Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
File: J24TUlJErw0uZAq6KbD4I2vGHiA.mft (raw, json)
Hash identifier: LSp5tYxI3+k/ZCN5fTDIgJPdHUHmLDTCgIM0TkBVdyQ=
Subject key identifier: 7C:D6:FF:61:EA:30:7C:A8:4D:8D:EF:B2:4F:FD:B1:4B:E4:52:23:C1
Authority key identifier: 27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
Certificate issuer: /CN=276e13525244af0d2e640aba29b0f8236bc61e20
Certificate serial: 01979BCDB15CB466192C91E53BCDDBEB8AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
Manifest number: 0238
Signing time: Mon 23 Jun 2025 08:00:38 +0000
Manifest this update: Mon 23 Jun 2025 08:00:38 +0000
Manifest next update: Tue 24 Jun 2025 08:00:38 +0000
Files and hashes: 1: 8EWOooLiQ6us4fENFVrBmODvGtQ.roa (hash: FtJlQkbOynrL0gMJhRO31RjYSiNA8vkfsMUi3PW0gdU=)
2: J24TUlJErw0uZAq6KbD4I2vGHiA.crl (hash: NCklXens3bUHfxPxiulJAool4x59SSkN20rhgVwpBkY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:cd:b1:5c:b4:66:19:2c:91:e5:3b:cd:db:eb:8a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276e13525244af0d2e640aba29b0f8236bc61e20
Validity
Not Before: Jun 23 08:00:38 2025 GMT
Not After : Jun 24 08:00:38 2025 GMT
Subject: CN=7cd6ff61ea307ca84d8defb24ffdb14be45223c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:85:47:c3:27:7b:c2:15:d9:61:f6:be:4e:fa:
c1:6b:e1:dd:2c:01:f3:c9:12:3e:e2:48:34:2c:fd:
32:9b:70:dc:7a:b8:66:d8:07:7f:18:da:76:f0:bb:
a2:be:f8:b9:c8:d9:3f:08:62:d1:0b:35:29:14:8f:
10:96:0e:51:d8:dc:56:d0:9e:73:13:ad:2e:16:3a:
b6:3b:42:a0:83:42:3e:1d:e7:30:a7:1c:7c:c2:e5:
2c:14:f7:1c:3d:4c:2f:77:f2:c7:9e:0e:ea:e7:3b:
5a:f0:c5:09:32:0f:d6:43:ac:86:c7:d6:27:2f:0d:
ed:5b:ab:01:b6:21:b8:3b:61:1e:4c:58:10:89:d8:
61:f6:93:2e:c0:e9:5e:99:1e:29:a8:21:28:86:d4:
8e:b3:22:92:8a:ce:b0:2d:68:4c:47:37:f0:ad:ac:
27:a3:65:c1:6f:e2:f9:fd:77:56:b8:0f:88:bc:a7:
c2:3b:e0:49:31:36:e4:0d:58:d4:3e:35:c9:b0:14:
79:4c:25:59:44:b5:35:b7:0a:a4:48:8f:15:a6:21:
d8:e2:7b:38:56:a7:6b:72:f3:dc:c0:06:12:50:69:
ee:d0:1d:32:d0:ed:28:c9:50:22:cb:37:ab:d8:d2:
a6:88:25:2a:de:d0:c8:67:d3:c0:70:04:21:d2:5d:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D6:FF:61:EA:30:7C:A8:4D:8D:EF:B2:4F:FD:B1:4B:E4:52:23:C1
X509v3 Authority Key Identifier:
keyid:27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:95:00:38:e9:5b:a7:c8:ee:de:d3:79:26:5e:ef:f6:40:27:
7c:5e:f3:22:4d:6d:75:93:2e:2a:0b:61:55:e5:a1:e4:5e:d8:
71:13:15:ba:65:45:67:ed:4d:cf:b2:30:56:d5:ba:64:af:e6:
d9:c9:70:18:8b:bd:ca:22:b7:99:dd:79:2a:a6:2e:03:bb:b7:
56:c9:8e:33:e9:59:82:b9:58:f0:6f:32:24:60:81:d6:83:ca:
cb:3f:4a:52:be:d8:0a:67:91:de:fc:dd:98:ab:f4:ac:bc:bf:
6d:23:2e:3b:b2:ab:6a:fe:62:54:82:a8:7e:e9:54:47:e2:d2:
7d:e9:25:e2:c6:5f:92:0a:ed:63:04:7f:34:51:a0:18:38:ae:
7b:e7:e9:1b:ec:ee:90:06:9c:81:58:26:f8:4a:6f:e4:fa:7a:
c4:39:b1:5c:68:97:a6:c5:1c:f8:94:af:04:bb:ad:cf:1e:e4:
a2:b3:55:6e:25:0b:ac:54:14:cf:54:42:6e:2a:e8:75:88:9d:
f7:a2:d1:0c:4d:b1:f0:9d:fb:a0:23:ad:24:d3:72:20:8c:a2:
35:5b:d3:e2:13:90:55:5e:94:c8:14:52:ae:98:e8:60:16:5f:
5f:64:91:a3:29:e5:ff:e4:79:21:d9:2b:7d:60:2a:45:e5:4e:
80:76:23:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:27:47 2025 by rpki-client