Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
File: 1-75t-tXrSOmB5A0KS8VatHGuXdk.mft (raw, json)
Hash identifier: q4yyZ6dNW1Dz3AuXHH67Cv4ZfKQkR0Vdn06d/Wv4dOY=
Subject key identifier: FD:5D:2A:49:83:80:EE:86:5D:9B:B3:78:16:05:5C:E8:CA:A9:00:CB
Authority key identifier: FB:BE:6D:FA:D5:EB:48:E9:81:E4:0D:0A:4B:C5:5A:B4:71:AE:5D:D9
Certificate issuer: /CN=fbbe6dfad5eb48e981e40d0a4bc55ab471ae5dd9
Certificate serial: 01983194553BEFF3F7B670518B2F7621FD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
Manifest number: 087C
Signing time: Tue 22 Jul 2025 10:01:01 +0000
Manifest this update: Tue 22 Jul 2025 10:01:01 +0000
Manifest next update: Wed 23 Jul 2025 10:01:01 +0000
Files and hashes: 1: 1-75t-tXrSOmB5A0KS8VatHGuXdk.crl (hash: vDtVdidqFSrA9iiwDsPwOO3Y+7zm9xxUi8rn2LI3bVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:94:55:3b:ef:f3:f7:b6:70:51:8b:2f:76:21:fd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe6dfad5eb48e981e40d0a4bc55ab471ae5dd9
Validity
Not Before: Jul 22 10:01:01 2025 GMT
Not After : Jul 23 10:01:01 2025 GMT
Subject: CN=fd5d2a498380ee865d9bb37816055ce8caa900cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:68:98:57:75:29:a4:66:99:91:61:7b:0c:
e0:69:ad:7a:4a:d8:12:ab:35:74:62:e4:72:da:0e:
3e:35:f0:e3:17:e1:96:f1:70:bb:a4:09:f1:a9:d5:
d2:09:aa:9d:ed:4c:84:fa:57:ef:5d:2f:19:2d:e6:
34:60:32:37:ae:90:61:d5:58:8d:e9:a8:fb:72:31:
64:71:5c:30:92:20:00:56:3a:bc:e7:32:e9:f9:71:
e6:5a:19:22:d1:48:90:9c:06:43:1e:7a:cb:0b:52:
61:5c:c3:df:08:c9:9e:ed:e2:66:43:79:1b:17:71:
07:9a:e5:6f:51:16:bf:eb:2b:09:05:8b:1c:51:05:
0e:14:b6:d6:7e:1d:10:17:0a:91:b4:33:a4:93:12:
47:67:9c:e1:8f:53:bd:14:ad:bc:8d:41:e1:24:17:
41:d8:35:59:03:96:c3:cd:3c:6c:46:78:61:e3:ac:
66:15:8f:65:83:92:2d:84:7e:be:b8:8b:cf:78:f0:
18:d2:8e:e8:f2:3b:86:7d:28:0d:2a:52:d7:bc:fa:
ef:e0:ba:47:3d:76:d2:5f:26:e3:4d:f9:42:08:d4:
a7:a5:fc:ba:7d:8b:3b:bc:79:f3:9c:a2:b6:b7:67:
e1:5a:44:32:7e:e7:04:2a:7a:b3:45:20:ea:fa:cf:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5D:2A:49:83:80:EE:86:5D:9B:B3:78:16:05:5C:E8:CA:A9:00:CB
X509v3 Authority Key Identifier:
keyid:FB:BE:6D:FA:D5:EB:48:E9:81:E4:0D:0A:4B:C5:5A:B4:71:AE:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:75:e3:2c:1f:42:4b:61:6b:8e:b4:2b:11:b3:28:c3:f3:63:
09:ef:cb:93:1b:ee:c2:e7:c7:f3:56:90:da:ed:99:e1:26:2a:
07:a6:2e:bf:7b:0f:4a:b7:da:93:b4:9c:ec:25:33:a1:e4:68:
c6:71:ca:68:b3:b4:ea:77:aa:25:ab:b1:f1:c5:e7:f5:8f:51:
29:e7:91:70:52:e7:38:8d:42:b9:07:0c:b6:50:c4:40:99:19:
0b:bd:88:75:15:d0:88:d8:f3:3c:b4:85:96:ac:16:f7:0a:a6:
2a:59:b4:b6:32:c6:d0:11:e5:6a:9d:87:a6:4c:8d:33:6b:4d:
9d:01:33:17:db:de:1e:a3:6c:19:14:c4:37:a5:a0:84:b2:9f:
3b:8c:f9:67:00:55:e6:e7:a6:04:eb:4e:2c:7b:db:e5:c6:d6:
5f:7e:a8:9e:89:5c:cb:a3:b9:5a:62:49:3a:44:65:82:61:f8:
af:a0:9f:a4:2c:10:2c:fe:41:84:ee:cd:87:42:03:69:7c:6d:
69:32:55:f5:c4:ae:4b:47:75:71:ae:b3:a6:ea:ce:32:c1:b0:
4c:a5:a4:be:cc:9f:33:7a:36:09:8d:69:2e:29:be:9f:aa:c3:
b7:fb:d3:44:a3:4b:22:e3:29:28:ba:53:d4:c2:59:50:68:46:
dc:c8:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:55:23 2025 by rpki-client