:8f:54:d8:23:5b:
0f:cd:77:d0:05:d5:40:94:0b:d9:81:ad:72:db:d5:
a7:bb:2a:7b:99:4d:6b:24:97:7c:5f:d6:45:56:4c:
48:a1:a7:7a:92:de:01:2c:07:dc:d2:99:e9:18:51:
ee:85:f5:ae:73:05:1b:7c:62:f0:f2:13:0e:ff:44:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:D4:89:44:B6:70:8E:37:66:33:B3:18:21:EB:C4:09:18:8B:B9
X509v3 Authority Key Identifier:
keyid:42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f5:59:47:a7:cf:f6:3c:65:1c:84:13:85:29:9a:c5:3c:60:
81:66:bc:01:47:c5:33:80:78:78:3d:1f:ed:0e:16:26:1d:97:
5a:2f:3f:34:47:6d:a2:24:3a:50:68:1a:8b:fc:25:ce:2a:da:
69:22:08:07:cc:ed:68:56:95:cc:61:79:22:56:c6:ae:e3:51:
e5:ed:74:0d:bf:d5:ff:3d:72:b5:cf:b1:63:0c:70:1e:c0:46:
93:96:e7:6e:01:ad:f9:d8:f1:be:0a:17:5f:b6:29:07:11:41:
78:a1:6a:31:0a:d0:e0:20:54:44:7d:4e:d4:ce:1b:4b:a2:86:
5d:e8:5c:58:e0:1a:9d:77:2f:c0:6d:70:5b:ee:bb:ad:17:af:
a8:9d:33:02:e0:b7:1b:8b:f7:e1:92:9b:32:0d:84:9f:04:c0:
50:ae:c7:93:74:81:33:9f:ec:a8:9b:1d:18:96:e3:c0:d4:e2:
15:e6:83:ec:99:16:12:04:fd:e2:4f:a1:0f:00:ae:82:27:64:
9d:9b:88:eb:2f:dd:d2:a6:16:2d:8b:5e:3d:58:89:67:d5:28:
82:3f:be:6f:1d:94:70:c6:38:af:ad:de:ba:a0:3b:32:df:81:
bb:9e:91:05:b3:24:40:36:5e:77:80:a8:68:06:a6:c5:df:80:
5a:f6:fe:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:35 2025 by rpki-client