Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.mft
File: _u-XLlu2tt8FUhC0sD8HdImK7LM.mft (raw, json)
Hash identifier: 4CgSmN89kBp11ujll04TL4MZQFsAPsFenogFKdQcAw8=
Subject key identifier: 49:C8:89:AB:56:B9:46:3C:FE:98:7A:8E:EB:1E:D3:90:F0:33:37:91
Authority key identifier: FE:EF:97:2E:5B:B6:B6:DF:05:52:10:B4:B0:3F:07:74:89:8A:EC:B3
Certificate issuer: /CN=feef972e5bb6b6df055210b4b03f0774898aecb3
Certificate serial: 0195C6BD92AE31A14D7EC486CC126BE0831B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u-XLlu2tt8FUhC0sD8HdImK7LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.mft
Manifest number: 03AE
Signing time: Mon 24 Mar 2025 06:01:07 +0000
Manifest this update: Mon 24 Mar 2025 06:01:07 +0000
Manifest next update: Tue 25 Mar 2025 06:01:07 +0000
Files and hashes: 1: _u-XLlu2tt8FUhC0sD8HdImK7LM.crl (hash: ZFbMzAfYrpcQmEGUmrVl26GfdcoMuPrcddOclpQLZ/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:bd:92:ae:31:a1:4d:7e:c4:86:cc:12:6b:e0:83:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feef972e5bb6b6df055210b4b03f0774898aecb3
Validity
Not Before: Mar 24 06:01:07 2025 GMT
Not After : Mar 25 06:01:07 2025 GMT
Subject: CN=49c889ab56b9463cfe987a8eeb1ed390f0333791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:db:6f:e1:64:2b:bc:87:3b:b7:60:92:dc:
98:0b:c7:00:13:cf:bf:a0:c5:ee:5b:34:eb:b6:2f:
de:ad:10:09:b3:fd:11:f3:2d:17:96:df:11:c4:e9:
99:d3:23:06:fb:6c:8f:09:b9:f3:cc:ca:0e:08:94:
22:03:ae:fb:ed:bf:8d:68:00:8c:a5:13:91:02:d3:
5c:bc:2a:d3:2c:fc:f4:95:21:c6:c3:83:12:bd:31:
17:8e:4c:22:51:d8:fd:de:06:f7:57:a3:91:3f:6f:
bf:dc:30:da:9c:c4:8f:ab:ee:51:d1:71:8c:14:0e:
fc:0f:29:8b:ca:79:3e:f9:03:ad:99:ed:91:6b:d1:
3a:b6:22:94:1b:53:10:92:7b:02:ad:c2:fc:09:43:
68:75:85:94:f7:93:62:6c:0c:1a:29:6c:e8:b4:d2:
06:3c:b8:8c:58:da:a6:8d:4c:9d:04:5a:6b:a2:cd:
80:06:5e:2c:04:fd:07:a4:f5:91:06:c7:7e:2e:5f:
21:96:a4:e4:1b:d1:19:ef:c0:06:c2:59:22:70:fd:
0e:99:7f:68:32:42:ac:81:69:dc:58:14:22:21:ac:
f1:7a:0b:e9:ba:de:27:ae:e9:87:63:92:86:b3:24:
04:d7:59:7e:d3:3d:bb:db:c4:c7:3b:17:01:0b:52:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C8:89:AB:56:B9:46:3C:FE:98:7A:8E:EB:1E:D3:90:F0:33:37:91
X509v3 Authority Key Identifier:
keyid:FE:EF:97:2E:5B:B6:B6:DF:05:52:10:B4:B0:3F:07:74:89:8A:EC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u-XLlu2tt8FUhC0sD8HdImK7LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:91:cb:ea:f9:f9:24:cf:0f:e2:0e:42:f1:c4:23:de:ab:a7:
59:df:93:2e:26:a9:f7:a7:a2:4e:f1:c2:1a:7e:9c:e1:58:08:
60:18:2c:21:0b:43:e9:56:b3:72:ca:b8:76:9c:55:41:30:78:
31:aa:35:2c:4a:a5:1a:4d:a2:45:fd:54:06:66:58:7a:96:ac:
04:f4:c2:65:6b:d2:21:35:9a:ef:0d:1f:6f:06:41:13:89:6e:
1a:93:52:e7:fc:a7:77:34:54:d3:66:3e:ab:82:ca:65:89:f4:
40:37:11:0d:04:83:52:54:8b:36:48:34:26:e9:74:4e:93:12:
19:7a:fd:2b:00:4d:44:74:a9:d0:50:68:89:d8:5d:af:52:e6:
87:e6:78:6b:84:eb:a5:11:5a:da:7c:8f:84:25:97:b7:3b:5f:
d6:df:b0:3d:e9:05:0a:aa:20:9f:f1:13:bf:64:c1:37:e7:e8:
b4:70:e7:75:b0:6c:eb:b1:73:5f:ab:df:13:d6:aa:f3:4c:29:
3c:78:85:42:67:e0:1b:38:f5:73:31:1f:64:be:88:e9:f0:f7:
16:28:74:01:69:aa:2a:58:d1:6f:19:94:1f:67:88:24:04:04:
4c:f0:aa:6b:6d:25:76:a8:47:ee:48:be:7b:61:a5:d4:32:f0:
0e:70:0f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:10:03 2025 by rpki-client