Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.mft
File: 4pRxrgqqyrg-KT8fjqG9cHDsM1s.mft (raw, json)
Hash identifier: 6hk3LFK2Aj/Lz3c7OocIlV3b8IygxCWdDG74Ux+jYoU=
Subject key identifier: 12:90:40:1C:6D:7A:80:EC:BB:79:3B:25:81:47:0F:8C:ED:AD:9F:2F
Authority key identifier: E2:94:71:AE:0A:AA:CA:B8:3E:29:3F:1F:8E:A1:BD:70:70:EC:33:5B
Certificate issuer: /CN=e29471ae0aaacab83e293f1f8ea1bd7070ec335b
Certificate serial: 0195E158F1B23E58ABCDD91B25C075D927E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pRxrgqqyrg-KT8fjqG9cHDsM1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.mft
Manifest number: 07B7
Signing time: Sat 29 Mar 2025 10:00:57 +0000
Manifest this update: Sat 29 Mar 2025 10:00:57 +0000
Manifest next update: Sun 30 Mar 2025 10:00:57 +0000
Files and hashes: 1: 4pRxrgqqyrg-KT8fjqG9cHDsM1s.crl (hash: ByRCSgYYbl1sbwiO/2Jn0Ac8dhYWGySKEiyO9GILfPE=)
2: lEVgi9I8nrIc-HhV_LhTJI8_UII.roa (hash: ee0opnDYNm6NaGhq5qqdUOHizQiOIqJZQ2o60F6FIkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:f1:b2:3e:58:ab:cd:d9:1b:25:c0:75:d9:27:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29471ae0aaacab83e293f1f8ea1bd7070ec335b
Validity
Not Before: Mar 29 10:00:57 2025 GMT
Not After : Mar 30 10:00:57 2025 GMT
Subject: CN=1290401c6d7a80ecbb793b2581470f8cedad9f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:93:5f:ee:6b:42:6f:e7:0d:4c:0f:8d:fa:fa:
08:5d:e5:b7:83:53:50:27:54:9d:32:39:5b:34:a3:
af:5b:03:f6:65:c1:44:b9:9e:10:bf:d6:44:78:91:
5f:94:c5:46:d3:f8:30:4e:cf:b5:40:21:86:2b:6b:
88:dd:4f:ea:1a:ba:e0:c9:d8:65:e7:f2:e6:3e:3f:
e9:8a:d6:7d:cb:1d:8e:19:44:ea:b6:8c:92:ea:0e:
63:cb:e7:3b:51:eb:cd:ab:ec:d0:4d:fe:b9:88:8e:
dc:79:2d:be:9f:07:9f:ef:bf:9c:fe:a4:48:52:f1:
e7:86:80:dd:6e:62:7b:52:c8:20:6b:73:00:2b:f9:
a8:4f:24:1f:83:86:9b:b9:81:eb:58:b9:b7:c6:59:
ed:0c:ec:80:bf:6e:55:e3:c2:6c:ed:fd:d6:50:71:
ff:e9:09:11:0b:6c:65:f1:2e:e1:ef:5f:88:ec:42:
98:ac:a9:fb:3b:82:86:29:12:7d:73:32:6a:be:48:
6f:05:58:3f:8d:b4:3e:f9:52:e7:c5:3c:c3:c4:20:
a3:63:7e:9d:57:85:44:d8:c2:88:8e:b9:df:74:1e:
89:71:41:51:bd:7c:b0:bd:31:aa:63:a2:e9:2c:ff:
07:34:e3:d8:79:36:80:51:cb:e4:c2:73:78:d2:86:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:90:40:1C:6D:7A:80:EC:BB:79:3B:25:81:47:0F:8C:ED:AD:9F:2F
X509v3 Authority Key Identifier:
keyid:E2:94:71:AE:0A:AA:CA:B8:3E:29:3F:1F:8E:A1:BD:70:70:EC:33:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pRxrgqqyrg-KT8fjqG9cHDsM1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:da:9d:3c:0e:ee:07:c3:db:6f:54:ce:4a:f7:ac:45:ef:1c:
a2:af:45:c7:02:c7:0e:eb:3d:00:a1:0f:5f:0c:98:8b:25:c3:
af:7b:27:75:d3:31:4a:af:b2:5e:e5:c0:8e:9f:f6:76:e8:09:
12:75:cf:82:5d:d9:32:1b:07:b5:40:73:af:53:0a:6b:da:cd:
ca:f3:d2:f6:16:7b:81:d1:84:57:53:b1:ac:06:06:8e:96:c2:
6d:81:c7:fb:18:c7:d2:51:c7:16:9d:62:34:aa:0c:ba:f0:83:
73:b3:4d:fd:7b:40:ee:6d:35:9f:9e:ff:5b:66:a1:c5:fd:c1:
34:df:bb:98:37:e7:47:a3:c9:93:00:1a:5a:dd:39:6e:d3:c3:
65:5a:05:38:96:b1:c4:87:21:67:fe:94:f7:c8:f0:f3:20:d0:
9d:b0:2e:b2:5d:25:b4:6a:ec:5c:94:db:06:99:ec:79:ff:29:
5d:ae:2f:69:62:e1:7a:0c:9d:80:05:00:39:ca:94:d6:bd:a9:
19:cf:c3:b1:68:b0:52:b1:95:ff:bd:82:08:8d:07:74:2f:22:
0d:b0:61:0b:9b:1d:23:5d:62:34:09:ab:88:6e:69:47:ef:7e:
97:5b:2b:c5:cf:4d:3f:b5:c4:e3:bb:e1:9b:be:0c:54:0c:3d:
23:aa:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:13 2025 by rpki-client