Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
File: vDWQTiTbDpkElaNEXnfRE27WGNc.mft (raw, json)
Hash identifier: CGk6LbEQ68pgSmJQeOhf4SQEZgVMpbnqj+wHf9GYl1I=
Subject key identifier: 84:2B:26:3B:59:2F:2F:B0:9D:FE:E5:03:71:2B:49:D0:92:0D:1C:51
Authority key identifier: BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
Certificate issuer: /CN=bc35904e24db0e990495a3445e77d1136ed618d7
Certificate serial: 019804C7A322F175AC5F315ACA1CA00D249A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
Manifest number: 024F
Signing time: Sun 13 Jul 2025 17:14:08 +0000
Manifest this update: Sun 13 Jul 2025 17:14:08 +0000
Manifest next update: Mon 14 Jul 2025 17:14:08 +0000
Files and hashes: 1: vDWQTiTbDpkElaNEXnfRE27WGNc.crl (hash: PasO2wOe7hQL4YjQAZvYOtvPgxJIAE4MYgoxU06+Gok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:04:c7:a3:22:f1:75:ac:5f:31:5a:ca:1c:a0:0d:24:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc35904e24db0e990495a3445e77d1136ed618d7
Validity
Not Before: Jul 13 17:14:08 2025 GMT
Not After : Jul 14 17:14:08 2025 GMT
Subject: CN=842b263b592f2fb09dfee503712b49d0920d1c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:b8:a0:51:08:76:7d:98:2e:48:33:b3:da:
8e:9c:e2:51:c1:27:52:3e:e7:a5:20:48:a9:05:da:
20:c5:ae:eb:47:7f:d0:8f:ec:00:4b:e4:53:98:1e:
ad:0e:c2:c5:32:7a:b6:af:cc:b6:3d:f8:4e:34:35:
36:b6:27:f7:a7:e7:9e:01:1c:4d:74:30:74:e0:55:
8f:6c:f9:db:0a:7c:e5:e7:94:f3:eb:3c:8d:29:af:
cf:5c:c8:8e:c3:7b:bb:48:17:22:46:c6:32:1a:8c:
76:02:d8:db:a1:7e:41:cc:d0:5d:aa:ab:b1:5f:20:
4c:30:35:50:e3:9a:a7:6c:59:b4:60:8d:a6:d4:f3:
2e:e2:ad:df:21:9e:5b:59:9d:86:65:40:70:db:f4:
be:0d:ba:bd:8f:a3:e6:b5:40:31:fd:c0:04:86:56:
a4:08:73:aa:9f:04:ef:dd:d7:3e:0e:f3:26:fd:3c:
67:de:66:ba:cc:c4:6d:3c:3b:d2:58:18:33:5b:b9:
8c:35:b9:39:28:52:38:46:f8:ae:db:2a:6b:cd:ff:
34:a1:94:f7:7d:24:b6:49:b7:89:fd:95:ce:55:19:
ba:75:c4:02:45:54:ca:fe:f8:9e:95:c7:5b:48:19:
5e:00:01:1d:aa:35:0c:dc:98:83:90:54:03:41:ad:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2B:26:3B:59:2F:2F:B0:9D:FE:E5:03:71:2B:49:D0:92:0D:1C:51
X509v3 Authority Key Identifier:
keyid:BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3b:ea:8a:66:32:a5:74:30:ef:2e:09:10:25:f1:d0:a6:b0:
9b:05:82:0d:35:e6:82:89:24:d9:66:fb:f2:1a:4c:7e:b7:f3:
ff:38:2d:bc:d1:f6:10:fe:f0:23:77:dd:9d:b4:e9:76:7b:ea:
ce:81:49:2a:f6:96:51:8e:d4:c5:fd:26:c1:06:ac:a6:f7:05:
bb:3c:71:ce:1e:3c:4f:09:5e:ba:82:e4:e9:1a:4a:62:b7:67:
d1:92:c5:db:9d:5b:8f:91:6c:89:17:ee:cc:3a:35:f5:6d:42:
8a:c6:21:a5:40:1c:a7:96:85:02:ed:bd:4d:5a:d4:c4:2b:4f:
a5:e8:7b:af:24:48:e7:7b:28:11:16:1e:10:5f:b1:9a:12:c0:
ca:7f:09:ad:50:d3:47:81:f0:fc:5d:52:08:a6:6f:71:1c:a4:
91:06:10:74:1f:b2:55:b2:3f:e1:27:97:98:58:e9:78:a2:9b:
c4:88:df:b9:f4:65:5b:6c:51:fc:ee:3b:d9:a4:59:a8:f0:21:
95:c1:e3:a0:6a:53:9f:ec:7b:4e:aa:de:fa:46:21:d6:b9:ab:
7f:c7:99:fe:f7:36:19:21:62:aa:7b:1e:e5:2f:ff:34:6a:1d:
a6:2b:bb:bc:fd:d5:c2:13:db:d0:26:7b:7f:fe:37:b8:c7:af:
ef:7c:f6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:28 2025 by rpki-client