Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
File: SEpnLpkiPCcMFLXib_82qLzOTPI.mft (raw, json)
Hash identifier: 2+dHbDeYstO+zfo/PhByr7RTaOVJaVkgfIPCtP4PZeo=
Subject key identifier: D2:C4:81:67:E6:7A:ED:75:A2:21:4A:1E:7C:BD:0E:AE:8C:47:61:D9
Authority key identifier: 48:4A:67:2E:99:22:3C:27:0C:14:B5:E2:6F:FF:36:A8:BC:CE:4C:F2
Certificate issuer: /CN=484a672e99223c270c14b5e26fff36a8bcce4cf2
Certificate serial: 019787347A793BBBDA984587689DA8D1B86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEpnLpkiPCcMFLXib_82qLzOTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
Manifest number: 159A
Signing time: Thu 19 Jun 2025 08:00:52 +0000
Manifest this update: Thu 19 Jun 2025 08:00:52 +0000
Manifest next update: Fri 20 Jun 2025 08:00:52 +0000
Files and hashes: 1: SEpnLpkiPCcMFLXib_82qLzOTPI.crl (hash: seHwyfmiMNrLiHOKqZMDEmTHd6l6r3KpxOCkHhqAB2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:34:7a:79:3b:bb:da:98:45:87:68:9d:a8:d1:b8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484a672e99223c270c14b5e26fff36a8bcce4cf2
Validity
Not Before: Jun 19 08:00:52 2025 GMT
Not After : Jun 20 08:00:52 2025 GMT
Subject: CN=d2c48167e67aed75a2214a1e7cbd0eae8c4761d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:10:e2:b9:d5:38:01:e6:d5:59:3f:22:b6:
a6:7c:be:26:6f:fc:5f:00:a0:46:1e:d5:1f:30:fe:
35:aa:a5:ac:0c:45:5e:be:6e:26:93:6b:14:c6:27:
96:05:16:17:11:91:cd:bb:f9:e7:22:a5:c3:1c:42:
66:a9:e9:ce:b3:03:6b:a9:1f:d9:cf:e2:a0:65:73:
7f:f1:d9:2b:43:76:7d:71:0b:22:e2:a3:f8:19:e3:
00:82:0c:bd:a8:c6:16:45:a6:e7:f2:4d:98:5e:09:
78:8a:e6:e9:a0:2f:d4:23:a1:c0:52:64:bf:4c:16:
c8:32:c7:69:70:73:a8:93:cd:a2:3a:69:2e:46:46:
4d:0f:cd:5a:45:56:19:9b:4a:45:20:88:0a:fc:7e:
e2:0e:d9:c6:26:fb:93:e7:69:f9:b2:f9:64:aa:23:
99:01:b8:ff:dc:e5:21:20:8f:ea:a8:7e:84:1e:31:
84:18:01:b1:ba:96:1a:37:16:e4:77:5a:09:db:74:
66:f7:c7:36:4d:c1:63:4d:3c:3c:72:6f:12:13:4b:
c6:8c:c2:6d:ea:e6:38:e1:e9:8c:81:12:d2:76:0a:
83:74:ba:3e:d8:0f:79:6f:4e:15:66:10:a5:31:cf:
6e:20:4b:de:b2:f1:b8:e8:cd:de:4d:b3:39:25:1b:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C4:81:67:E6:7A:ED:75:A2:21:4A:1E:7C:BD:0E:AE:8C:47:61:D9
X509v3 Authority Key Identifier:
keyid:48:4A:67:2E:99:22:3C:27:0C:14:B5:E2:6F:FF:36:A8:BC:CE:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEpnLpkiPCcMFLXib_82qLzOTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fd:b3:3b:9d:c4:84:90:54:d5:60:3d:89:9b:7e:6e:c8:e1:
07:ae:ea:dd:28:77:29:1f:d9:62:7a:22:de:f3:b0:27:48:3a:
98:3f:8c:3e:0f:f0:e5:80:bb:38:82:d7:1e:2c:47:e4:77:3e:
5b:36:6c:ac:f7:fa:e8:b9:b7:fb:31:bd:5b:54:1b:06:cf:8e:
eb:de:cf:a0:b4:97:de:4b:a4:e3:8d:92:49:0b:83:f9:b6:02:
db:f7:9e:b9:cb:75:be:08:56:fc:2a:f1:04:33:4f:18:c8:f1:
e9:c0:98:92:a6:0d:06:e3:42:11:fd:21:df:ce:6f:ed:5e:de:
54:17:70:d8:31:7a:04:a2:fc:5d:69:0a:04:53:b8:91:35:60:
61:b1:7f:d0:91:83:89:d6:ad:8f:e1:36:0f:a2:8a:93:72:1c:
77:c0:09:95:57:9a:bb:8d:b8:8c:48:c8:af:a9:aa:1d:94:dc:
80:12:21:f8:cf:15:dd:62:cd:38:9e:49:46:9a:93:e1:a4:2e:
40:38:32:01:0e:7c:1b:51:5f:92:47:c4:29:d9:e3:b0:73:78:
49:86:99:0d:fc:86:ae:c8:8d:6b:f7:2f:04:6e:c3:85:01:57:
b2:76:75:c4:90:d2:f0:36:91:0d:13:c3:28:c3:bf:58:40:8b:
70:7d:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:01 2025 by rpki-client