Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft
File: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft (raw, json)
Hash identifier: lCB9pRcVqqRCbro3Cf1V6QyGUZzqhpI8VHOfyf32PQI=
Subject key identifier: 14:1C:DF:A5:1E:AE:C1:93:6B:53:FF:60:61:20:48:F9:98:B1:24:F1
Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B
Certificate issuer: /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B
Certificate serial: 4190D2A764AF287AE8824178624C39FF2CB36F20
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft
Manifest number: C7
Signing time: Wed 03 Sep 2025 04:24:45 +0000
Manifest this update: Wed 03 Sep 2025 04:19:45 +0000
Manifest next update: Thu 04 Sep 2025 08:17:45 +0000
Files and hashes: 1: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: CPLOajH+w286G+wKIl8yAgvbHEMrq4vLK7hbXUBSbrM=)
2: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: v+wGdsPoD53cB+FPJFplibwWU1IDMTKf0BLLWvOrDJw=)
3: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl (hash: 2wFKQSuVSnsuIY59+gSaLVHcYF6iMQcFiO4cLE34ju8=)
4: 326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa (hash: bkcmt94VX2qT5AatBWPB20wqy19gXukXDxeJ3DXH2P8=)
5: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: hrByc0YcQ234/x8UEtDNAf8Sm6LTul06kkE34/Fodlo=)
6: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: P72fY8g2wKghQonr1ZCiQ1/0HQ3pwy8QphUMcE76MXQ=)
7: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: Vs7Q5KU9koM9GeO4e0pzIZd/B9BJX1MGwWzBfnT0lFM=)
8: 326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa (hash: vaAEu3pMRFdmKcI/nWa8WyzQWeHMb/mh9I6YRbEX9FY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:90:d2:a7:64:af:28:7a:e8:82:41:78:62:4c:39:ff:2c:b3:6f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B
Validity
Not Before: Sep 3 04:19:45 2025 GMT
Not After : Sep 4 08:17:45 2025 GMT
Subject: CN=141CDFA51EAEC1936B53FF60612048F998B124F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d2:c5:aa:85:98:8c:ee:e7:ae:f3:f3:63:52:
18:b3:20:c2:0d:22:19:c4:69:0b:17:48:82:32:1e:
e1:f5:fb:24:e1:c0:38:c2:4d:7a:ac:bc:fd:df:5b:
cf:37:b8:78:99:d4:22:b5:b7:59:0c:71:b3:2f:b0:
a3:6f:f6:d2:c0:dc:6f:68:65:11:eb:95:aa:37:88:
5e:d1:ba:81:c3:18:f7:66:fb:38:cf:f7:be:a7:ac:
62:68:da:fd:38:b9:c6:db:a5:0e:fa:81:ca:83:85:
8d:34:66:4f:66:dd:46:90:58:07:22:af:cf:12:12:
fc:f3:3b:b4:88:64:78:87:90:3e:52:2c:cc:59:c4:
80:e4:f6:04:15:01:f8:a4:60:72:1c:cb:66:03:0b:
d0:b5:b9:3c:8c:9d:5e:53:89:72:e5:17:d6:d0:73:
50:80:9a:06:d3:54:d8:2a:a9:7c:f0:90:d7:de:1a:
ad:2f:44:ae:51:a9:90:29:34:20:be:21:09:a0:f0:
17:ea:94:10:c1:91:b7:14:a9:85:a4:15:5a:44:32:
37:78:a3:da:8a:2f:bf:a9:56:d4:c4:1d:17:ab:c2:
70:6a:bd:a9:7e:9a:06:3f:b8:40:63:3c:13:ed:9d:
2e:66:a0:b2:75:0e:23:f9:76:aa:35:f0:c0:d9:1c:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1C:DF:A5:1E:AE:C1:93:6B:53:FF:60:61:20:48:F9:98:B1:24:F1
X509v3 Authority Key Identifier:
keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3e:31:3d:42:05:18:ee:71:e5:33:d4:a5:75:c9:2c:aa:41:
4e:e5:92:21:75:83:e0:d7:0d:a7:78:48:9f:40:e5:7f:d4:e5:
47:88:19:21:4e:b4:8a:f2:09:71:10:b8:f2:52:35:b0:ba:8c:
f2:9e:3c:b4:c3:30:5b:47:1e:ad:97:63:94:06:6a:db:37:4c:
8f:a2:ef:b2:25:bb:5f:d0:ba:62:ef:4b:7c:cb:c5:f9:d7:65:
9e:ad:90:2e:4c:d7:33:d3:b3:9f:cc:9f:b4:ef:82:ed:ed:0d:
51:a2:de:e0:ef:1e:3b:e8:9b:0a:10:36:43:89:f3:a0:5d:ba:
ed:9c:f0:34:12:9e:a8:be:05:6c:29:c7:77:cb:8f:1d:d1:1b:
6f:95:df:96:18:32:51:ca:4b:63:e5:7b:30:d6:3b:3b:87:01:
90:54:60:85:83:4f:eb:61:89:94:05:98:29:88:7a:ab:16:b7:
eb:51:35:87:4a:b7:f9:ea:6c:ad:06:48:a8:94:53:b1:2f:e8:
f9:6c:a1:2d:5e:7c:a3:46:5a:1a:f5:32:9c:63:64:b4:a1:ac:
23:55:2f:2f:36:d1:f5:52:28:80:df:e8:9d:33:c2:0a:d1:1b:
16:96:92:c9:c1:49:24:de:44:10:e6:07:89:5c:c8:63:99:54:
24:ed:b7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 23:32:28 2025 by rpki-client