Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
File: Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft (raw, json)
Hash identifier: IY8Shh4toIWFfJpfpeVdTf9mMiwzEcRIQBKDJm6JDFE=
Subject key identifier: 81:61:53:15:9B:14:F5:CA:B0:B0:B0:D6:F4:B8:9A:66:8A:91:FA:26
Authority key identifier: 16:0C:F1:DA:AF:F1:DC:B2:76:5C:DC:4F:78:E8:70:4E:4E:2B:9A:DA
Certificate issuer: /CN=160cf1daaff1dcb2765cdc4f78e8704e4e2b9ada
Certificate serial: 0199B708F3E63FFB4A20D1B670724D42A8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
Manifest number: 0D51
Signing time: Mon 06 Oct 2025 01:00:41 +0000
Manifest this update: Mon 06 Oct 2025 01:00:41 +0000
Manifest next update: Tue 07 Oct 2025 01:00:41 +0000
Files and hashes: 1: Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl (hash: Cbo8fncb2De82ZLfXweulrZ41ehmPhRw0oPiQd282xA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b7:08:f3:e6:3f:fb:4a:20:d1:b6:70:72:4d:42:a8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=160cf1daaff1dcb2765cdc4f78e8704e4e2b9ada
Validity
Not Before: Oct 6 01:00:41 2025 GMT
Not After : Oct 7 01:00:41 2025 GMT
Subject: CN=816153159b14f5cab0b0b0d6f4b89a668a91fa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4d:0e:6c:2f:d8:15:e7:97:67:cf:93:41:11:
c4:19:69:f6:5c:84:ec:47:9e:74:7c:a1:45:95:7f:
9b:7d:ab:7e:bf:3d:95:21:8a:90:8b:eb:f0:d7:ed:
96:76:a8:eb:fa:70:9f:d0:bb:07:4d:87:21:35:67:
93:c0:c1:c1:55:73:7b:b4:51:94:45:04:bb:64:ee:
2d:7e:c9:29:00:69:00:82:f9:ae:36:87:e1:d4:99:
a3:85:36:52:ea:a4:ba:27:4f:ca:1c:8f:59:fb:b4:
c7:70:53:8a:a5:6e:c1:70:c8:69:46:1a:01:bd:26:
ab:a7:c6:ab:af:5a:15:2d:2a:af:6f:3e:ae:43:38:
e5:e4:41:85:f2:52:78:c6:fd:73:8d:a0:8e:77:86:
7e:cb:18:32:b9:56:20:3b:75:84:07:a7:fd:6b:b2:
8c:0a:e3:0d:9b:75:14:5e:ef:1c:cd:fc:6c:ca:68:
74:8e:da:bf:f9:81:b8:1e:fe:be:53:27:da:a9:79:
0c:8f:84:8c:85:db:11:fb:df:29:6e:3f:c7:f1:c9:
17:3e:17:fe:ed:07:67:bb:fc:7d:8b:d5:10:69:65:
ca:ed:0a:9e:71:b1:20:58:31:74:60:22:23:7f:0b:
a1:38:4b:1c:ce:1f:b2:14:97:00:a3:eb:91:83:50:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:61:53:15:9B:14:F5:CA:B0:B0:B0:D6:F4:B8:9A:66:8A:91:FA:26
X509v3 Authority Key Identifier:
keyid:16:0C:F1:DA:AF:F1:DC:B2:76:5C:DC:4F:78:E8:70:4E:4E:2B:9A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7e:87:9e:36:98:fa:7f:b4:08:71:b2:db:e4:f3:51:ca:57:
7e:44:b8:e6:e1:15:20:5c:f9:d2:22:c8:8a:55:5c:31:bb:54:
32:ee:8b:61:96:5c:7e:bb:23:ef:86:78:4f:b9:98:6a:a2:25:
f5:51:7d:92:cc:78:ad:c7:56:2e:e5:79:e8:f5:84:d4:fc:fb:
8f:95:06:95:67:8c:3e:c6:97:e8:74:a3:e7:ea:ab:3f:5a:7c:
d3:e3:c3:c0:4c:72:f3:90:19:a3:5d:93:c3:7c:69:6a:24:92:
33:2b:db:70:ff:77:53:22:fa:d3:80:16:a3:1e:57:a8:be:34:
26:01:66:4f:b5:a8:a9:92:7a:01:88:19:d6:15:33:d2:62:0d:
20:11:a5:9e:0b:d6:55:77:ff:36:77:e0:e5:19:da:98:53:26:
16:af:dd:1f:37:37:44:98:aa:c3:e0:0a:ac:70:5e:a8:22:e7:
32:c7:1d:e8:da:b4:48:c0:f2:80:bb:9d:e0:b9:16:9d:ed:34:
6a:97:9e:0e:81:e7:8f:83:5f:9f:18:49:c0:22:f1:a1:e1:5b:
65:81:53:b8:36:f9:5a:90:0c:f8:72:d5:68:cb:95:85:1d:99:
ea:3d:73:f2:1b:9d:b2:60:33:bb:ec:64:c9:a0:50:5c:51:87:
08:60:4b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:49:33 2025 by rpki-client