Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
File: 6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft (raw, json)
Hash identifier: sWjeDHJEMU2gjjD+v+VdURb4s/aooSRdyim1691dJ0E=
Subject key identifier: 36:49:EA:61:49:5C:5B:1A:C1:7B:0D:7F:93:76:59:A5:C0:74:06:C7
Authority key identifier: E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
Certificate issuer: /CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Certificate serial: 0199A7CCE33209C6F218DBC988C46BB823B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
Manifest number: 0B08
Signing time: Fri 03 Oct 2025 02:00:46 +0000
Manifest this update: Fri 03 Oct 2025 02:00:46 +0000
Manifest next update: Sat 04 Oct 2025 02:00:46 +0000
Files and hashes: 1: 6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl (hash: d/t3qAswoYaISaacfI2Es3zD7JWhp62DUQefVRx1Mo8=)
2: ah-NG29pky0jPHEcgeOL-kOfH0Q.roa (hash: zKBnGYN4489QuBEbUaXwtDobGG4YVTXSMpaIv+wNvKw=)
3: zFFyOssEtNl2ZptlNvn-iw3yuoM.roa (hash: wU/a9ptBrD+06JSBz0EUZiC1M21vno+RkNOOYDTpTyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a7:cc:e3:32:09:c6:f2:18:db:c9:88:c4:6b:b8:23:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Validity
Not Before: Oct 3 02:00:46 2025 GMT
Not After : Oct 4 02:00:46 2025 GMT
Subject: CN=3649ea61495c5b1ac17b0d7f937659a5c07406c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:6d:7c:a0:c5:02:87:99:eb:53:30:d4:2b:
c8:75:bb:a9:bc:e4:95:c2:44:f9:ae:6e:69:c4:b3:
d5:eb:9a:b9:20:c0:df:86:5d:e7:59:a7:6c:9a:fe:
0a:c8:b5:19:01:f0:22:9d:4c:2b:10:22:7c:d2:16:
13:13:b1:ec:ef:a3:6e:3a:01:e6:54:52:4c:bc:d0:
8b:33:78:02:17:0c:fb:05:99:86:0c:2d:b7:91:1f:
0f:73:a2:16:7c:4f:80:c9:08:ed:23:f9:81:31:2a:
84:42:80:3c:e1:d2:2a:b4:f0:41:c1:60:4b:67:35:
bf:45:9d:ce:fe:cb:4d:b7:c6:1b:da:9c:53:e3:b0:
87:79:b4:5d:d4:f1:ac:6a:d1:bb:1b:e5:35:f3:76:
ac:a4:d2:29:98:3c:88:b4:06:2b:f9:5a:6c:3b:30:
74:56:23:fb:87:51:19:8c:a0:8e:ee:70:33:e7:4e:
d0:f4:61:8f:cc:6c:54:74:2f:6d:fa:18:67:56:59:
92:1d:04:36:a5:a9:17:a4:4d:ac:9f:5f:44:70:b9:
53:8f:88:3c:90:18:44:c9:f9:9d:39:c1:d2:22:d3:
2e:b8:8d:de:41:c0:88:84:e2:a8:6e:5e:ed:f1:27:
0d:69:53:f7:72:99:6a:55:24:bc:7a:87:be:95:70:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:49:EA:61:49:5C:5B:1A:C1:7B:0D:7F:93:76:59:A5:C0:74:06:C7
X509v3 Authority Key Identifier:
keyid:E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1b:21:d5:44:42:a8:94:4c:88:31:1b:61:52:87:2f:3b:ac:
48:dc:b1:fe:c6:2a:78:4a:95:70:26:29:c2:a4:ca:10:6f:87:
f1:fa:2b:99:a7:b5:db:a2:13:39:23:79:3f:9d:b4:75:dc:72:
7f:46:9d:72:77:7e:1b:97:c7:ee:a3:3a:f5:e5:41:ca:c7:8e:
2b:2f:07:1e:e3:4d:4b:8e:e4:d1:ae:fc:15:91:1b:62:9f:15:
67:7e:04:3b:86:47:c0:8a:94:a3:24:dd:3b:da:c7:d7:98:f4:
96:6b:2e:dc:31:29:2f:ae:bb:15:ed:4f:e3:9b:d7:0f:8c:3a:
e6:03:de:ed:1a:a7:74:79:dd:d7:60:37:9e:c3:ba:8f:d8:c0:
9f:25:0a:72:96:48:1d:ce:5a:72:0f:cb:38:51:b3:ae:08:c6:
6e:4d:ec:fd:3e:c4:cf:7e:cf:60:b5:29:43:fc:c4:70:62:98:
ed:db:35:d6:51:f8:45:dc:c5:f5:4b:22:3d:92:9d:3b:7a:c2:
59:f7:9e:b7:fa:0f:e9:91:a3:97:f1:ae:bb:03:30:02:cf:93:
13:30:89:c8:14:b5:97:39:c4:3a:09:39:71:7b:59:ae:5d:da:
1b:1b:af:da:a8:50:ec:5c:be:7e:c7:8e:0d:14:e9:3f:ba:df:
1a:ed:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:50:10 2025 by rpki-client