Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
File: 8SRlvSRvIjEc6bBe60n3t5FLKgo.mft (raw, json)
Hash identifier: O/z2buJghN13jGhiFExF3/is61cGmMi5jWaa5obcDME=
Subject key identifier: 46:A8:9E:90:32:E3:7C:74:1F:C6:28:FD:B5:B3:A2:4C:C6:83:35:BC
Authority key identifier: F1:24:65:BD:24:6F:22:31:1C:E9:B0:5E:EB:49:F7:B7:91:4B:2A:0A
Certificate issuer: /CN=f12465bd246f22311ce9b05eeb49f7b7914b2a0a
Certificate serial: 01979A166BDD05AEF16E48995F7E9E721029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SRlvSRvIjEc6bBe60n3t5FLKgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
Manifest number: 15A7
Signing time: Mon 23 Jun 2025 00:00:49 +0000
Manifest this update: Mon 23 Jun 2025 00:00:49 +0000
Manifest next update: Tue 24 Jun 2025 00:00:49 +0000
Files and hashes: 1: 8SRlvSRvIjEc6bBe60n3t5FLKgo.crl (hash: rNO9uc+RfvAGqcJB402kFwUMi+ZmV6EJDChvRRx/sHU=)
2: kWlbajLT3oWxqxE3gffCQHqCWHM.roa (hash: DZ3f9M7b382od72T/F6H5ByHy+dVO8wT6ZXIu3gfGcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9a:16:6b:dd:05:ae:f1:6e:48:99:5f:7e:9e:72:10:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12465bd246f22311ce9b05eeb49f7b7914b2a0a
Validity
Not Before: Jun 23 00:00:49 2025 GMT
Not After : Jun 24 00:00:49 2025 GMT
Subject: CN=46a89e9032e37c741fc628fdb5b3a24cc68335bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:ab:01:03:3c:16:c1:bb:fc:3a:63:6b:f7:
9f:cb:05:01:73:22:b2:85:23:b6:60:97:21:d1:81:
00:5d:ab:2b:17:40:59:7c:6d:81:1f:78:c3:b8:e7:
3b:2c:45:80:78:69:6d:33:51:77:9b:24:91:6d:3d:
6a:23:01:ca:07:50:94:39:22:ba:a5:03:93:1a:e9:
a3:77:3f:d4:86:0d:dd:59:f5:17:7c:5f:58:f2:1c:
0d:d9:1d:64:e5:5b:74:4f:97:64:38:83:5a:e0:ee:
a2:86:9c:35:0b:61:1d:e2:da:e7:0b:e2:23:da:d1:
22:59:4f:8f:87:3d:79:13:28:2e:bb:0d:e9:96:83:
3d:fe:41:6a:ec:a0:95:4b:06:28:0b:d5:c6:9f:95:
31:c4:63:d2:78:2e:52:87:06:15:f5:7c:89:f9:5e:
0d:2a:6e:f0:a1:d2:d8:0c:26:de:04:e9:c7:c8:bd:
55:fc:73:58:e9:61:73:88:12:36:6e:22:6b:9a:79:
ea:a0:e1:66:84:6e:62:01:8d:c7:a2:ef:63:62:a7:
c9:e2:7c:3a:9f:08:48:d5:52:21:20:08:c0:7a:7c:
9a:68:c9:42:cb:d8:d3:d2:e6:93:2b:e6:10:c0:08:
fb:ce:ea:49:1c:e5:d1:47:09:33:29:8b:a2:50:ad:
b8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A8:9E:90:32:E3:7C:74:1F:C6:28:FD:B5:B3:A2:4C:C6:83:35:BC
X509v3 Authority Key Identifier:
keyid:F1:24:65:BD:24:6F:22:31:1C:E9:B0:5E:EB:49:F7:B7:91:4B:2A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SRlvSRvIjEc6bBe60n3t5FLKgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d5:cc:5b:f4:5c:d9:96:d3:d3:a3:e1:22:cb:de:46:23:a8:
68:7c:a2:b6:0d:9c:67:0c:4a:da:f0:4e:67:53:f6:c1:bf:c1:
82:5d:42:6a:de:57:e0:b3:0f:47:69:34:f9:c9:12:04:1a:a2:
db:7e:4d:02:03:c0:fc:d8:ee:8b:ef:71:8d:f4:c2:d9:30:69:
ac:06:3a:37:6f:7e:ad:f6:e1:66:07:55:2f:07:f9:c7:f2:15:
cb:50:6b:e8:33:42:e9:3a:56:04:15:51:be:df:3c:e5:9c:75:
07:d8:a8:b0:85:fc:0c:a8:92:b6:f5:bf:10:d3:cd:2e:e3:94:
56:33:73:38:6d:f6:83:2b:32:d4:c6:72:03:8d:07:4e:1c:77:
71:08:c3:eb:bc:57:77:4c:e9:ee:23:08:3e:8f:54:72:48:48:
04:5c:9d:7d:86:6f:7f:35:41:cd:56:31:28:5f:2f:8d:92:2e:
89:80:8d:2b:fc:ab:96:15:0f:a2:83:23:03:c9:12:ef:be:19:
6c:2d:80:c3:f8:ee:56:e7:20:b9:44:46:4f:8c:af:86:fa:07:
03:3a:ec:2e:8a:50:34:27:88:a3:3b:af:40:09:7b:6a:ce:0f:
3a:7d:36:0b:6b:fa:2a:b6:40:2d:0b:c5:2c:ca:5a:79:d1:9a:
3b:42:b9:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeaFmvdBa7xbkiZX36echApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMjQ2NWJkMjQ2ZjIyMzExY2U5YjA1ZWViNDlmN2I3OTE0
YjJhMGEwHhcNMjUwNjIzMDAwMDQ5WhcNMjUwNjI0MDAwMDQ5WjAzMTEwLwYDVQQD
Eyg0NmE4OWU5MDMyZTM3Yzc0MWZjNjI4ZmRiNWIzYTI0Y2M2ODMzNWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+GrAQM8FsG7/Dpja/efywUBcyKy
hSO2YJch0YEAXasrF0BZfG2BH3jDuOc7LEWAeGltM1F3mySRbT1qIwHKB1CUOSK6
pQOTGumjdz/Uhg3dWfUXfF9Y8hwN2R1k5Vt0T5dkOINa4O6ihpw1C2Ed4trnC+Ij
2tEiWU+Phz15Eyguuw3ploM9/kFq7KCVSwYoC9XGn5UxxGPSeC5ShwYV9XyJ+V4N
Km7wodLYDCbeBOnHyL1V/HNY6WFziBI2biJrmnnqoOFmhG5iAY3Hou9jYqfJ4nw6
nwhI1VIhIAjAenyaaMlCy9jT0uaTK+YQwAj7zupJHOXRRwkzKYuiUK240QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaonpAy43x0H8Yo/bWzokzGgzW8MB8GA1UdIwQY
MBaAFPEkZb0kbyIxHOmwXutJ97eRSyoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFNSbHZTUnZJakVjNmJCZTYwbjN0NUZMS2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NmZhNjgtZjJiMS00YWFmLWI1MGYt
OTFlMjdiOWNmYmE2LzEvOFNSbHZTUnZJakVjNmJCZTYwbjN0NUZMS2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85NmZhNjgtZjJiMS00YWFmLWI1MGYtOTFlMjdiOWNmYmE2
LzEvOFNSbHZTUnZJakVjNmJCZTYwbjN0NUZMS2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtXMW/Rc
2ZbT06PhIsveRiOoaHyitg2cZwxK2vBOZ1P2wb/Bgl1Cat5X4LMPR2k0+ckSBBqi
235NAgPA/Njui+9xjfTC2TBprAY6N29+rfbhZgdVLwf5x/IVy1Br6DNC6TpWBBVR
vt885Zx1B9iosIX8DKiStvW/ENPNLuOUVjNzOG32gysy1MZyA40HThx3cQjD67xX
d0zp7iMIPo9UckhIBFydfYZvfzVBzVYxKF8vjZIuiYCNK/yrlhUPooMjA8kS774Z
bC2Aw/juVucguURGT4yvhvoHAzrsLopQNCeIozuvQAl7as4POn02C2v6KrZALQvF
LMpaedGaO0K5AA==
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:04:33 2025 by rpki-client