Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
File: 04YKmzZYX7iqBR_Df8xqB3OZDL8.mft (raw, json)
Hash identifier: U+AmEuZhzzl5ukNX0FW5b+khaU4/YGs1MU1neZCvUiE=
Subject key identifier: 96:F2:65:5C:42:F2:DC:39:DB:06:05:2A:B2:3F:FD:D6:01:F9:DB:AB
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 019918ADE3E69F63CB0EB68876E09601B3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
Manifest number: 1679
Signing time: Fri 05 Sep 2025 07:01:13 +0000
Manifest this update: Fri 05 Sep 2025 07:01:13 +0000
Manifest next update: Sat 06 Sep 2025 07:01:13 +0000
Files and hashes: 1: 04YKmzZYX7iqBR_Df8xqB3OZDL8.crl (hash: TRZnEi9JWmy/5QBJGBRApauSH882d6EZSE9VmLygwUo=)
2: TEE7UWTU78bi6kM2ljfzySZ38Fs.roa (hash: DHKL0RNq36qbVbpfFyw21pdixDUZOv3Gqo2nBfFHI84=)
3: gKin5_oczuQ_AkHHyfEuz9qjFTc.roa (hash: 2dPqZZpC5wFLZYeumAbnLMLjLIVLDQp/PNW7ceXBgmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:ad:e3:e6:9f:63:cb:0e:b6:88:76:e0:96:01:b3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: Sep 5 07:01:13 2025 GMT
Not After : Sep 6 07:01:13 2025 GMT
Subject: CN=96f2655c42f2dc39db06052ab23ffdd601f9dbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:e3:08:f7:c0:98:78:38:ad:e1:57:3b:b1:
a2:ea:79:83:b6:f6:ec:a7:60:e3:5e:83:31:e1:40:
3b:cd:d8:be:0d:7c:f0:18:84:db:8c:ed:91:fa:38:
02:15:1d:2e:bd:3a:4f:48:72:1e:ff:c9:09:03:81:
23:14:76:cb:48:40:20:a0:7e:1c:fc:ec:30:75:ce:
22:07:b7:2e:04:56:21:ae:b5:b7:57:3e:d4:d6:40:
68:72:19:fc:b0:67:f7:e4:ae:98:99:81:1b:87:4e:
3d:1c:d1:89:10:a3:fe:fa:e5:b3:52:69:45:ff:5c:
30:83:a9:6f:19:ed:d7:27:2b:db:8e:81:1b:a5:3c:
3d:08:d3:c3:7d:8d:b1:34:dc:bb:34:97:83:83:e8:
0a:77:75:95:8e:11:cf:0f:bb:1f:aa:b4:ab:3b:1a:
7a:50:a1:80:22:03:95:1d:e4:09:b0:5b:5d:aa:94:
22:54:26:43:fb:a2:8f:11:26:ba:36:be:fd:f4:41:
95:45:04:af:a9:f8:9c:df:b1:14:50:fa:5c:74:c8:
b6:d5:b5:75:64:f6:09:c8:11:28:0b:ce:7b:75:a1:
4c:ea:90:7f:9c:0f:3f:c8:6d:f0:87:ca:f1:c9:55:
94:84:91:07:00:2a:9f:a0:d3:a9:d0:c9:4b:c4:a6:
67:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F2:65:5C:42:F2:DC:39:DB:06:05:2A:B2:3F:FD:D6:01:F9:DB:AB
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:97:93:74:fb:ba:ee:fc:9c:48:98:4e:f9:3d:67:51:eb:c2:
19:6d:65:ae:56:1e:ab:4f:72:45:9b:1c:85:32:61:e0:20:cf:
83:ae:6a:a0:f4:88:60:c7:3f:f8:c3:eb:71:9a:fc:4e:dd:04:
dd:83:b1:31:35:32:d6:cb:84:04:6a:2e:0d:81:8c:0c:79:51:
ad:dc:69:88:67:db:47:aa:01:51:02:79:2d:18:d4:0c:85:b5:
d4:af:29:df:60:19:85:b8:ae:92:a5:29:2f:42:50:dc:b4:81:
a3:74:75:94:f9:8e:fb:3a:79:9d:e6:03:5d:09:c5:d1:c5:6c:
dc:b1:e8:0a:d6:fe:82:13:cc:8b:fd:91:36:b3:61:be:49:c0:
04:25:c1:69:ba:15:f3:e7:00:27:56:d5:f3:6b:2e:0a:a0:0f:
24:c1:7f:0e:03:83:c7:f7:fa:51:88:1f:a1:55:0c:6c:a8:60:
c3:7f:27:bd:f0:61:bf:1b:5f:74:42:58:4c:70:50:7a:6c:7e:
94:09:b3:a1:b0:88:53:19:02:cd:44:8c:c3:b0:33:91:9f:39:
67:ff:a5:03:1c:bf:ab:0c:e9:ed:ac:f9:dd:5f:a5:80:b0:b6:
45:b7:9c:76:7e:bc:38:f0:22:6d:de:9f:f0:ea:24:a1:83:79:
8b:34:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:03 2025 by rpki-client