Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
File: 2O6yCogM20lOnmLUOy7yjJDLnu8.mft (raw, json)
Hash identifier: yv3RdiBj7vdiSYRmYCdvUWK9Ktnlu/DOQcHZciOiP7o=
Subject key identifier: DA:B7:EF:53:CB:47:62:5C:92:C0:E7:E5:A0:DB:14:57:C1:1D:F6:8B
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 01979AF1EB0DC883FA19D58E0F4E073D1118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
Manifest number: 04A4
Signing time: Mon 23 Jun 2025 04:00:34 +0000
Manifest this update: Mon 23 Jun 2025 04:00:34 +0000
Manifest next update: Tue 24 Jun 2025 04:00:34 +0000
Files and hashes: 1: 2O6yCogM20lOnmLUOy7yjJDLnu8.crl (hash: a8GqdD9ZVYViR9IuEKtPwfYE+2DNvjI/sCTCogxfsXI=)
2: vCMAQMWIPZtWaDRHudCKdYaPL5w.roa (hash: K6MAg/QPc/fQfWH2rJi0K6eyKZU04FRZSEew4e4aMTk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9a:f1:eb:0d:c8:83:fa:19:d5:8e:0f:4e:07:3d:11:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: Jun 23 04:00:34 2025 GMT
Not After : Jun 24 04:00:34 2025 GMT
Subject: CN=dab7ef53cb47625c92c0e7e5a0db1457c11df68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:18:66:66:b8:23:c0:00:1b:b4:30:fe:9d:
ce:09:9f:93:1d:d6:82:9b:9a:2a:7c:0c:d7:92:d3:
8e:47:0f:fd:b9:42:af:2d:7d:2a:e5:a9:11:0e:bf:
dd:ee:1a:05:d3:11:77:4b:f3:61:61:14:70:cd:b1:
99:d5:69:9e:6b:cb:21:6e:76:0b:c4:b1:01:83:88:
83:a4:85:2f:dc:69:cd:32:51:08:36:5d:11:93:18:
18:79:fd:63:1a:b1:a1:cf:d7:51:ed:f7:8c:fd:42:
20:e0:27:f1:ef:99:88:89:c5:f7:e0:15:74:13:d2:
6b:a7:45:13:81:c2:76:a0:bd:b3:ca:f5:91:36:a2:
90:e0:34:51:fd:a6:3d:e5:d2:a3:51:95:34:63:11:
38:12:4f:ee:9d:cc:5b:b6:12:97:c4:d6:9f:11:58:
04:0e:17:e1:bb:fe:b9:8f:a0:c4:05:de:fe:e2:f8:
c6:74:fd:57:0c:90:5c:83:9e:ad:f1:c2:df:57:a7:
0e:41:68:42:f3:32:36:b0:68:f1:8d:70:b7:75:f4:
51:22:1d:b8:48:aa:48:ff:31:7e:81:d2:23:84:79:
e5:32:06:86:60:8c:38:ef:b8:69:04:84:57:45:6c:
da:82:4f:58:21:3b:9e:b5:fd:5f:3d:ad:c8:43:05:
05:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B7:EF:53:CB:47:62:5C:92:C0:E7:E5:A0:DB:14:57:C1:1D:F6:8B
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:85:5f:b4:b9:a5:d7:c1:43:6b:4c:23:24:f0:1c:4d:f4:bf:
39:a7:9d:a3:a8:5b:4c:7f:af:7a:ca:b2:2e:85:44:a0:e6:76:
2f:da:13:3a:61:af:51:d0:1b:0f:7e:03:32:24:f7:13:39:af:
13:10:d3:60:38:8c:c6:17:57:0e:50:ab:17:0c:4d:f6:d4:6d:
76:ae:99:a6:1e:fe:ba:32:1c:98:44:4e:3c:ef:19:a9:84:8b:
64:74:dd:cc:df:4d:30:8f:48:ff:61:37:d7:36:7b:c2:de:b3:
77:f9:f7:4e:e4:e8:a7:d2:66:71:09:b7:27:aa:bb:ca:bf:8f:
7c:e9:69:e2:ca:0b:0e:00:ff:5d:a8:6e:2d:1c:a6:31:6c:1b:
c5:2b:df:5e:30:a0:6b:29:e9:29:80:4c:1c:d1:49:8d:f0:6c:
34:b6:cb:f9:84:05:86:ba:e7:05:a0:77:07:fb:13:a0:1c:15:
a0:4b:2f:91:ae:9b:f4:93:24:4a:20:58:bd:b3:35:79:33:aa:
54:ac:78:6d:1b:70:9f:0a:84:5e:52:46:a4:4d:a8:a2:fb:44:
dd:22:0b:6e:a1:fe:55:d2:b5:d2:75:bd:89:e4:86:e8:91:2e:
e4:91:cd:45:58:b9:95:10:7d:d0:0b:91:43:d4:3a:1a:cd:44:
2d:a2:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:24:36 2025 by rpki-client