Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
File: BU1P54D-RTMHgN627DhMuUk_LfI.mft (raw, json)
Hash identifier: b/Oe6gYJmmflrZbRH5BLHEZ1nwskmxe2XcwO7Nys8tQ=
Subject key identifier: 3A:B1:4F:BE:09:7B:6D:2B:16:42:B4:0D:58:91:5C:6B:CB:FC:52:6A
Authority key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Certificate issuer: /CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Certificate serial: 01985A221AAAAC3D797EA5FD7AA825857263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
Manifest number: 1238
Signing time: Wed 30 Jul 2025 07:00:41 +0000
Manifest this update: Wed 30 Jul 2025 07:00:41 +0000
Manifest next update: Thu 31 Jul 2025 07:00:41 +0000
Files and hashes: 1: BU1P54D-RTMHgN627DhMuUk_LfI.crl (hash: D+tCcch6oTEe7gZiqxZnpJ/c7Tv1BkaSS/K9AFWdeTc=)
2: ka7B1o22nQ899fZrHQAwPaISuMc.roa (hash: YtdRj2DUEOEWo4MtM001iw/fwE9TLkR0g86JFagGliA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:22:1a:aa:ac:3d:79:7e:a5:fd:7a:a8:25:85:72:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Validity
Not Before: Jul 30 07:00:41 2025 GMT
Not After : Jul 31 07:00:41 2025 GMT
Subject: CN=3ab14fbe097b6d2b1642b40d58915c6bcbfc526a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:c5:9a:e4:61:96:3c:32:5a:38:a3:4e:b8:
e8:6b:9a:ed:0c:ef:3d:a1:db:95:9d:f7:29:76:b1:
dc:f3:48:c0:52:25:1f:89:a9:13:72:f8:2a:36:61:
7c:29:fd:7a:77:f1:6e:b6:db:98:d2:0b:66:a5:c0:
bb:8a:d5:12:3a:d3:76:b9:e4:36:a5:57:cc:60:fd:
56:8b:57:43:fa:cc:1b:fe:2f:64:5c:db:2f:86:a9:
fb:bf:79:79:52:b1:56:a0:47:81:93:c0:b7:fd:f5:
ab:59:2a:f2:37:c6:f4:f0:ce:cd:8d:2f:c5:1d:88:
24:6e:f0:28:fd:8c:de:ad:9e:ae:1e:eb:4d:0c:c1:
bc:ed:ee:e0:1b:f0:38:80:b3:43:97:43:0a:a8:4b:
a8:ed:f3:4d:d3:58:50:f4:69:74:c5:a6:af:43:85:
ae:8c:85:e8:65:7f:f1:98:51:95:b5:36:0d:d2:af:
0a:63:68:72:a5:30:14:e2:ca:48:40:3d:1d:28:ae:
43:22:7e:1d:da:7d:64:a7:d3:8d:5f:bb:4f:b6:a7:
b0:fb:b9:96:91:98:2f:ec:5a:9a:84:e5:30:f2:22:
ce:1b:9c:d9:a7:16:f3:64:62:13:55:48:ea:31:1d:
c3:59:0b:af:ad:be:33:a2:63:c1:a3:3c:c3:06:78:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B1:4F:BE:09:7B:6D:2B:16:42:B4:0D:58:91:5C:6B:CB:FC:52:6A
X509v3 Authority Key Identifier:
keyid:05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1d:54:13:8e:eb:54:72:a4:e4:11:49:25:9c:ce:6a:bb:81:
d6:b0:f1:83:9a:58:c0:f2:fb:fb:1d:f7:39:84:ff:9d:8f:43:
61:79:e9:86:8a:bf:d0:bb:48:a0:15:51:49:bc:e9:cb:28:03:
c3:3c:cd:28:b8:5f:d1:2c:9f:9b:17:c8:8e:04:64:98:77:44:
55:a1:c4:74:db:f3:e1:ac:fd:88:7f:e3:c1:39:5b:14:73:56:
29:8f:18:06:87:63:7c:ea:da:a3:9b:9b:c4:79:4e:f2:5e:08:
db:72:c5:33:9d:2a:7d:c8:77:6d:4e:79:1d:84:92:e6:95:e2:
23:d2:03:34:71:79:84:ea:8b:10:ec:d6:02:40:92:cb:cd:26:
71:ab:71:45:a4:a3:77:bf:d4:24:ad:fe:9c:36:71:6c:86:78:
dc:03:e3:01:59:fc:9a:e9:00:74:8d:bb:aa:a6:1a:7e:7c:30:
13:bb:35:52:9f:60:8c:aa:af:4d:09:fc:1b:88:96:53:9d:8e:
48:a2:57:a8:6f:c7:7a:e3:d7:48:8a:b0:be:20:6a:63:5a:a7:
94:df:6a:7f:a3:3c:cf:cc:2b:50:4a:46:2e:ca:00:d7:51:e0:
cf:60:bc:1a:94:a6:84:4e:52:03:c3:d0:9a:c4:65:88:86:45:
63:4a:32:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:07:03 2025 by rpki-client