Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
File: zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft (raw, json)
Hash identifier: 9vSdDp+Yy/gnGBnrnjqB1dHNQrEJvuCmVLdrwpL4AIM=
Subject key identifier: BB:E5:26:7F:1D:BD:02:CC:B2:05:74:00:02:ED:2A:9C:70:D6:7E:BF
Authority key identifier: CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
Certificate issuer: /CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
Certificate serial: 01990414EF301AA8D0CF959B5C03659812DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
Manifest number: 1661
Signing time: Mon 01 Sep 2025 07:01:44 +0000
Manifest this update: Mon 01 Sep 2025 07:01:44 +0000
Manifest next update: Tue 02 Sep 2025 07:01:44 +0000
Files and hashes: 1: WMmVXxLBNxJnZE-IVz74wBzTPGY.roa (hash: 8cKtSjQsmp93ydLLkC85Xv608/v/eBo4I+GY+4AHbek=)
2: zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl (hash: Vpln/wmJiwLpFOg1Li9L7Ty2U788UAsVyzj5lhV3j6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:14:ef:30:1a:a8:d0:cf:95:9b:5c:03:65:98:12:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
Validity
Not Before: Sep 1 07:01:44 2025 GMT
Not After : Sep 2 07:01:44 2025 GMT
Subject: CN=bbe5267f1dbd02ccb205740002ed2a9c70d67ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:e0:0d:81:eb:16:5d:6e:c0:86:5c:3e:e1:
fe:52:76:67:20:c8:fd:32:67:f7:43:61:d2:a6:37:
7e:ce:a1:13:66:c1:c9:72:ac:50:97:6f:ab:2e:72:
c6:5e:4a:ea:f8:6f:77:d7:aa:01:6b:ad:e8:74:20:
52:da:e9:5a:be:e8:b5:47:94:03:f1:b2:c6:b3:25:
df:2d:ba:54:22:63:c6:63:ba:b3:4e:d9:40:11:30:
05:be:82:c8:66:b3:f2:4a:3c:00:b1:33:63:aa:4c:
7f:3c:43:46:c8:3a:52:f2:b6:99:93:f4:83:7f:98:
df:c8:fc:55:2d:23:1f:ac:8f:cb:dc:4d:0c:50:c9:
ab:99:a6:ca:11:ec:8b:4c:cd:f4:b7:76:2d:c3:a2:
83:d4:d0:39:56:1f:47:37:61:24:a7:ef:21:47:b1:
09:17:99:b6:db:a6:14:ad:49:30:46:7b:72:30:f0:
93:1d:12:75:53:24:e3:60:2e:ce:cd:24:0b:1b:e4:
dd:29:29:f5:6d:8f:c9:01:88:a5:00:6c:77:97:48:
c2:09:f2:e9:01:98:25:1d:ee:38:d7:05:eb:38:79:
07:5e:58:e5:49:38:39:79:44:5b:e2:ef:66:9e:c9:
18:0c:79:31:11:e9:8f:4f:3f:90:d1:b5:25:30:52:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E5:26:7F:1D:BD:02:CC:B2:05:74:00:02:ED:2A:9C:70:D6:7E:BF
X509v3 Authority Key Identifier:
keyid:CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e6:f9:a3:70:e2:64:db:45:f8:20:a7:57:54:56:09:07:53:
2e:64:dc:42:0d:f6:31:9b:65:8d:1a:a8:1d:4e:f5:1e:83:16:
66:b8:43:52:90:0e:4b:e8:a2:70:cf:33:8b:59:c6:9f:a2:61:
c0:6b:ae:4b:6a:1b:86:6d:9c:69:6c:93:42:df:44:c6:39:c2:
08:70:4c:37:ae:ea:d7:77:bb:ae:8d:4e:08:95:d9:64:f0:52:
c1:c5:82:03:9c:16:a8:f6:66:14:81:3b:5c:da:5f:33:16:53:
d2:80:93:62:73:fa:aa:03:c4:5a:78:0c:f9:f1:a8:91:0b:05:
70:71:00:89:c1:c8:fe:f6:d6:0a:a1:5e:bb:3b:57:cc:15:db:
4d:cd:0b:46:97:61:5d:65:f2:00:e6:04:90:cb:d2:fc:73:5e:
59:76:4b:d8:ce:28:8c:ab:7b:60:ef:8b:b0:67:63:b2:8d:f3:
9c:b9:b7:d7:5b:f0:1f:cd:4c:1c:62:ef:e8:c7:2b:08:b9:42:
43:36:41:96:1e:97:a9:44:f7:59:0e:05:63:d8:d9:41:6c:ce:
f6:21:80:dc:b5:09:f2:fc:4d:c9:c0:a2:92:7c:0c:9f:29:df:
41:09:56:4d:9c:0a:0a:72:51:db:7a:bf:a9:97:4e:94:aa:ec:
e6:d9:54:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:41:57 2026 by rpki-client