Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
File: 4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft (raw, json)
Hash identifier: bQWb1UkR7Bwgoqvx/brO5AQkUrxpGU1f0XKvvb+xqvs=
Subject key identifier: FD:A7:F8:C6:B1:A1:45:67:7D:BA:48:AE:EC:E9:F0:EC:9E:EC:A5:3A
Authority key identifier: E2:AD:1B:50:37:7D:7C:07:5C:64:D0:09:F4:0A:30:FE:72:90:68:7C
Certificate issuer: /CN=e2ad1b50377d7c075c64d009f40a30fe7290687c
Certificate serial: 0197F848DBFE635C18B36A3EA31A27BB060E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
Manifest number: 137C
Signing time: Fri 11 Jul 2025 07:00:13 +0000
Manifest this update: Fri 11 Jul 2025 07:00:13 +0000
Manifest next update: Sat 12 Jul 2025 07:00:13 +0000
Files and hashes: 1: 4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl (hash: 0lnGTs6Ibu0k6sCtJ7YNgaAMkSjwemvCc00gI+ZcFOs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f8:48:db:fe:63:5c:18:b3:6a:3e:a3:1a:27:bb:06:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ad1b50377d7c075c64d009f40a30fe7290687c
Validity
Not Before: Jul 11 07:00:13 2025 GMT
Not After : Jul 12 07:00:13 2025 GMT
Subject: CN=fda7f8c6b1a145677dba48aeece9f0ec9eeca53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:57:0c:37:ea:6b:36:1f:0e:b8:1f:0f:f5:
af:45:c6:ce:74:91:0d:38:8e:d0:30:a4:c0:33:d0:
a0:6e:33:d9:c9:51:90:bf:c5:72:db:61:a0:e1:61:
d1:0f:5e:f6:bc:7d:9d:ef:7e:ab:e7:5b:cd:32:c0:
58:29:98:12:4f:34:8e:d1:0b:4d:75:23:d7:1d:08:
59:36:72:77:d2:11:f2:26:f1:4f:76:67:f0:30:52:
bf:57:09:68:80:ce:27:d7:1d:4a:a0:b9:73:aa:f0:
70:eb:56:89:47:75:a5:bf:49:9e:ac:b7:20:cd:c5:
30:f6:c5:20:68:f2:0c:ad:3a:c0:bc:b1:b2:46:17:
bf:70:05:49:02:42:07:0c:27:f2:3c:de:bf:cd:62:
1e:5f:76:7b:ad:c0:21:b2:1a:37:46:6b:4c:e6:76:
33:81:96:b2:80:7f:cc:e9:6e:3c:59:cb:e4:5a:9e:
90:82:36:a6:eb:66:a6:4e:57:36:8d:88:11:98:05:
da:2d:46:ec:26:16:4e:e4:ed:38:63:74:d7:62:d5:
aa:e1:67:98:e6:36:c5:cb:bd:5c:fc:65:93:6a:ac:
ba:a2:e4:52:c2:10:be:6a:b2:7d:cf:33:e9:d6:4a:
a4:38:b0:c6:83:65:3f:1b:64:bf:c2:6f:38:5c:26:
26:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A7:F8:C6:B1:A1:45:67:7D:BA:48:AE:EC:E9:F0:EC:9E:EC:A5:3A
X509v3 Authority Key Identifier:
keyid:E2:AD:1B:50:37:7D:7C:07:5C:64:D0:09:F4:0A:30:FE:72:90:68:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b0:ea:f4:60:87:d5:33:bd:d0:65:be:2a:5a:88:51:f6:b1:
f7:2d:f0:af:07:c2:66:ba:33:37:e8:85:79:4c:6c:c1:57:6e:
6d:e9:23:18:5a:13:0f:41:9e:77:47:ba:b1:92:5b:19:e6:44:
24:ad:ae:26:44:10:23:44:8d:60:34:ee:a1:b4:49:10:18:bf:
e7:24:c4:55:54:62:66:fa:e4:bb:da:40:ed:48:4e:ad:86:18:
46:92:3e:d0:0f:dd:f0:f7:a6:45:fc:cc:0c:eb:80:86:c8:e5:
c8:24:65:c4:63:34:f2:ff:a6:38:73:1d:81:08:e7:51:ed:69:
43:3a:6b:21:b4:8f:3e:25:12:b5:ac:21:65:e3:1d:6b:8a:92:
f3:cc:f1:07:94:d5:23:05:3b:f5:23:3c:e3:ba:bc:e6:e9:b7:
b1:f8:ac:2d:56:45:3e:39:6e:a5:7a:dc:f5:97:be:68:b1:87:
12:60:34:c6:42:9c:a5:a0:69:60:03:62:1a:7c:38:ae:da:a3:
25:a9:9c:49:02:5e:cd:cb:3c:7a:90:49:94:d7:b0:d1:90:91:
5b:a1:3a:b1:c5:18:7c:8a:2a:1a:6f:b2:c8:df:c5:52:9f:73:
df:02:b2:06:18:30:94:06:3e:a3:17:31:d4:76:95:5b:63:11:
6a:b6:68:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:20:38 2025 by rpki-client