Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.mft
File: MJKxFwYvYGX6oc39OJFeS7nJJLs.mft (raw, json)
Hash identifier: ZMol97LPYUuF2lP75vcImEBgXaMnhMQJN6+f5gSFS1o=
Subject key identifier: 07:B4:7F:44:74:F9:AE:70:27:9B:FC:D6:C1:72:2F:36:BA:80:02:6D
Authority key identifier: 30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
Certificate issuer: /CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Certificate serial: 01954032EF888BE0CB3A932839B9239A277F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.mft
Manifest number: 0F4F
Signing time: Wed 26 Feb 2025 03:00:34 +0000
Manifest this update: Wed 26 Feb 2025 03:00:34 +0000
Manifest next update: Thu 27 Feb 2025 03:00:34 +0000
Files and hashes: 1: Df2biRKzI0GRqVwee9geZJPoqNE.roa (hash: niRdMj+wofGmmTCaPQzwp4KH6uD8D+ovTgho72qJUvQ=)
2: MJKxFwYvYGX6oc39OJFeS7nJJLs.crl (hash: oWNKL9GGC2X2CXcDLVzjvVJYHzUJBcFgloyo+IODFXI=)
3: dItGQTbmGZEaYwBU9Yq4YOVLqSI.roa (hash: szU14ZY7TnY09k1Q8QSiZL5j1zx2tfwKt9z7Z7fdfRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:40:32:ef:88:8b:e0:cb:3a:93:28:39:b9:23:9a:27:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Validity
Not Before: Feb 26 03:00:34 2025 GMT
Not After : Feb 27 03:00:34 2025 GMT
Subject: CN=07b47f4474f9ae70279bfcd6c1722f36ba80026d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:8c:5c:a8:4d:8c:26:d9:c7:86:b1:48:2f:
8a:58:fe:42:3b:f1:0f:ea:44:9d:05:32:19:19:f1:
76:48:a5:5d:09:88:16:e6:58:b3:4a:1b:f6:78:03:
ca:c4:98:33:8f:85:6d:74:90:5e:b9:80:0a:98:86:
f0:36:28:6c:fc:5b:b8:97:8e:52:e6:ba:be:46:c1:
37:eb:ec:1b:7a:a7:ab:21:21:55:03:dd:5e:c9:55:
03:37:8c:0d:9e:43:20:c2:d6:b6:e5:11:c8:4c:c5:
87:6b:ff:0c:e1:dc:e7:29:b2:61:bb:05:51:0d:c1:
74:b6:6b:50:08:8e:ad:8f:2f:19:8d:14:15:7b:3b:
c2:c1:cf:b0:56:aa:6e:18:a9:2c:3d:0c:48:51:c7:
18:55:d6:da:9b:f8:ba:0c:38:aa:26:52:04:47:95:
06:33:3b:48:9c:c1:b6:18:d1:3b:81:22:4e:ee:49:
03:02:80:6d:66:17:02:be:13:31:0e:4d:27:95:fb:
90:8c:de:8d:58:50:55:09:eb:fa:df:76:4c:e6:03:
da:a6:3f:28:84:2a:c3:c0:c0:e8:c8:39:82:57:79:
1d:31:6c:a0:75:90:d6:53:c7:28:42:df:51:96:9a:
e8:6b:1c:1d:57:56:ec:6c:db:bc:1f:8d:05:7f:71:
1d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B4:7F:44:74:F9:AE:70:27:9B:FC:D6:C1:72:2F:36:BA:80:02:6D
X509v3 Authority Key Identifier:
keyid:30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:54:44:73:96:e7:06:08:f0:47:ee:c8:dd:8f:d1:2e:be:6d:
b5:6a:29:11:96:ed:a7:49:d1:e8:5e:30:b0:19:c0:84:36:d6:
8e:ea:2f:92:65:10:0d:a8:60:09:1d:bb:c5:21:c8:54:bf:c3:
db:6c:ca:70:a0:49:a2:1a:e1:ce:66:85:a5:9e:42:79:52:35:
95:04:3d:eb:28:29:69:16:b1:1a:f2:76:97:f8:40:0a:8d:c1:
c6:d3:aa:f6:0b:80:c9:ea:47:a0:fb:2b:6a:5c:23:1a:4f:57:
a2:98:cf:34:87:fb:05:62:00:ff:b7:9d:30:ee:3f:b6:78:7b:
9f:9d:a5:10:20:42:63:33:32:c9:19:e4:2b:d2:a7:61:ca:e8:
05:56:dd:83:38:49:e1:f3:30:b6:2e:99:60:21:e4:96:97:aa:
d9:a2:b5:f3:b0:25:38:35:7d:cc:da:cd:a8:b5:f5:e5:37:fb:
35:ba:b4:fa:b3:c1:0e:cb:21:b0:da:ac:a7:16:4f:15:37:a4:
7f:ef:de:52:3c:52:cb:9b:47:c4:c8:90:f7:70:af:32:1a:da:
20:e0:72:8c:d3:f0:c5:a7:68:dc:78:74:62:0d:da:2d:46:6b:
06:de:96:34:c3:32:29:01:63:4e:bc:fa:c7:2c:c4:ab:b3:78:
65:e7:dc:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVAMu+Ii+DLOpMoObkjmid/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwOTJiMTE3MDYyZjYwNjVmYWExY2RmZDM4OTE1ZTRiYjlj
OTI0YmIwHhcNMjUwMjI2MDMwMDM0WhcNMjUwMjI3MDMwMDM0WjAzMTEwLwYDVQQD
EygwN2I0N2Y0NDc0ZjlhZTcwMjc5YmZjZDZjMTcyMmYzNmJhODAwMjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfCMXKhNjCbZx4axSC+KWP5CO/EP
6kSdBTIZGfF2SKVdCYgW5lizShv2eAPKxJgzj4VtdJBeuYAKmIbwNihs/Fu4l45S
5rq+RsE36+wbeqerISFVA91eyVUDN4wNnkMgwta25RHITMWHa/8M4dznKbJhuwVR
DcF0tmtQCI6tjy8ZjRQVezvCwc+wVqpuGKksPQxIUccYVdbam/i6DDiqJlIER5UG
MztInMG2GNE7gSJO7kkDAoBtZhcCvhMxDk0nlfuQjN6NWFBVCev633ZM5gPapj8o
hCrDwMDoyDmCV3kdMWygdZDWU8coQt9RlproaxwdV1bsbNu8H40Ff3EdpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAe0f0R0+a5wJ5v81sFyLza6gAJtMB8GA1UdIwQY
MBaAFDCSsRcGL2Bl+qHN/TiRXku5ySS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUpLeEZ3WXZZR1g2b2MzOU9KRmVTN25KSkxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lNzRiODEtNWZmNy00ODIzLTkyNjct
MGQzZTY2MmIwZWUwLzEvTUpLeEZ3WXZZR1g2b2MzOU9KRmVTN25KSkxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lNzRiODEtNWZmNy00ODIzLTkyNjctMGQzZTY2MmIwZWUw
LzEvTUpLeEZ3WXZZR1g2b2MzOU9KRmVTN25KSkxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlREc5bn
BgjwR+7I3Y/RLr5ttWopEZbtp0nR6F4wsBnAhDbWjuovkmUQDahgCR27xSHIVL/D
22zKcKBJohrhzmaFpZ5CeVI1lQQ96ygpaRaxGvJ2l/hACo3BxtOq9guAyepHoPsr
alwjGk9XopjPNIf7BWIA/7edMO4/tnh7n52lECBCYzMyyRnkK9KnYcroBVbdgzhJ
4fMwti6ZYCHklpeq2aK187AlODV9zNrNqLX15Tf7Nbq0+rPBDsshsNqspxZPFTek
f+/eUjxSy5tHxMiQ93CvMhraIOByjNPwxado3Hh0Yg3aLUZrBt6WNMMyKQFjTrz6
xyzEq7N4Zefc4w==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:07:06 2025 by rpki-client