Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
File: FW1wMw7FHp_x93J7F4HEenqapW0.mft (raw, json)
Hash identifier: pa2J2p5kefo/VWYZ1tpZ1wsS7xmbQlP7sv1uu88joWk=
Subject key identifier: 7D:A3:44:57:EA:70:4E:C5:89:60:CE:55:EE:A1:35:6A:02:47:98:2E
Authority key identifier: 15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D
Certificate issuer: /CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
Certificate serial: 01989CA6C6325D3B0EA97F6109950F06595D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
Manifest number: 162B
Signing time: Tue 12 Aug 2025 05:00:32 +0000
Manifest this update: Tue 12 Aug 2025 05:00:32 +0000
Manifest next update: Wed 13 Aug 2025 05:00:32 +0000
Files and hashes: 1: FW1wMw7FHp_x93J7F4HEenqapW0.crl (hash: 5J3amg+FGu226rn1cP+fFSr6B0i2wmW8YXKSGqnEqTk=)
2: s3eE-P6KHaZhEFtp-p4OcOMIO5k.roa (hash: M2Uo4Gpb+a0DQhYTKJ2pCUBjR72TE2YaQI7XFu5tfN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:a6:c6:32:5d:3b:0e:a9:7f:61:09:95:0f:06:59:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
Validity
Not Before: Aug 12 05:00:32 2025 GMT
Not After : Aug 13 05:00:32 2025 GMT
Subject: CN=7da34457ea704ec58960ce55eea1356a0247982e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:1a:15:58:de:0f:1c:99:b6:68:82:ea:df:
9d:80:b0:60:d4:d1:04:e1:44:bc:6e:fc:ff:47:46:
b7:6f:8a:dd:ea:73:57:69:a4:29:b0:7a:77:52:c1:
e4:0f:c6:b7:21:c7:1d:e9:df:ed:bb:6b:27:8c:cb:
84:e9:51:8e:fd:ae:0e:f1:cb:f7:8b:6c:f2:35:26:
32:42:f7:49:ff:ad:7b:3a:ad:2e:10:47:14:80:af:
0e:03:34:90:bc:68:90:73:91:bf:4d:0e:9d:c8:01:
b2:e3:48:4f:ae:85:44:f2:de:16:1b:2a:b6:a6:fb:
7d:c9:fc:7a:f3:e7:fd:b4:9e:5c:87:73:c7:ca:de:
66:f9:51:02:f1:ac:83:2a:7c:d5:75:78:43:d4:a6:
d5:12:b8:3e:1a:3b:44:1b:0e:ce:69:49:49:fa:7e:
e0:a3:b5:63:91:85:48:95:bc:e3:c6:b2:3a:89:10:
e0:9a:b3:4b:7f:55:af:a3:b0:65:a5:5d:63:7a:7e:
29:b9:51:fb:bb:2d:8e:0d:79:79:e6:89:17:0a:bd:
77:f4:db:27:ba:83:9e:1a:11:fe:29:88:9f:1e:73:
a4:c6:43:2c:4f:87:ec:12:1d:82:e8:5b:4d:f6:9c:
cc:23:d7:89:f0:2a:80:1e:25:8b:9e:4e:91:b6:76:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A3:44:57:EA:70:4E:C5:89:60:CE:55:EE:A1:35:6A:02:47:98:2E
X509v3 Authority Key Identifier:
keyid:15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b9:53:28:1a:04:cc:2f:ae:fa:5a:da:df:19:1e:b5:40:b5:
51:c1:16:1b:92:b4:dc:26:0f:48:00:21:e7:e5:02:33:a1:56:
41:55:64:30:0a:2d:8d:56:af:14:e4:aa:13:37:57:b9:5c:7b:
ed:4f:ee:5d:2b:8d:33:12:90:7d:74:de:90:6b:ba:3f:b3:8b:
f3:c7:58:bb:dc:30:4e:95:82:23:d0:06:9c:39:3a:a6:fd:92:
95:1f:55:3f:79:6c:4f:f1:34:13:37:6d:1c:17:0d:34:25:52:
ff:26:46:68:a2:4b:33:be:aa:fe:ee:b8:de:4f:fa:be:03:55:
cd:4c:3e:73:0f:77:3f:10:f2:98:53:92:01:83:07:d5:9a:36:
79:26:43:38:ec:15:1f:b3:b5:c3:2c:bc:a6:41:c2:e6:a9:cc:
bf:12:35:2b:8d:7a:ec:0f:fd:5a:1b:1a:e7:94:04:c8:c6:74:
99:b3:c2:9b:65:f5:49:43:18:95:aa:29:54:e5:c7:e7:b4:dd:
95:23:f3:3b:d2:44:d6:b8:8c:2b:23:9d:ac:10:97:76:61:9d:
64:8c:88:b4:71:91:06:56:61:b2:fa:3c:66:9d:4a:11:65:ff:
e7:c1:c4:89:26:d2:75:52:14:c7:a5:e5:0b:59:62:2c:e1:54:
9a:39:4e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:41:34 2025 by rpki-client