Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
File: z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft (raw, json)
Hash identifier: OihZDiYXP9+LStQcwx7By6MHKhyJGdM62G0NUr+F+y8=
Subject key identifier: 94:02:47:E3:EF:BE:1E:FE:B1:F9:CB:21:CB:70:B4:C9:C5:A7:4E:61
Authority key identifier: CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4
Certificate issuer: /CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
Certificate serial: 0197E867F179DBF3AECAC0804DF1320293DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
Manifest number: 02CF
Signing time: Tue 08 Jul 2025 05:00:15 +0000
Manifest this update: Tue 08 Jul 2025 05:00:15 +0000
Manifest next update: Wed 09 Jul 2025 05:00:15 +0000
Files and hashes: 1: z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl (hash: qen5DxCp0zn2aypA6FiYWK1keeY89oz4+OSZQGvTRWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e8:67:f1:79:db:f3:ae:ca:c0:80:4d:f1:32:02:93:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
Validity
Not Before: Jul 8 05:00:15 2025 GMT
Not After : Jul 9 05:00:15 2025 GMT
Subject: CN=940247e3efbe1efeb1f9cb21cb70b4c9c5a74e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:96:b3:13:9f:ab:67:24:1c:8b:bb:ef:11:c0:
01:ae:8b:69:2c:1f:b9:4e:72:47:28:df:75:5a:b1:
f1:99:70:42:4c:2e:32:5d:29:70:b8:01:c5:cf:c4:
86:20:5e:4c:61:9b:00:e2:59:7c:e0:7b:b6:04:89:
0c:67:08:c4:83:ee:0b:fd:1a:32:ab:63:6f:d0:ee:
9d:67:24:54:b3:68:1d:9d:9f:59:50:66:17:1f:c1:
52:20:87:db:98:e1:bb:27:82:37:f9:6f:ed:f4:a3:
bf:84:b0:a1:39:ab:a0:6a:5f:d6:b5:67:c8:29:80:
24:31:6e:87:cb:4d:d7:8a:0c:aa:c6:aa:0b:ee:8e:
8e:46:1b:fd:e2:dc:66:59:63:86:2c:69:f3:cd:61:
0b:f1:33:46:1c:44:4f:f1:0d:5c:6e:82:54:60:ff:
12:cc:16:ca:e4:17:ee:8a:07:68:06:40:f4:e9:c8:
7f:9b:e1:11:67:e4:e3:8c:d8:c0:b3:20:66:a8:28:
3f:eb:2d:8a:44:48:7b:57:c5:a7:f2:ea:25:d6:d7:
18:52:63:40:9f:67:ad:ac:6e:0b:12:d9:dc:a2:cb:
78:69:c6:a0:76:d9:c1:fe:34:5e:68:57:de:6b:89:
4a:66:3e:41:b6:03:fa:79:38:45:be:86:9f:ff:4c:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:47:E3:EF:BE:1E:FE:B1:F9:CB:21:CB:70:B4:C9:C5:A7:4E:61
X509v3 Authority Key Identifier:
keyid:CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e5:66:4f:fd:17:f5:63:5c:80:5f:07:47:c9:ff:0b:62:04:
20:ba:23:43:11:2d:80:25:b3:fe:0c:45:7c:1d:bf:03:a2:98:
88:ac:24:63:13:76:82:9a:b9:d4:85:e0:21:cd:0f:f2:64:8d:
25:b6:5d:7a:b5:1e:f2:b8:5b:c6:ad:e1:c4:e0:18:b9:a7:0c:
45:64:54:81:01:3e:4b:c7:33:dd:a7:e1:a0:09:99:6f:25:5d:
92:a1:94:e1:47:6d:b4:61:1a:43:d6:4b:ec:97:45:ec:43:ce:
d9:f7:38:f8:c6:9d:9e:a6:4f:0f:c1:9d:f4:63:5d:6c:4f:d2:
70:1c:03:a7:98:cf:66:5a:b7:51:c6:5f:46:15:33:4c:43:69:
0e:ab:c5:b1:7e:de:a6:4b:91:1b:b3:cc:12:ba:ad:e6:0f:fb:
72:11:18:3c:f0:f0:98:7d:8c:f8:bb:cf:44:0a:cb:b9:36:83:
fe:58:99:d1:51:69:d7:a6:15:3c:1f:95:ce:ea:ba:de:36:19:
7f:45:1a:61:7e:36:70:c8:fe:0f:b9:72:be:d3:78:25:57:df:
8c:c3:ba:bc:c0:42:65:a9:23:0b:a8:96:5c:e9:89:d1:e6:d7:
f6:25:0b:43:57:5a:b2:a8:5f:9c:79:51:44:91:75:e4:b9:75:
c0:24:02:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:34:07 2025 by rpki-client