Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
File: 1QylITQTxwqeg7R6gqfEV53UwZY.mft (raw, json)
Hash identifier: M91CwvRSIr2Lb/TaY8iRC9OXeVWWyufGIvJaxTGy0lg=
Subject key identifier: 3A:7B:67:75:2E:60:74:82:93:52:4A:A8:8C:17:EE:3B:94:FC:AA:3B
Authority key identifier: D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
Certificate issuer: /CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Certificate serial: 01995AFAF2FBD6560551A2B77244B701DC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
Manifest number: 08DC
Signing time: Thu 18 Sep 2025 04:00:19 +0000
Manifest this update: Thu 18 Sep 2025 04:00:19 +0000
Manifest next update: Fri 19 Sep 2025 04:00:19 +0000
Files and hashes: 1: 1QylITQTxwqeg7R6gqfEV53UwZY.crl (hash: ltI8rqYDQjyt5L7t0E8kG6esNwRavfPdI/ZAqoUT7M0=)
2: _qLxIOi7VmVEBLaS1YixdxXiwBA.roa (hash: 0p2ssxxIHIoQau1gQDFigWlgz8Te2D1iMIcwAH/P3eQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5a:fa:f2:fb:d6:56:05:51:a2:b7:72:44:b7:01:dc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Validity
Not Before: Sep 18 04:00:19 2025 GMT
Not After : Sep 19 04:00:19 2025 GMT
Subject: CN=3a7b67752e60748293524aa88c17ee3b94fcaa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:36:3d:36:4d:ca:d3:ff:df:ac:cc:22:d3:ac:
a0:f7:9b:45:27:62:70:63:29:d0:c0:50:5f:eb:d9:
11:2a:3c:e9:d2:4c:13:db:15:df:bd:51:0f:69:3a:
bf:ff:b2:17:2e:d9:90:a5:ff:9b:51:6d:0e:48:bd:
a0:5e:dd:f7:30:1e:ec:84:92:47:4f:f3:00:c7:7c:
cc:e1:24:3b:69:b3:14:67:bb:c4:9e:1e:19:6e:57:
29:40:94:16:08:af:b9:66:08:22:3d:43:b2:9c:27:
75:70:94:ae:af:b5:a5:cf:18:25:68:4d:df:2f:5a:
67:94:d1:c2:42:be:33:57:20:ac:47:7f:5b:21:10:
09:c5:67:e0:c8:71:77:74:c3:f0:bd:d0:13:49:c1:
89:0b:a0:03:45:6c:b1:ca:d9:a6:8f:4a:cc:06:92:
6e:4c:df:5c:ae:e1:2f:d0:17:ab:4d:5a:99:5e:3b:
81:d0:7e:2f:5e:2d:5f:e2:5e:d6:71:dd:3d:3b:db:
64:21:48:d7:7c:46:4f:0d:f6:8b:80:e8:aa:20:82:
4d:7c:35:65:59:0d:00:ac:bb:d1:40:a2:8b:f7:23:
87:15:95:fa:e4:ae:bd:46:d8:01:74:50:1f:1c:24:
b4:f9:78:83:c8:7e:0e:b7:70:9b:b6:14:f8:86:70:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7B:67:75:2E:60:74:82:93:52:4A:A8:8C:17:EE:3B:94:FC:AA:3B
X509v3 Authority Key Identifier:
keyid:D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:90:79:47:97:dd:67:2c:2e:e1:d2:77:e3:37:3f:82:f1:c4:
79:fd:7c:5f:26:e3:86:46:c3:7d:a9:b4:45:f3:53:5f:f3:ce:
6e:00:18:29:1b:d9:cd:2b:88:61:80:6a:42:32:5d:de:6d:4f:
1c:d0:f4:48:71:9e:19:8b:f1:e6:44:a9:8a:55:1f:91:0c:95:
5d:d9:7a:55:7c:d5:38:08:d8:90:c1:23:0c:d8:f0:8f:c7:5f:
ac:dc:1a:bc:90:9d:08:0a:23:71:14:8d:5e:3e:7a:75:3b:1a:
0d:31:b7:e0:e7:38:88:02:b3:61:86:f5:95:90:ba:4d:89:f9:
1f:eb:52:69:bc:5e:98:54:e0:8e:fa:f6:96:df:2c:10:45:09:
18:f3:4b:2d:6e:d9:d7:2b:df:2f:26:92:da:6e:9f:73:0c:0e:
8d:ba:ba:73:6b:57:41:aa:04:ef:8c:df:3d:93:8b:8f:6b:d0:
59:85:8d:9f:cb:68:4f:00:a6:16:7f:72:01:70:31:cd:f7:a4:
9f:f2:a0:d2:2c:3b:9e:72:ef:bc:09:55:e6:3a:17:85:4e:85:
16:51:43:b6:8a:69:39:7d:d4:0d:b6:63:1c:12:35:bf:28:5a:
df:c9:d0:85:1b:63:ad:a0:e1:b9:6e:1b:0a:20:10:9b:5f:5d:
84:e9:3c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:10:50 2025 by rpki-client