Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
File: 1-G_kJ8_22FppXshlKKSDDLQIqBg.mft (raw, json)
Hash identifier: 0/SMuoGrXuC6C9uLfywt6AzePnrz1Ctvg4AxykC954g=
Subject key identifier: BF:B3:E5:1E:6B:22:09:DB:25:9D:A2:2C:4C:3E:EE:DB:6A:25:31:ED
Authority key identifier: F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
Certificate issuer: /CN=f86fe427cff6d85a695ec86528a4830cb408a818
Certificate serial: 0197C8DDA185B87AEFF7023E6596D67BA268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
Manifest number: 112A
Signing time: Wed 02 Jul 2025 02:00:57 +0000
Manifest this update: Wed 02 Jul 2025 02:00:57 +0000
Manifest next update: Thu 03 Jul 2025 02:00:57 +0000
Files and hashes: 1: 1-G_kJ8_22FppXshlKKSDDLQIqBg.crl (hash: d7T05E1UH4KPYfvJPp1nqeFPluduWc0w8rigLmOodls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:dd:a1:85:b8:7a:ef:f7:02:3e:65:96:d6:7b:a2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f86fe427cff6d85a695ec86528a4830cb408a818
Validity
Not Before: Jul 2 02:00:57 2025 GMT
Not After : Jul 3 02:00:57 2025 GMT
Subject: CN=bfb3e51e6b2209db259da22c4c3eeedb6a2531ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:27:61:11:a5:7f:78:dd:b5:1b:5a:c6:a1:73:
18:b3:31:1d:71:47:43:46:4c:4d:14:e9:0f:5c:e5:
bb:76:0b:ae:82:08:57:c3:e0:8f:ae:af:db:a6:19:
f3:c5:3f:60:b8:11:38:9a:5c:9b:a2:f0:73:18:8b:
1a:1e:ae:4d:30:79:94:68:81:60:12:6a:71:14:a6:
c0:4e:78:0d:1c:01:75:54:b3:04:78:be:4d:06:b1:
23:6b:12:77:4b:00:96:81:c3:3e:f0:ab:0c:fe:af:
6d:ee:3a:2e:6a:b4:fe:77:fb:64:d3:45:50:91:be:
57:2c:b4:2e:78:a0:64:c6:29:be:f4:a0:6f:35:b2:
9a:f6:16:fb:3e:db:83:9a:62:70:7e:ce:5d:8e:76:
fe:47:39:19:3b:d0:2a:c5:16:86:d2:7d:37:d5:d3:
f1:c6:66:de:ce:8a:51:d3:5b:0e:9d:aa:5a:69:c0:
4d:ba:36:ef:cf:19:ae:cb:e5:9e:ce:92:01:0c:ac:
2b:0d:e3:2d:19:25:a1:94:1f:7c:a8:56:b2:7c:32:
a4:a5:b7:ec:8f:01:f1:59:96:c5:df:06:14:8c:1f:
64:70:24:9d:32:1d:fe:bb:20:ce:61:71:8d:97:71:
98:58:7a:b7:b9:86:df:15:98:68:62:ba:b7:56:a5:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B3:E5:1E:6B:22:09:DB:25:9D:A2:2C:4C:3E:EE:DB:6A:25:31:ED
X509v3 Authority Key Identifier:
keyid:F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:a5:59:37:59:1e:7f:0b:f6:e7:d3:07:bd:48:59:d1:14:
b7:44:13:75:a6:db:30:c3:f1:36:38:b0:52:23:d8:32:cd:5d:
f2:77:6a:79:6b:d2:03:83:43:24:55:f1:36:80:82:64:28:47:
59:6d:89:2a:85:f9:16:66:4f:b3:f2:f6:dc:de:55:ce:04:ba:
b6:6f:2e:25:3c:2c:70:a8:5a:0d:68:ce:c3:38:63:dd:d7:3d:
62:4e:8a:4e:12:70:b4:df:ee:fd:24:6b:7b:1c:5a:4d:66:f4:
78:3a:15:5e:26:4e:33:3f:dd:4a:3e:b5:c2:6b:55:a7:ec:58:
c5:d3:0b:d4:c3:fd:91:eb:c8:a0:2e:8b:dc:61:c3:20:71:14:
3b:2c:2f:64:f4:50:9c:c9:b8:e2:e9:8b:31:d3:ed:dd:f5:19:
ae:ad:8b:ba:b5:da:16:08:91:bc:88:cb:42:a6:fe:20:61:67:
63:0e:89:7c:fc:94:e0:e7:c4:74:2b:67:51:b9:13:63:50:d7:
b3:57:e7:03:90:08:d9:d2:b1:2a:30:55:dc:a9:de:ad:a2:33:
1a:28:63:4c:1a:30:cc:bd:24:10:f5:94:c6:a5:d9:05:03:0b:
4c:17:ce:0c:58:78:4d:f9:69:b9:0d:f3:99:61:0d:62:a9:77:
e9:cc:e3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:38:53 2025 by rpki-client