Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfd4b6ad-2f44-44b2-b49e-a2daccbb88ed/0/7319A4DC896D25CD2DB67222D753A73E08F0155C.mft
File: 7319A4DC896D25CD2DB67222D753A73E08F0155C.mft (raw, json)
Hash identifier: /gsSilb/XEl/Df7IDQqiAz4DHbW/He0vSwGFaE6ok54=
Subject key identifier: 17:FF:E7:38:A6:E7:A3:F1:61:6E:C4:C1:1E:A7:46:B6:2F:69:58:9D
Authority key identifier: 73:19:A4:DC:89:6D:25:CD:2D:B6:72:22:D7:53:A7:3E:08:F0:15:5C
Certificate issuer: /CN=7319a4dc896d25cd2db67222d753a73e08f0155c
Certificate serial: 6B719DD4AEED2A97871CA9B0E4F1627AA3FFDCDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxmk3IltJc0ttnIi11OnPgjwFVw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bfd4b6ad-2f44-44b2-b49e-a2daccbb88ed/0/7319A4DC896D25CD2DB67222D753A73E08F0155C.mft
Manifest number: 03
Signing time: Mon 01 Sep 2025 06:06:09 +0000
Manifest this update: Mon 01 Sep 2025 06:01:09 +0000
Manifest next update: Tue 02 Sep 2025 06:57:09 +0000
Files and hashes: 1: AS208824.asa (hash: 1UZXBeckVVx+lov/nc/bkqyvYeE4hZLI7NQFtTiMtN4=)
2: 7319A4DC896D25CD2DB67222D753A73E08F0155C.crl (hash: JkaV7kY733KtemujAuFAGq+8WnOZ9l/CSNa8rV//9U0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:71:9d:d4:ae:ed:2a:97:87:1c:a9:b0:e4:f1:62:7a:a3:ff:dc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319a4dc896d25cd2db67222d753a73e08f0155c
Validity
Not Before: Sep 1 06:01:09 2025 GMT
Not After : Sep 2 06:57:09 2025 GMT
Subject: CN=17FFE738A6E7A3F1616EC4C11EA746B62F69589D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:81:61:2b:a4:ee:f3:5b:c7:92:26:64:be:a4:
3e:79:46:de:bf:25:2e:c5:96:03:58:3c:ee:cd:94:
0a:19:1a:71:a6:78:06:2a:47:34:28:a4:77:dd:8c:
cb:28:cd:28:e4:b3:7c:50:74:f6:59:07:0d:4b:6f:
09:28:37:93:8a:83:5c:c1:3b:a0:c2:eb:3d:9d:4f:
07:b2:a4:fe:d7:60:a2:ba:4f:81:e5:d2:80:26:76:
7c:73:20:6f:12:bd:d1:0a:ba:c3:fc:a2:76:e4:04:
f7:d3:df:46:38:a5:5b:3b:ef:15:11:6b:86:ca:75:
77:c5:da:de:8b:ed:b2:2f:91:ab:88:8d:67:22:bf:
11:42:37:61:79:f7:7f:e9:a0:56:e9:94:48:e3:2f:
a8:0c:66:46:f0:2b:34:11:47:b5:a4:7e:c8:f1:b1:
83:bb:83:e5:42:0c:15:e6:b1:35:14:9d:33:dd:59:
c3:fc:f6:4c:70:e9:ff:f0:41:cb:03:cc:96:3f:ab:
63:81:7b:30:2b:25:f4:4b:d8:54:19:b3:a1:95:f5:
b9:1b:4b:92:8d:cd:7b:7e:01:bf:1a:d6:5a:1e:84:
f3:79:1a:11:0e:4d:f5:03:5c:81:90:d5:4e:ac:99:
6e:6c:e0:24:8c:a6:0d:cc:16:40:bd:72:8b:34:0d:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:E7:38:A6:E7:A3:F1:61:6E:C4:C1:1E:A7:46:B6:2F:69:58:9D
X509v3 Authority Key Identifier:
keyid:73:19:A4:DC:89:6D:25:CD:2D:B6:72:22:D7:53:A7:3E:08:F0:15:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bfd4b6ad-2f44-44b2-b49e-a2daccbb88ed/0/7319A4DC896D25CD2DB67222D753A73E08F0155C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxmk3IltJc0ttnIi11OnPgjwFVw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfd4b6ad-2f44-44b2-b49e-a2daccbb88ed/0/7319A4DC896D25CD2DB67222D753A73E08F0155C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:21:7b:71:41:4a:90:cc:e5:a7:57:42:f8:bd:b8:e2:d1:be:
47:6e:e2:5a:e1:74:23:f5:c9:89:84:ee:8b:0d:32:18:8b:91:
ba:ec:70:66:30:cd:37:39:07:67:e6:f7:df:bb:73:65:bb:cb:
07:93:19:17:45:1a:78:70:8b:3b:23:e8:cd:b5:53:43:59:a9:
fe:9d:39:be:4f:d9:4a:83:76:80:6d:5a:74:6c:0e:e8:ec:d3:
d7:b8:8e:b2:0b:23:cc:78:e9:6a:1b:0f:7a:68:03:11:ea:07:
95:0b:bc:61:88:17:84:32:ab:e7:95:85:77:dd:91:51:94:72:
23:55:e0:f2:ca:4b:fc:7b:cb:11:61:e6:f6:ab:b4:ef:ba:34:
19:16:47:35:d1:3c:04:65:4e:16:73:77:63:cb:4a:4d:ff:b7:
f0:7b:65:1c:11:72:e2:37:68:7c:f6:db:01:be:40:ba:3a:c8:
8a:e1:f1:15:f5:87:d9:39:61:0a:72:19:0e:32:b5:5f:4d:e7:
b8:2c:fa:36:97:32:46:d0:9b:f3:4e:12:ef:8c:59:7a:26:44:
9b:17:85:5e:b4:aa:de:39:5e:6d:4a:a0:4c:b9:e9:6a:0a:47:
4d:8c:39:ca:7a:2a:67:9e:bc:e6:51:55:75:38:1c:c9:33:82:
39:a3:e2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:23 2025 by rpki-client