Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ed4470-0ea3-4e3e-ba85-316ef1e253c0/1/1hmQE4Ia2Z60WxOK9QeYTvdG0as.mft
File: 1hmQE4Ia2Z60WxOK9QeYTvdG0as.mft (raw, json)
Hash identifier: hPo75un591mn0ptc/DFJBVAoLFDzkNt2jN0WRcdkjCo=
Subject key identifier: F6:33:87:03:E1:74:DE:D6:99:FC:2B:3C:06:99:AE:F0:6C:7C:A4:E7
Authority key identifier: D6:19:90:13:82:1A:D9:9E:B4:5B:13:8A:F5:07:98:4E:F7:46:D1:AB
Certificate issuer: /CN=d6199013821ad99eb45b138af507984ef746d1ab
Certificate serial: 0195E0B41C622C789061192C32C68F61CA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hmQE4Ia2Z60WxOK9QeYTvdG0as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ed4470-0ea3-4e3e-ba85-316ef1e253c0/1/1hmQE4Ia2Z60WxOK9QeYTvdG0as.mft
Manifest number: 0596
Signing time: Sat 29 Mar 2025 07:00:54 +0000
Manifest this update: Sat 29 Mar 2025 07:00:54 +0000
Manifest next update: Sun 30 Mar 2025 07:00:54 +0000
Files and hashes: 1: 1hmQE4Ia2Z60WxOK9QeYTvdG0as.crl (hash: G051gZZ0PG0VhirR/mOcWED6eXePpg1gVk02bupawuk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:1c:62:2c:78:90:61:19:2c:32:c6:8f:61:ca:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6199013821ad99eb45b138af507984ef746d1ab
Validity
Not Before: Mar 29 07:00:54 2025 GMT
Not After : Mar 30 07:00:54 2025 GMT
Subject: CN=f6338703e174ded699fc2b3c0699aef06c7ca4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:e9:0f:6d:29:59:45:16:75:3d:af:f6:e1:
db:aa:15:0a:c7:01:93:e4:2c:26:13:6a:1e:9a:50:
10:ad:e3:95:58:dd:df:c0:b9:66:c9:5d:e2:10:58:
a5:8f:a8:6e:1b:8e:00:8f:43:17:db:a4:d7:9e:19:
ce:98:b1:72:06:83:b6:88:f3:21:d2:19:e3:a6:8c:
2d:03:e3:27:cc:9e:61:ec:5a:64:3d:c7:1c:83:a0:
23:60:70:80:75:12:a0:61:60:ca:7f:e7:98:85:24:
c9:18:45:67:10:15:8b:4f:85:90:10:42:fd:2b:92:
11:61:84:7e:53:a2:66:b9:2c:ed:dd:8e:4e:20:8d:
8a:93:9e:ca:d7:56:cf:50:d9:2a:c8:6a:e0:52:20:
e2:3f:26:2f:e8:da:6e:76:fd:12:2b:bf:e7:50:23:
be:aa:57:da:cd:eb:e8:14:52:42:f3:4e:e5:b0:3c:
4d:ba:b6:4e:73:f5:02:76:04:13:87:a6:90:02:70:
e9:17:36:82:d6:6a:38:0b:46:15:ef:bf:f3:d7:6d:
11:80:5f:1f:4a:90:4f:53:d2:41:a4:91:d8:b3:ad:
fc:1f:a2:7a:94:93:db:0c:5e:bf:4e:9f:7e:13:78:
3e:ab:cd:05:e9:4f:6b:8d:40:dd:21:9d:5f:c9:80:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:33:87:03:E1:74:DE:D6:99:FC:2B:3C:06:99:AE:F0:6C:7C:A4:E7
X509v3 Authority Key Identifier:
keyid:D6:19:90:13:82:1A:D9:9E:B4:5B:13:8A:F5:07:98:4E:F7:46:D1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hmQE4Ia2Z60WxOK9QeYTvdG0as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ed4470-0ea3-4e3e-ba85-316ef1e253c0/1/1hmQE4Ia2Z60WxOK9QeYTvdG0as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ed4470-0ea3-4e3e-ba85-316ef1e253c0/1/1hmQE4Ia2Z60WxOK9QeYTvdG0as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ec:e3:21:ae:63:7c:ce:c4:62:8d:69:76:b0:41:80:12:d1:
7f:7b:6d:b0:fa:ba:ee:be:a7:48:d4:5e:eb:60:30:42:e8:81:
26:7e:24:65:b6:e5:43:9c:47:6b:a0:07:0a:97:d0:81:4d:dd:
41:a2:ea:b7:66:7a:49:24:c3:00:c0:95:d7:5b:00:f3:d9:41:
cc:f0:5c:19:f6:d7:50:cd:13:5e:ea:00:01:80:b9:40:89:5e:
26:c2:e2:6e:da:77:11:f3:c4:95:13:ac:ca:46:02:be:3c:8b:
6d:06:1b:b8:3f:74:42:ea:e4:b2:10:a9:b1:6f:95:ef:2b:4f:
ce:90:ee:a1:e5:be:a4:cc:a8:ad:dd:f7:81:63:2b:17:4b:59:
de:79:b0:76:36:80:5e:2a:e7:37:f0:7e:25:bf:b7:a8:12:0a:
a0:f7:fe:d9:b9:e8:e0:bf:fa:d5:a1:dd:45:74:d6:64:f7:9a:
96:9c:ab:cf:3a:3f:95:89:79:26:ed:e4:99:53:7a:9a:bc:49:
43:27:1f:48:13:46:7a:dc:4f:01:b7:5a:89:ba:93:69:6a:e1:
78:fa:27:30:d5:c2:15:b6:a7:09:90:a2:78:e1:0e:28:39:3c:
9a:62:8b:c8:8f:8d:ac:ef:d2:a5:f3:46:35:d3:6c:6d:4a:ef:
0d:03:0e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:40:01 2025 by rpki-client