Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
File: 0XSpf-m-DvYs3ln0GppfCZGCkUc.mft (raw, json)
Hash identifier: vGGKMEXmJfYg1ZX73gAYEyJdNzViKV3JJRMUagWIxDE=
Subject key identifier: EC:DC:18:31:31:BD:E9:67:DB:67:C4:67:E6:D3:53:02:DB:11:29:FF
Authority key identifier: D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
Certificate issuer: /CN=d174a97fe9be0ef62cde59f41a9a5f0991829147
Certificate serial: 0195E0B49755192DBB2482397DB1F2DFB7FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
Manifest number: 10AD
Signing time: Sat 29 Mar 2025 07:01:26 +0000
Manifest this update: Sat 29 Mar 2025 07:01:26 +0000
Manifest next update: Sun 30 Mar 2025 07:01:26 +0000
Files and hashes: 1: 0XSpf-m-DvYs3ln0GppfCZGCkUc.crl (hash: /OyFpoU18RyUT9PqB4M2WxRP03vCKSu7nyx0fAEpoOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:97:55:19:2d:bb:24:82:39:7d:b1:f2:df:b7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d174a97fe9be0ef62cde59f41a9a5f0991829147
Validity
Not Before: Mar 29 07:01:26 2025 GMT
Not After : Mar 30 07:01:26 2025 GMT
Subject: CN=ecdc183131bde967db67c467e6d35302db1129ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:d2:70:84:bb:98:6f:96:1a:39:4e:f8:ef:
e7:42:0c:b9:e0:d8:a8:30:c6:2a:b4:df:91:de:2a:
bc:19:0c:5b:31:46:bc:14:67:b6:b0:d1:70:fb:63:
d6:c4:a1:7a:93:02:8e:eb:50:4a:da:5b:4f:7d:5e:
81:78:30:a6:24:42:3f:e9:e9:fc:5e:6e:79:c3:80:
77:77:39:5b:24:16:78:9a:ac:8b:db:96:9d:48:59:
26:01:73:14:65:40:f8:b6:e7:80:28:30:fa:27:0c:
6d:8e:51:23:f4:cf:b3:8e:ba:f4:93:1e:c8:13:4c:
2a:66:51:ef:fb:b3:f5:2c:4c:88:c2:c1:e6:3e:32:
ae:5b:56:8f:0b:bb:f8:ef:64:42:8d:5d:07:36:67:
2e:32:e2:49:ed:2d:ff:09:64:29:12:89:0b:82:ea:
53:26:2c:48:8e:23:0f:31:8f:56:4b:9b:fc:8a:67:
ae:e3:50:ce:a9:19:4c:9e:10:44:38:d3:4a:6c:6e:
30:10:98:4c:6d:c3:35:8f:ea:59:5d:d6:cd:b4:f4:
64:86:91:9a:42:5f:f8:e1:d8:ca:97:83:9f:d1:8a:
3f:53:a4:b5:49:cd:9d:7f:6e:f1:e6:eb:2d:8a:78:
e2:0a:b2:42:51:62:dd:d3:60:9f:e3:20:bf:36:01:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DC:18:31:31:BD:E9:67:DB:67:C4:67:E6:D3:53:02:DB:11:29:FF
X509v3 Authority Key Identifier:
keyid:D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:de:c9:34:b8:80:60:0d:22:09:e6:23:e9:77:bc:a4:af:a1:
58:23:c7:c8:81:99:89:dc:f2:96:65:46:fe:4f:bd:83:39:35:
68:97:3c:8c:4b:e1:0b:dd:d2:3b:a5:d4:07:e7:6a:20:db:4e:
61:0c:3c:81:d2:73:19:6a:04:2a:bd:f2:96:0d:43:6d:25:d7:
21:09:37:cd:f4:58:4c:01:61:82:e0:3e:cc:ef:36:40:f6:a5:
49:39:c4:21:47:c4:fe:94:84:d1:7d:fb:26:0d:54:e3:5b:67:
07:83:ac:82:ba:e0:f8:64:82:01:84:aa:73:81:38:3e:e9:e1:
99:d6:44:b9:2d:86:1e:09:19:64:79:c8:da:60:58:61:23:99:
3d:8a:b1:2c:bd:a9:06:59:13:15:35:3a:98:56:f3:38:14:64:
51:85:9a:63:94:ef:d2:71:ec:e5:fa:d4:14:73:10:05:42:e7:
1e:e8:ab:b3:aa:45:e9:47:14:4e:0e:7a:1d:7b:6d:fd:d9:47:
bc:85:36:ab:b1:d4:48:33:30:20:96:91:8e:cb:21:dc:62:a3:
77:5c:e4:69:99:67:d8:fc:c6:e4:28:1f:e7:54:e0:bb:02:f0:
0f:45:24:5f:fe:8a:62:4b:03:9b:64:4e:10:9a:53:0b:ee:c5:
d6:be:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:09 2025 by rpki-client