Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
File: KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft (raw, json)
Hash identifier: xCdqfsjOPrZnAqnz9rsN5ncuc3Cfkj+nyePAY2LB5Ls=
Subject key identifier: 98:DF:6F:1F:77:25:A3:6D:D4:77:D8:80:E9:09:71:B8:C6:31:3A:BA
Authority key identifier: 2A:02:54:BA:E6:99:A6:C6:FC:B6:7E:E4:BA:3B:01:D0:2F:18:09:9D
Certificate issuer: /CN=2a0254bae699a6c6fcb67ee4ba3b01d02f18099d
Certificate serial: 01979ABAAED5083978F09090F92D2F01BD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
Manifest number: 0C27
Signing time: Mon 23 Jun 2025 03:00:15 +0000
Manifest this update: Mon 23 Jun 2025 03:00:15 +0000
Manifest next update: Tue 24 Jun 2025 03:00:15 +0000
Files and hashes: 1: KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl (hash: VmE/HuGfO2J/4IKtm9OEefeHXwaG4Uq0bLaSf4O8LXU=)
2: ZRzKxy1zMBZAKlirnj9f4gr9p-8.roa (hash: jpk5x0LJxA24GS/spf+1miQnvaNt5hobGzGQml9l9aM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9a:ba:ae:d5:08:39:78:f0:90:90:f9:2d:2f:01:bd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0254bae699a6c6fcb67ee4ba3b01d02f18099d
Validity
Not Before: Jun 23 03:00:15 2025 GMT
Not After : Jun 24 03:00:15 2025 GMT
Subject: CN=98df6f1f7725a36dd477d880e90971b8c6313aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:b9:91:ef:7b:7c:e2:c2:9e:66:97:54:42:
54:c0:44:fa:cf:4e:69:9f:ae:61:f0:82:93:14:66:
95:db:1b:85:89:e2:ad:4a:79:31:3e:39:bc:87:d7:
49:7f:86:f7:a0:4d:d1:fd:75:9a:f2:98:f6:ef:1c:
b7:8c:bd:40:90:54:66:c6:f8:31:f7:d4:60:96:53:
33:76:70:1b:e0:02:ce:27:b7:84:ac:c3:0d:eb:87:
af:f8:da:a1:15:81:ae:ea:79:0d:1a:9e:fd:18:f9:
e1:12:91:ff:a2:af:c6:a8:a0:af:c3:85:5c:b7:45:
cd:ee:98:9d:54:70:3d:f4:33:b2:47:f4:6f:03:8e:
14:db:18:7b:a7:7b:42:b7:a8:e3:d8:0f:26:50:e3:
52:46:c6:b0:a6:c4:f3:18:35:c9:fc:9e:c9:d2:4a:
21:88:43:fa:58:67:c1:d7:7e:c1:8f:17:68:7b:03:
e7:94:9e:5d:6a:f1:e4:f0:2b:ef:e3:9c:d0:a3:d8:
21:f3:e4:49:56:64:f4:7a:8c:15:d3:f9:f3:63:34:
80:d6:eb:f8:e3:07:1e:ce:14:55:69:06:d7:09:21:
5e:30:1c:2a:47:37:bc:b6:2b:2a:a8:f6:15:95:45:
e1:fc:a3:fa:29:b7:36:17:03:73:35:fc:75:58:c8:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DF:6F:1F:77:25:A3:6D:D4:77:D8:80:E9:09:71:B8:C6:31:3A:BA
X509v3 Authority Key Identifier:
keyid:2A:02:54:BA:E6:99:A6:C6:FC:B6:7E:E4:BA:3B:01:D0:2F:18:09:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:14:6c:71:b0:73:8f:7f:85:0b:01:8c:e2:37:11:32:d8:11:
f1:59:7b:e2:78:b8:5e:0b:76:b7:25:53:b1:35:76:fc:ea:28:
2e:34:f4:9d:ce:88:a1:6f:6f:f2:4c:05:dc:8b:9a:56:6d:be:
9a:94:35:66:b8:0b:e5:8c:1e:09:89:03:3d:c7:bc:2a:22:9a:
c5:9f:66:ea:a1:50:8a:c7:36:f4:40:4e:9f:27:c7:df:30:95:
36:a1:6d:af:01:64:e2:43:c6:5f:1d:ce:21:87:a9:72:8b:57:
09:b2:7a:a4:c9:55:62:5d:51:1f:3f:8b:01:87:4e:84:84:06:
ce:24:99:54:9e:67:54:5a:66:e7:32:16:c4:e7:51:63:fc:a3:
0a:b5:d6:9d:04:9e:91:3c:67:b1:bb:24:90:7c:a3:1a:44:a6:
01:05:b3:ca:c2:97:46:87:fe:fc:13:9b:8f:c5:47:73:63:71:
37:fd:97:6c:e2:53:d4:e2:79:d0:ef:33:fd:a4:25:64:f4:ba:
ab:c5:f9:8d:9e:37:1a:13:e7:ae:32:2c:55:2f:7b:4c:4b:69:
5c:74:65:70:b7:ff:ad:30:07:41:0b:74:41:0c:86:0a:27:0f:
ea:cf:16:65:88:81:1d:2a:10:ed:2e:47:35:40:bd:d9:e5:18:
73:e4:cb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 00:08:58 2025 by rpki-client