Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7a9506-5ee6-4220-bdfc-649d1c18dd8c/1/7XcGdIN9KOpgwoePNCzbNfHjscU.mft
File: 7XcGdIN9KOpgwoePNCzbNfHjscU.mft (raw, json)
Hash identifier: RFZBhErlSg7x67Vve6ysxopp8XCCg8RiMB8IFPW/4Uo=
Subject key identifier: 69:A2:6C:58:90:7C:F6:E9:A5:6F:4F:F5:51:C3:02:CE:27:22:EA:1F
Authority key identifier: ED:77:06:74:83:7D:28:EA:60:C2:87:8F:34:2C:DB:35:F1:E3:B1:C5
Certificate issuer: /CN=ed770674837d28ea60c2878f342cdb35f1e3b1c5
Certificate serial: 0194DEFF10BD23DDD37D98B29D3CC158FDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XcGdIN9KOpgwoePNCzbNfHjscU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7a9506-5ee6-4220-bdfc-649d1c18dd8c/1/7XcGdIN9KOpgwoePNCzbNfHjscU.mft
Manifest number: 114D
Signing time: Fri 07 Feb 2025 06:00:45 +0000
Manifest this update: Fri 07 Feb 2025 06:00:45 +0000
Manifest next update: Sat 08 Feb 2025 06:00:45 +0000
Files and hashes: 1: 7XcGdIN9KOpgwoePNCzbNfHjscU.crl (hash: pO+oxToI4o8o6IEeXy1UJJMoKEeKao6GFORih8vjoRc=)
2: S4NpqlBpA9VT-nHpiPG1rxvRaLM.roa (hash: FggEJzFAR5NkdEu1itwo/zaSCvlxder74yvCrtOXXqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:de:ff:10:bd:23:dd:d3:7d:98:b2:9d:3c:c1:58:fd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed770674837d28ea60c2878f342cdb35f1e3b1c5
Validity
Not Before: Feb 7 06:00:45 2025 GMT
Not After : Feb 8 06:00:45 2025 GMT
Subject: CN=69a26c58907cf6e9a56f4ff551c302ce2722ea1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c7:0e:21:b3:b4:3d:9c:2a:35:0b:27:f3:64:
30:d3:4b:a2:79:51:e8:be:c6:40:7c:a2:97:fd:24:
57:79:34:b0:a3:d0:c8:85:41:0b:f2:cd:b3:f5:74:
52:28:ce:5d:10:fa:b2:40:e9:3e:06:84:c2:6a:aa:
e3:da:5b:96:3f:29:a3:07:1e:b2:18:01:26:7c:2a:
95:4f:2f:2c:32:cc:36:02:1e:73:8e:68:b1:1d:5d:
8b:0c:f2:5d:53:d5:bc:61:44:6f:23:a1:c4:3e:52:
63:ec:79:b4:7d:be:30:8b:b9:3f:61:d2:e1:76:a4:
e9:c7:eb:59:2e:fd:b4:e0:c7:a0:f7:ea:08:59:84:
90:a2:73:a9:dc:a9:c7:82:bc:0b:2e:53:c6:84:6b:
0b:f0:90:f2:4c:b2:32:80:ab:97:29:d8:0f:34:87:
f8:1b:6b:9e:77:ff:45:fa:c1:e1:c4:4c:1e:c3:ff:
ff:28:dc:53:d6:c0:ed:a0:47:b6:60:4f:3b:70:1d:
0c:3c:6b:93:da:d7:17:66:be:3d:c7:62:f6:52:71:
be:7a:b5:64:15:de:75:54:cf:81:02:71:16:40:66:
a1:d4:d3:42:eb:f4:1e:0b:23:f4:74:ad:f7:ee:6a:
26:87:f1:9f:4d:c9:a2:26:6e:ec:51:f1:4e:62:0e:
d0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A2:6C:58:90:7C:F6:E9:A5:6F:4F:F5:51:C3:02:CE:27:22:EA:1F
X509v3 Authority Key Identifier:
keyid:ED:77:06:74:83:7D:28:EA:60:C2:87:8F:34:2C:DB:35:F1:E3:B1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcGdIN9KOpgwoePNCzbNfHjscU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7a9506-5ee6-4220-bdfc-649d1c18dd8c/1/7XcGdIN9KOpgwoePNCzbNfHjscU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7a9506-5ee6-4220-bdfc-649d1c18dd8c/1/7XcGdIN9KOpgwoePNCzbNfHjscU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:02:d1:fb:b8:c1:c0:da:93:85:c5:b9:db:7e:34:74:8c:20:
77:0c:ff:08:cb:d9:63:82:87:26:e2:fd:34:27:6c:1c:8a:78:
6a:30:40:9c:1e:b4:ba:f8:2f:f7:bb:18:19:bb:e7:9b:0e:e9:
39:2f:c1:1e:bc:67:ec:d8:a4:76:67:bb:fe:0d:7b:8b:b6:a1:
bf:a8:d1:a3:7f:76:6c:fc:f4:0a:02:c1:06:2d:05:a8:a5:97:
0c:44:a7:2c:14:eb:24:33:11:78:35:d4:fd:33:b8:f9:17:5e:
41:dc:da:9b:bc:62:bd:e6:5a:6c:31:3c:ea:df:54:58:69:4e:
ce:03:ee:12:4b:85:71:25:e6:91:dd:cf:88:0b:07:34:fe:8c:
3c:9d:2f:9b:94:d9:26:8f:b4:40:6e:3c:13:01:57:3e:83:72:
c3:07:b5:95:07:88:a6:12:1e:3a:1b:b5:bf:1b:86:5b:29:99:
b6:ea:73:dc:b8:b3:95:f2:2b:5e:43:4e:f6:cc:7a:e4:3f:31:
c3:19:cf:66:8a:8c:48:0c:4a:71:95:4e:85:59:5d:8f:29:05:
a0:25:19:e8:f3:98:00:9c:42:a6:1e:63:d7:4a:f9:10:38:bc:
44:ad:50:e4:43:65:3c:23:e8:45:e5:08:9d:ee:4d:b6:75:97:
77:18:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:37:08 2025 by rpki-client