Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft
File: EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft (raw, json)
Hash identifier: VSdN7CmQvexF+kMwMjEQP92YXOAKJgDtHynBJMvKzlY=
Subject key identifier: 30:8F:E3:61:9B:2B:A4:65:3B:47:5D:B0:37:91:FD:6A:AB:56:DF:D3
Authority key identifier: ED:B2:DC:B9:23:52:13:13:E4:6C:ED:D7:E5:05:C1:E6:71:4C:9C:1D
Certificate issuer: /CN=EDB2DCB923521313E46CEDD7E505C1E6714C9C1D
Certificate serial: 40C832E01DCE1831D7DC97F620DF2FC1F7C447E1
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft
Manifest number: C4
Signing time: Wed 02 Jul 2025 20:54:45 +0000
Manifest this update: Wed 02 Jul 2025 20:49:45 +0000
Manifest next update: Fri 04 Jul 2025 00:18:45 +0000
Files and hashes: 1: EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.crl (hash: FDnlKvVF24atcX3wFfb/u2+VDx7Mzou9570lNrgJnac=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c8:32:e0:1d:ce:18:31:d7:dc:97:f6:20:df:2f:c1:f7:c4:47:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB2DCB923521313E46CEDD7E505C1E6714C9C1D
Validity
Not Before: Jul 2 20:49:45 2025 GMT
Not After : Jul 4 00:18:45 2025 GMT
Subject: CN=308FE3619B2BA4653B475DB03791FD6AAB56DFD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:2d:13:b9:be:3f:fa:17:0f:76:bf:3a:f0:
36:54:2c:f7:49:2b:14:26:86:dd:1b:8d:60:2b:06:
f7:c8:80:e9:ec:25:50:33:32:2d:df:a4:1d:4b:b3:
12:79:c7:56:3e:03:8e:2c:ab:fe:bb:4a:6d:7f:b2:
1f:84:32:2f:6f:1f:26:f3:b3:d6:68:3a:c1:65:2c:
56:db:52:eb:5a:fd:f4:b3:4a:1e:8e:61:0f:f5:72:
ae:bd:5c:97:48:1e:61:53:0d:f5:1e:d4:e5:9b:9d:
6f:f0:0a:3f:76:f3:58:04:ed:4b:07:ec:2d:52:d9:
fa:81:98:60:26:c9:62:b5:0e:aa:83:2e:ea:44:cb:
20:ce:1e:42:d4:13:1d:9f:6e:9d:5c:fa:02:20:e1:
63:e6:71:63:ee:eb:63:49:c0:7e:e1:ab:2d:9b:b3:
93:d8:0e:69:cf:74:39:d6:99:4a:3a:a4:9d:6b:5b:
8b:cb:15:0a:a2:14:88:9b:00:b1:f8:28:7e:90:78:
2f:db:cc:74:61:50:ef:d0:dd:5a:7e:cf:b0:77:ab:
ce:c6:b2:e0:fc:e5:3e:06:61:02:76:4c:62:9b:bf:
f8:95:3b:44:61:80:1f:50:b1:c9:0a:3b:a1:7d:9f:
c1:cf:49:a1:ef:35:c3:07:de:c6:05:45:58:6b:a1:
40:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8F:E3:61:9B:2B:A4:65:3B:47:5D:B0:37:91:FD:6A:AB:56:DF:D3
X509v3 Authority Key Identifier:
keyid:ED:B2:DC:B9:23:52:13:13:E4:6C:ED:D7:E5:05:C1:E6:71:4C:9C:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e8:f0:cd:d8:38:0e:d1:a8:da:76:7b:08:35:95:dd:8f:5f:
30:31:ba:23:1b:96:cc:cb:26:ab:86:d6:ba:38:c7:6a:1a:5e:
83:d6:15:6c:8b:df:e6:58:b2:c0:35:bc:e6:6a:b7:07:42:6c:
90:a9:18:a6:08:2b:a0:1b:bf:6e:fe:e5:d9:7d:33:85:79:8e:
61:e1:8d:47:82:ee:37:44:1f:6d:57:83:7b:5b:12:61:55:34:
ae:78:a8:23:64:e9:85:3b:96:48:b4:80:ff:9c:41:ec:ed:ef:
b8:70:30:f8:ba:54:92:8f:fe:1a:1e:bd:93:11:f2:58:67:68:
4f:51:0c:55:93:38:70:2e:99:28:94:3a:e8:aa:a0:80:5d:61:
18:eb:43:98:dd:0d:d0:a1:67:6a:28:db:cb:24:b9:7a:90:7d:
0c:ab:22:07:27:cc:89:48:60:85:9b:72:cc:2d:ac:c1:23:61:
a6:96:0f:db:01:1a:0e:37:35:7d:43:7b:66:a7:93:86:d9:96:
5f:e7:e9:65:ad:f4:c9:c9:ed:d2:33:1b:15:1c:9c:22:ae:ce:
cd:32:dd:19:48:e7:97:9d:fd:d0:da:f4:7a:21:9f:79:20:20:
57:c6:ff:19:49:0e:25:28:29:5a:bd:5c:3e:fc:84:bd:d4:f7:
f7:11:c8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:32:33 2025 by rpki-client