Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft
File: Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft (raw, json)
Hash identifier: cLJdSe/gLQhCk0KeoKU5GK/fC3PHJ2lf63E9UHtdyT0=
Subject key identifier: 45:03:98:6B:7A:60:C1:3A:6F:FF:1B:7B:00:34:28:C1:DA:1D:28:AC
Authority key identifier: 2E:EB:F8:A5:B0:20:16:E4:39:43:92:81:97:38:64:4D:6C:A2:56:42
Certificate issuer: /CN=2eebf8a5b02016e4394392819738644d6ca25642
Certificate serial: 01990F060B438BD8E0E2C5CD3E7B97F4C4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft
Manifest number: 0D79
Signing time: Wed 03 Sep 2025 10:01:18 +0000
Manifest this update: Wed 03 Sep 2025 10:01:18 +0000
Manifest next update: Thu 04 Sep 2025 10:01:18 +0000
Files and hashes: 1: Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.crl (hash: UJr5k1neJg9iyBp15NfCRYJzx1XrAFiBOLwKVqq4SRg=)
2: VW4qDKZrndV7Z-51YQQt1hWe-7I.roa (hash: e6Hx4gZ7Dz7JbD/M0yY7GRmntMNu0QhLfKCnMedrpm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:06:0b:43:8b:d8:e0:e2:c5:cd:3e:7b:97:f4:c4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebf8a5b02016e4394392819738644d6ca25642
Validity
Not Before: Sep 3 10:01:18 2025 GMT
Not After : Sep 4 10:01:18 2025 GMT
Subject: CN=4503986b7a60c13a6fff1b7b003428c1da1d28ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:78:56:26:ef:28:92:e2:70:c1:c1:f0:07:
30:13:26:4b:9c:9e:2a:10:87:c4:e4:bd:59:21:24:
64:dc:e2:0c:6d:a2:b7:97:91:4d:4a:02:fe:89:f9:
fb:a6:41:aa:50:88:b2:80:d8:8f:5a:78:d0:49:5d:
c7:69:2b:18:aa:07:19:40:8e:dc:5e:a9:d2:87:ba:
72:47:d8:67:0a:cb:53:8c:69:e8:ab:cb:70:3f:7a:
f9:21:7b:d5:68:6d:53:b8:24:8d:76:55:c3:59:10:
6b:81:93:dd:14:9c:67:07:81:45:5d:68:1b:ca:92:
2d:89:23:0a:08:28:1f:cb:d6:f6:6e:38:b4:af:14:
16:ce:48:dc:30:18:33:49:e7:27:8e:8c:5f:54:fb:
33:03:da:15:6c:c5:a7:0c:5f:fc:4f:a3:b6:93:0b:
02:be:c4:27:87:db:99:83:ce:ed:7f:d0:1d:03:7d:
7c:f9:71:93:5e:77:78:c8:eb:51:86:98:40:45:ee:
53:67:ca:64:9e:52:06:44:79:aa:b5:9b:4d:3e:7e:
b8:45:56:f6:09:9b:58:eb:bb:4c:9d:bb:04:98:ec:
25:ed:03:98:27:11:07:dd:20:9b:99:37:eb:48:67:
8e:90:ce:40:60:b0:8c:e6:e5:73:5f:0d:84:dd:bd:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:03:98:6B:7A:60:C1:3A:6F:FF:1B:7B:00:34:28:C1:DA:1D:28:AC
X509v3 Authority Key Identifier:
keyid:2E:EB:F8:A5:B0:20:16:E4:39:43:92:81:97:38:64:4D:6C:A2:56:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:82:c0:a5:77:04:db:fa:5b:48:a7:e3:28:06:1a:2d:42:39:
42:05:1a:c7:1d:b3:82:1e:3e:fe:68:c2:35:8c:70:9c:15:0f:
fb:be:b2:49:23:36:a4:18:8f:98:22:db:27:3b:9a:b3:55:43:
6f:bf:34:7b:19:28:17:cd:39:e6:91:f1:d8:23:ca:9f:0b:9f:
cc:83:e5:36:db:3b:2d:61:d2:a3:10:f4:be:9f:77:60:bb:dc:
ee:af:09:0b:1c:6a:b4:9b:36:6f:83:a3:e1:5e:d3:7c:3b:76:
21:33:b7:b1:2a:f5:c0:ea:0b:bb:95:20:53:70:af:9a:e3:46:
43:a8:d7:f9:66:9f:1f:23:36:1a:14:f6:60:ec:f1:f0:01:35:
2c:8c:ab:58:31:d8:fd:6a:a2:6c:0c:ab:d2:3c:fa:f1:aa:51:
50:31:ef:c7:b2:4e:7f:bd:f5:59:3e:2c:bf:c2:70:90:57:7c:
26:89:bf:4a:27:2c:7d:18:2a:56:21:ae:bd:e3:2d:62:61:e3:
31:42:09:5a:8e:c7:45:34:ec:00:df:73:54:31:1d:55:fc:f8:
df:4a:ba:c0:e1:cd:3d:3b:4c:b4:3c:b5:3e:29:05:5f:c6:a7:
a3:b5:b2:1e:1a:6c:ba:2c:0f:39:50:ce:96:8f:b6:33:dd:67:
56:db:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:12:10 2025 by rpki-client