Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
File: CyKQB_XS3fo_clwPpFLEe22dhU4.mft (raw, json)
Hash identifier: oz6TXRPsP0aXqFp608hxfBW2g1eq28HPFtfhAmYFpPQ=
Subject key identifier: 3F:D8:70:0F:22:90:29:62:AB:C5:09:23:13:DD:FA:98:53:1A:3D:B7
Authority key identifier: 0B:22:90:07:F5:D2:DD:FA:3F:72:5C:0F:A4:52:C4:7B:6D:9D:85:4E
Certificate issuer: /CN=0b229007f5d2ddfa3f725c0fa452c47b6d9d854e
Certificate serial: 0198BB55C63AAFED29D62B1496AB9B45A705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
Manifest number: 0782
Signing time: Mon 18 Aug 2025 04:00:17 +0000
Manifest this update: Mon 18 Aug 2025 04:00:17 +0000
Manifest next update: Tue 19 Aug 2025 04:00:17 +0000
Files and hashes: 1: CyKQB_XS3fo_clwPpFLEe22dhU4.crl (hash: VvNrfhARQoGC9snqGnzfufbuSu3Q8uJLJS8n1Hcabos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bb:55:c6:3a:af:ed:29:d6:2b:14:96:ab:9b:45:a7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b229007f5d2ddfa3f725c0fa452c47b6d9d854e
Validity
Not Before: Aug 18 04:00:17 2025 GMT
Not After : Aug 19 04:00:17 2025 GMT
Subject: CN=3fd8700f22902962abc5092313ddfa98531a3db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:60:de:6d:93:4f:c6:5c:ea:6f:a0:bd:65:e8:
ca:cd:b0:e0:1c:da:d9:06:46:fc:6e:a0:44:df:92:
88:ab:f9:34:f6:9f:b7:53:05:81:07:dd:3a:c6:06:
c5:22:4b:ee:7d:92:95:b6:d0:76:d9:5c:af:de:2a:
62:3d:0d:46:de:b2:c5:f2:c1:42:40:d6:3f:be:df:
fe:e3:b1:60:08:52:61:e6:b7:4a:b8:0e:d4:0c:36:
28:8c:77:77:1b:79:78:db:81:ff:81:a5:71:9d:60:
02:16:38:f3:ee:50:56:92:70:a9:f3:73:10:56:22:
e8:d0:fc:00:76:85:6a:09:d0:45:0a:15:1e:e0:43:
de:fb:2f:17:ba:96:27:39:3d:e5:a1:0f:4f:5f:61:
4f:63:03:3d:30:fc:7b:42:73:fa:ba:92:d9:40:77:
79:27:e8:0d:39:01:cf:ea:26:8e:b8:98:46:80:f4:
30:85:cc:4f:c0:9b:71:70:d7:c5:cd:40:6f:4f:71:
59:94:67:2b:29:60:60:7a:70:24:ff:f0:ab:1a:4d:
00:cb:57:47:b6:2a:97:65:5c:80:ff:74:93:67:1c:
3d:66:e1:9e:a7:58:4d:41:37:e0:cd:9a:a9:04:4f:
3e:9e:3a:3a:42:76:52:d8:86:fb:e3:d8:dc:7b:bc:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D8:70:0F:22:90:29:62:AB:C5:09:23:13:DD:FA:98:53:1A:3D:B7
X509v3 Authority Key Identifier:
keyid:0B:22:90:07:F5:D2:DD:FA:3F:72:5C:0F:A4:52:C4:7B:6D:9D:85:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f3:52:b8:3d:a2:f0:f6:7b:62:a0:15:b9:66:f0:dd:fe:57:
8f:27:ca:7b:69:3f:91:16:9e:4f:92:eb:ab:88:ee:93:9a:c4:
c8:71:45:ec:d7:27:25:61:43:0b:1d:a1:63:68:e6:01:da:fc:
ed:e5:d2:25:f1:f4:88:48:71:7f:5b:ed:f6:20:2d:29:46:cd:
34:7c:6b:1c:6b:40:49:82:7d:2e:2c:62:aa:5c:9a:3b:89:a7:
3e:51:79:2f:a4:62:77:9d:53:97:16:c7:96:09:f4:79:ae:17:
a5:5d:f7:12:24:68:15:97:e5:d4:4e:f9:05:ac:09:27:e3:bc:
a1:0b:41:5f:dc:b0:9f:9c:f1:1c:bb:c1:1b:bd:ec:a0:e4:bb:
3b:7e:5c:8b:28:f9:b9:2f:cf:48:e6:6d:71:51:8c:81:d7:dc:
85:60:4d:ad:07:f5:02:80:4f:78:99:a9:f1:c8:3c:f3:e8:a4:
be:1f:a8:fb:a6:88:b7:f2:48:21:90:57:bd:ea:0b:30:dc:6a:
8d:50:0f:4d:3c:a1:a2:2c:19:79:42:c7:fd:8c:8e:5a:cd:c3:
b4:cf:9d:a9:5d:4a:0e:8f:26:b5:66:e7:a6:1c:06:c0:af:88:
49:9c:cc:a6:21:86:9c:37:3d:c7:76:f9:47:9e:e2:25:c4:8f:
e2:3e:39:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:00:47 2025 by rpki-client