Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.mft
File: jMcNehq2zHYirM80kb5xURXYQzo.mft (raw, json)
Hash identifier: NJc6bQ0ivQK387YCbIBbF4sWebv4qsaH2AxTSDGcFWY=
Subject key identifier: E7:38:48:C9:6F:4A:23:24:36:4B:34:47:B6:4B:17:E8:69:32:30:23
Authority key identifier: 8C:C7:0D:7A:1A:B6:CC:76:22:AC:CF:34:91:BE:71:51:15:D8:43:3A
Certificate issuer: /CN=8cc70d7a1ab6cc7622accf3491be715115d8433a
Certificate serial: 01979B96D266B3637C3A0890C203F489D29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMcNehq2zHYirM80kb5xURXYQzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.mft
Manifest number: 0B6F
Signing time: Mon 23 Jun 2025 07:00:41 +0000
Manifest this update: Mon 23 Jun 2025 07:00:41 +0000
Manifest next update: Tue 24 Jun 2025 07:00:41 +0000
Files and hashes: 1: jMcNehq2zHYirM80kb5xURXYQzo.crl (hash: AgZ8ZtbeBpmPnT8pK+zHoOhKjm6kbVfwQSLPsNTV+pw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:96:d2:66:b3:63:7c:3a:08:90:c2:03:f4:89:d2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc70d7a1ab6cc7622accf3491be715115d8433a
Validity
Not Before: Jun 23 07:00:41 2025 GMT
Not After : Jun 24 07:00:41 2025 GMT
Subject: CN=e73848c96f4a2324364b3447b64b17e869323023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:24:12:a5:54:5f:18:82:17:ca:d2:0d:41:
d3:58:a4:be:88:8f:70:97:d9:c0:9f:65:59:c2:ac:
e3:c0:bc:2d:69:4e:66:cf:e8:89:78:cb:4e:40:d0:
2f:17:0e:f6:80:e4:d8:d2:39:e6:17:3c:c2:0d:c0:
c5:be:2d:0b:64:4a:1a:ad:30:ae:bf:04:7c:48:57:
1e:b6:00:ae:4e:d3:09:13:95:22:1b:89:8a:d5:51:
f5:f8:1f:00:08:f8:2e:07:c9:f3:24:f0:b4:d4:e7:
07:b9:3d:98:c6:ad:05:8f:73:52:8c:53:50:44:5d:
91:af:72:92:7f:a6:c5:71:cb:f3:84:a2:d9:76:c5:
e2:eb:dc:31:e0:29:7e:97:85:8c:02:32:a5:68:4f:
f4:54:61:39:c1:16:23:00:fb:c7:42:29:f4:8b:2a:
05:f5:28:ec:ee:c7:c6:f0:04:2c:57:cb:07:77:78:
1e:72:0e:b1:c1:93:4c:fd:72:22:a6:9c:ae:7f:d8:
09:cf:44:aa:d8:5e:16:70:ec:72:70:e0:6d:5a:bc:
37:dd:44:03:2b:8f:12:cb:49:cc:54:f5:2e:52:03:
85:c7:13:74:4c:55:f1:94:06:a5:6d:4c:cb:02:87:
c1:43:ec:40:8d:71:ac:fe:e6:ff:e2:80:ec:06:38:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:38:48:C9:6F:4A:23:24:36:4B:34:47:B6:4B:17:E8:69:32:30:23
X509v3 Authority Key Identifier:
keyid:8C:C7:0D:7A:1A:B6:CC:76:22:AC:CF:34:91:BE:71:51:15:D8:43:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMcNehq2zHYirM80kb5xURXYQzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:50:4a:22:98:2a:14:dc:43:08:cd:dd:bf:da:b0:53:62:5e:
85:03:e3:d8:96:a5:46:c5:29:48:45:13:62:86:7d:42:eb:79:
47:5d:54:4e:e3:4c:20:09:ed:20:d8:da:87:44:df:0b:e6:9a:
d7:4b:6e:5a:fa:fb:b8:62:2d:79:df:54:e7:95:ee:41:ed:b0:
2e:ed:50:9e:36:48:69:f6:4c:d1:9f:e8:73:91:b8:9a:2b:f8:
73:67:93:4a:17:b7:99:f2:a6:67:71:d4:61:c1:e3:e3:a8:73:
d6:cc:d0:6a:56:d6:5c:45:2c:38:af:b7:07:14:54:c4:51:6b:
dd:b5:8b:6a:99:46:c8:ca:10:d9:ac:e1:d3:40:a7:4f:41:f2:
6a:55:c0:34:34:e1:ee:30:c9:62:c5:0d:43:e1:4b:ed:44:39:
2a:3b:8e:57:d2:fc:97:8f:16:ff:3a:16:30:a2:03:9b:fd:a8:
12:52:8c:9c:ad:1d:6e:23:e7:fb:e4:4e:02:36:cf:1d:27:8d:
c7:c0:19:54:8b:06:34:1e:de:b8:a1:06:78:92:e5:54:22:3b:
f2:ad:d0:4d:a9:83:7c:98:e9:25:ac:17:8c:15:ea:ba:37:fc:
34:bb:eb:7f:08:76:ac:c3:58:40:61:9f:bb:cf:1b:1d:06:46:
90:36:6c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:37:34 2025 by rpki-client