Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
File: pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft (raw, json)
Hash identifier: VMIvuQ0kBMjNHwkYCY5GDNg2J02cUQpImazkk55uapQ=
Subject key identifier: 28:39:66:8B:5A:61:C8:E0:08:F2:DC:A1:3A:15:DA:7A:B0:11:B6:9B
Authority key identifier: A5:C6:5D:3F:8C:4E:EC:B4:61:14:3B:DA:67:B1:A8:5C:1D:7A:B5:7A
Certificate issuer: /CN=a5c65d3f8c4eecb461143bda67b1a85c1d7ab57a
Certificate serial: 01979A840C157441F60BB7D895536C2069C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
Manifest number: 0595
Signing time: Mon 23 Jun 2025 02:00:34 +0000
Manifest this update: Mon 23 Jun 2025 02:00:34 +0000
Manifest next update: Tue 24 Jun 2025 02:00:34 +0000
Files and hashes: 1: PE72L1MZ6arIopzUHKdO8yRmL1A.roa (hash: GUSnHYNUfV3OxDkdEg/4B//ADgj/Stnyrivs7UGYYYk=)
2: pcZdP4xO7LRhFDvaZ7GoXB16tXo.crl (hash: zhlshEaz60qgPnGgqy9aArVqyPDWLi//nZarvz7p1F0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9a:84:0c:15:74:41:f6:0b:b7:d8:95:53:6c:20:69:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c65d3f8c4eecb461143bda67b1a85c1d7ab57a
Validity
Not Before: Jun 23 02:00:34 2025 GMT
Not After : Jun 24 02:00:34 2025 GMT
Subject: CN=2839668b5a61c8e008f2dca13a15da7ab011b69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:27:87:90:5d:63:e0:a5:75:92:19:7b:3c:
dc:38:30:f3:90:8b:b0:cb:f1:0e:55:5f:1a:e5:37:
a1:1e:a6:4b:e1:2f:17:28:3a:37:c6:40:a3:97:87:
1c:1f:7b:8d:6e:d7:52:b2:63:dd:ba:07:da:14:00:
be:12:71:ca:05:c0:2a:2e:4e:30:52:7c:ba:37:65:
a3:18:60:2b:cd:1e:87:58:a6:cb:11:af:38:fa:55:
f8:96:78:55:ec:30:02:f9:65:dc:87:24:ed:13:2a:
63:b5:4b:6d:4d:54:29:55:6e:14:a0:23:bb:05:75:
34:92:54:5d:23:93:9b:21:17:28:a2:40:4a:7c:12:
37:6c:f8:b0:22:3b:f8:c8:23:7a:95:78:c0:0c:88:
fb:23:25:c5:67:d6:71:ac:66:0b:d3:7e:a2:68:f6:
90:6e:9c:22:5e:34:5c:5a:41:bc:be:70:1c:0b:7c:
58:13:45:af:58:03:23:0d:90:7b:fd:a2:1a:07:83:
87:96:a3:12:3b:9e:09:f0:82:4a:59:ad:a5:4a:96:
5d:6e:9d:8f:e6:77:f4:6e:fa:bf:07:01:00:d3:12:
8e:03:01:f2:43:db:7d:e9:22:76:ea:57:c4:0c:17:
ee:5a:22:f7:4b:37:68:b4:29:42:9a:e0:87:35:82:
5b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:39:66:8B:5A:61:C8:E0:08:F2:DC:A1:3A:15:DA:7A:B0:11:B6:9B
X509v3 Authority Key Identifier:
keyid:A5:C6:5D:3F:8C:4E:EC:B4:61:14:3B:DA:67:B1:A8:5C:1D:7A:B5:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b1:f8:4e:f9:06:83:bb:20:3b:c6:13:0d:49:e6:db:54:80:
03:7c:44:ec:f4:0d:b8:ec:d4:9b:52:fe:69:e4:83:20:16:4a:
5c:76:41:d2:62:3a:6c:8a:ae:96:bc:2b:57:a7:d6:68:ce:fa:
72:9f:90:db:ba:e6:b2:7c:69:dd:9b:a2:ca:df:ff:49:ce:fb:
d1:a0:92:83:92:de:a4:69:50:13:d4:78:07:8d:d1:74:99:36:
38:69:ef:63:67:77:7a:87:1d:4c:59:b6:9d:d6:d5:58:c9:a8:
5f:c7:18:f0:5a:5d:4c:74:82:c2:8f:0e:08:6b:99:18:0b:fa:
29:e4:d2:f9:a5:d6:73:19:eb:e3:2f:24:cf:19:cf:06:75:fd:
6d:b4:9c:46:2c:a0:5b:e2:82:7b:64:50:ee:fc:01:2f:ce:05:
ef:09:7d:6e:46:e2:91:9c:94:4f:b6:c4:3e:ba:4e:93:a7:63:
7d:45:a3:38:15:b6:b2:37:b9:08:77:30:d9:8c:70:73:71:93:
e2:fb:8b:d0:26:c7:6a:5e:9b:26:4d:39:5c:3a:0a:15:55:ff:
b7:64:77:b4:22:a6:83:59:f7:10:bb:47:c7:0a:13:7d:85:e9:
8f:68:84:d6:33:19:a4:2f:5f:00:8d:d7:9c:8c:d2:15:80:f1:
40:8b:a3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:48:47 2025 by rpki-client