Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
File: Ivlg_e70BzVat4Nty2uQJvRCk-o.mft (raw, json)
Hash identifier: 07GN9tkFaEP0qpHYBvKrAmsXMsKfLKe2w0JEhr8lrEg=
Subject key identifier: 95:B0:E8:3C:DE:BB:69:97:B3:D2:36:5B:95:1E:02:F9:A3:7B:6B:7C
Authority key identifier: 22:F9:60:FD:EE:F4:07:35:5A:B7:83:6D:CB:6B:90:26:F4:42:93:EA
Certificate issuer: /CN=22f960fdeef407355ab7836dcb6b9026f44293ea
Certificate serial: 0197E45554A460D8610DA70E7B9C6B5DF07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
Manifest number: 0935
Signing time: Mon 07 Jul 2025 10:01:26 +0000
Manifest this update: Mon 07 Jul 2025 10:01:26 +0000
Manifest next update: Tue 08 Jul 2025 10:01:26 +0000
Files and hashes: 1: 294sEvFCPZcpapErUdpT5vNPLKY.roa (hash: K9zx63RQ0E6LnQ5ZYnogejedGoy5yi5fVZmpZbGiuTU=)
2: Ivlg_e70BzVat4Nty2uQJvRCk-o.crl (hash: lqsX2w3fQWZlqXE/g1LyCLBRE2XyUklWW8NJg1W5q3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:55:54:a4:60:d8:61:0d:a7:0e:7b:9c:6b:5d:f0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f960fdeef407355ab7836dcb6b9026f44293ea
Validity
Not Before: Jul 7 10:01:26 2025 GMT
Not After : Jul 8 10:01:26 2025 GMT
Subject: CN=95b0e83cdebb6997b3d2365b951e02f9a37b6b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:fe:69:5b:da:14:84:99:c3:06:a0:12:29:
38:b4:73:51:15:21:c4:fb:da:c8:61:be:88:b8:92:
e3:8f:f6:f8:37:cf:c5:53:be:0f:75:c9:60:d7:b4:
06:5b:a1:65:47:bf:c5:7a:a9:77:32:0f:4d:9a:3f:
8d:32:05:56:2d:32:ed:b3:24:f7:09:d1:5c:6d:26:
cb:fe:d7:cb:27:03:42:14:0e:4c:74:7b:f5:b2:f3:
70:57:01:de:87:9d:3a:ac:87:b6:08:54:2a:3e:31:
33:6d:49:2f:c3:42:b1:a0:79:8a:57:bd:3c:a7:ec:
38:af:8c:b9:20:88:d9:cf:6c:5a:17:df:6e:19:da:
96:fc:a6:9e:4a:68:d0:4d:d9:de:d3:4e:f4:0e:c0:
e4:54:74:ee:d3:75:9c:cc:52:2b:31:14:71:86:c3:
60:d8:f6:8c:f8:a3:64:a2:8e:66:8b:10:70:f9:82:
8e:24:83:61:4c:f0:da:af:5e:2e:8f:10:a4:56:f4:
6e:e8:da:61:af:0d:46:0e:37:a9:75:f9:d6:3a:5b:
12:ad:8d:cc:ae:ce:ff:9b:41:78:91:bd:a8:74:3d:
33:2d:96:96:ce:f4:97:d3:9f:d6:45:c4:5c:5f:f3:
3c:b3:1d:c7:1a:dd:d6:9b:87:dc:69:c6:f0:3a:7e:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B0:E8:3C:DE:BB:69:97:B3:D2:36:5B:95:1E:02:F9:A3:7B:6B:7C
X509v3 Authority Key Identifier:
keyid:22:F9:60:FD:EE:F4:07:35:5A:B7:83:6D:CB:6B:90:26:F4:42:93:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:56:ee:ac:7f:4e:39:0a:0f:ca:4a:e7:d0:d1:eb:8b:e0:b5:
5f:a7:95:fc:a5:1f:e1:b2:c0:a9:c1:17:0d:bd:bb:30:3e:e2:
b9:b2:e4:77:0b:cf:d7:ef:25:6a:77:e3:00:a6:15:10:25:ae:
42:40:c9:2a:44:77:82:42:ba:07:27:ba:24:0e:3e:11:a0:d1:
c9:52:81:46:89:47:b8:33:d5:a7:a8:60:59:bf:13:bd:79:97:
2a:f3:73:69:32:51:78:a1:46:05:24:e3:06:ab:9f:e8:7f:83:
09:dc:31:f2:95:dd:06:96:97:ec:f0:5d:22:05:d2:d3:fb:11:
da:24:77:12:3e:c6:9c:11:5f:24:18:e8:22:7c:1c:c8:0c:ff:
c3:57:20:4b:07:76:9f:61:97:14:39:59:bd:ed:8c:b5:c9:bf:
97:3a:b7:f4:ac:00:51:0d:6b:23:44:f0:af:da:6b:71:18:72:
ec:0d:eb:04:22:2a:73:17:20:09:35:11:20:33:fe:b9:b9:60:
52:d2:76:97:1e:8f:8d:0f:a5:bf:5b:97:c9:b6:e2:1d:c2:85:
97:e3:42:53:1a:3d:e4:4c:52:ee:4b:07:e5:65:16:5d:1b:5c:
d1:fd:59:e8:1d:08:20:ce:8e:8b:60:8c:3d:79:ba:c6:93:eb:
5e:b9:c1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:22:05 2025 by rpki-client