Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
File: 8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft (raw, json)
Hash identifier: ZS1AtNWlxv4eg/+DouoGHtUUSOp/HovVr87+lzdBNj4=
Subject key identifier: 24:39:97:9A:F1:B0:D2:54:72:2C:61:37:A1:93:23:DE:B1:A9:3B:44
Authority key identifier: F0:C1:57:89:59:61:BC:4F:84:C0:28:7B:29:9B:BE:1F:8A:A5:F6:1A
Certificate issuer: /CN=f0c157895961bc4f84c0287b299bbe1f8aa5f61a
Certificate serial: 0198F357AF64BACEF2C2EE4C7036944B3CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
Manifest number: 075F
Signing time: Fri 29 Aug 2025 01:01:06 +0000
Manifest this update: Fri 29 Aug 2025 01:01:06 +0000
Manifest next update: Sat 30 Aug 2025 01:01:06 +0000
Files and hashes: 1: 8MFXiVlhvE-EwCh7KZu-H4ql9ho.crl (hash: 4SqT1HY/rcVYj++MRu98DyXfDP5/8+zeGc+tCUYZsw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f3:57:af:64:ba:ce:f2:c2:ee:4c:70:36:94:4b:3c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c157895961bc4f84c0287b299bbe1f8aa5f61a
Validity
Not Before: Aug 29 01:01:06 2025 GMT
Not After : Aug 30 01:01:06 2025 GMT
Subject: CN=2439979af1b0d254722c6137a19323deb1a93b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:6f:2c:24:4b:57:f4:9e:60:ab:9d:04:0a:
e2:51:00:ff:cb:95:e1:20:6a:2e:e1:c5:45:7f:d7:
d5:c7:1b:dd:45:38:7f:b7:80:61:81:44:4a:1c:43:
d6:3b:34:d7:7c:61:ea:d5:0c:43:ef:37:76:d2:96:
17:f3:9d:6a:ed:7f:9e:9f:6d:62:c0:61:42:c7:07:
61:ab:a0:61:01:0c:e3:56:01:6b:87:fe:fb:de:cf:
1b:a4:63:0e:b1:9e:17:6e:8b:46:44:de:67:72:65:
28:4f:76:5f:68:74:b8:18:5d:9f:d6:42:3d:b9:d6:
12:9f:74:1a:51:ae:76:17:f8:ea:08:dd:52:fe:a7:
31:d8:ab:f1:59:29:f3:30:1d:de:b8:83:f4:b5:27:
1b:49:3b:a6:52:ae:ba:f5:6e:1a:55:d4:0a:f7:6f:
94:e8:fd:5e:2f:e3:e8:22:33:3b:b5:af:ff:cc:3b:
e2:1e:e2:3b:be:14:64:9a:8f:63:42:c4:79:b2:47:
ea:b7:fa:83:bb:c1:70:48:cd:89:ca:13:c6:cb:f8:
3b:61:56:17:d1:3f:f1:50:0d:cd:a8:b6:85:1d:07:
f8:c3:bd:90:3a:af:44:9b:3c:41:b5:c9:70:49:a5:
7f:df:2d:b2:11:97:ef:79:8c:8a:c2:7e:1e:39:2b:
8b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:39:97:9A:F1:B0:D2:54:72:2C:61:37:A1:93:23:DE:B1:A9:3B:44
X509v3 Authority Key Identifier:
keyid:F0:C1:57:89:59:61:BC:4F:84:C0:28:7B:29:9B:BE:1F:8A:A5:F6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:90:0b:0a:8d:be:40:11:82:ef:4c:6c:2f:db:f0:51:4b:eb:
62:98:db:99:fc:69:bc:94:37:3f:85:b3:03:14:a4:db:01:1e:
75:17:b3:34:81:05:f3:8e:75:e0:72:b4:a6:e6:50:df:87:b3:
54:e7:5b:ba:9e:d9:4e:8f:c5:68:71:c2:90:89:27:b6:6e:2a:
a7:41:12:73:1f:10:68:c5:86:6d:e2:c3:1d:0e:4a:b4:e9:87:
89:d4:db:46:be:b3:0a:32:28:1e:bf:64:8f:6a:83:6f:3b:c8:
ea:52:56:ea:e5:64:a1:3f:b6:cd:63:e8:8f:b8:7c:94:e9:83:
47:4b:32:46:a1:4b:a0:f9:7a:9f:61:97:e0:b8:da:34:a3:be:
5b:ef:5b:b9:4f:e7:f5:d4:09:28:0d:f6:b8:eb:b7:9f:fb:f8:
ee:57:ee:8b:d1:2e:7e:0c:dd:8e:2c:30:bc:6b:a2:c1:ef:42:
f9:0e:29:87:7a:d7:38:bc:bc:b6:ae:d7:2d:e4:4a:eb:1f:be:
c7:6b:8c:75:80:1e:da:ee:96:c5:7a:c4:06:81:66:87:27:59:
01:f2:1a:74:dd:f6:fb:c5:bf:cb:cf:b0:a1:17:d5:ca:93:21:
c9:ae:0c:24:94:d2:57:42:d1:df:a1:61:1c:68:1c:45:e2:ac:
a0:33:c2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:25:14 2025 by rpki-client