Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e792b0-76c2-4ce5-a45f-2cd5fac2c44e/1/d9wwGzxBMxuLSPgm9YcbHYXsNZg.mft
File: d9wwGzxBMxuLSPgm9YcbHYXsNZg.mft (raw, json)
Hash identifier: 7j3L9QckokP0NLYs8Bf8W5Q53AB/WHNdPknhmampRJY=
Subject key identifier: 70:33:09:E6:45:E6:82:9A:BA:A3:57:55:7B:DA:0F:65:06:84:34:11
Authority key identifier: 77:DC:30:1B:3C:41:33:1B:8B:48:F8:26:F5:87:1B:1D:85:EC:35:98
Certificate issuer: /CN=77dc301b3c41331b8b48f826f5871b1d85ec3598
Certificate serial: 0196E757EAE203EC26475643DA1425B8863A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9wwGzxBMxuLSPgm9YcbHYXsNZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e792b0-76c2-4ce5-a45f-2cd5fac2c44e/1/d9wwGzxBMxuLSPgm9YcbHYXsNZg.mft
Manifest number: 1258
Signing time: Mon 19 May 2025 07:00:20 +0000
Manifest this update: Mon 19 May 2025 07:00:20 +0000
Manifest next update: Tue 20 May 2025 07:00:20 +0000
Files and hashes: 1: d9wwGzxBMxuLSPgm9YcbHYXsNZg.crl (hash: 8OJYHgAHv0XIK5N1RmCb61XstuxEUkbwtQHWzm5cy7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:57:ea:e2:03:ec:26:47:56:43:da:14:25:b8:86:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dc301b3c41331b8b48f826f5871b1d85ec3598
Validity
Not Before: May 19 07:00:20 2025 GMT
Not After : May 20 07:00:20 2025 GMT
Subject: CN=703309e645e6829abaa357557bda0f6506843411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:6b:a7:bc:7c:5d:ec:93:12:80:9d:85:1d:
e9:f1:54:33:33:83:24:f7:5e:65:27:49:e5:8a:a9:
57:31:38:45:ae:e6:73:1f:fd:04:a2:53:fa:19:25:
be:c5:ca:0e:97:19:e0:25:71:ac:ef:2e:f5:58:55:
46:6f:fe:bd:ce:7c:75:c3:7a:59:6c:de:c3:17:1c:
2b:30:8f:a0:38:e5:2d:1f:53:9a:bd:4a:8d:e9:7d:
f0:31:ee:e3:46:49:bb:84:92:98:7f:b6:18:b4:e1:
32:3d:b1:df:2c:f3:24:12:9b:55:28:76:46:cc:ff:
4b:fd:99:33:13:6c:d9:6d:a5:84:7e:d7:bc:df:c1:
aa:e8:e9:f8:64:8b:f1:22:e5:a1:55:fe:1e:bd:d6:
cc:42:a4:56:9f:62:bc:6a:fa:dc:46:31:83:03:c3:
b0:d4:b5:a1:1d:03:c6:8e:b0:b5:50:01:7e:84:64:
5f:5e:6b:67:49:db:bc:b7:48:6e:17:df:7e:03:b9:
5a:3b:13:69:91:31:14:eb:82:f6:09:24:3e:b1:65:
e0:7e:39:6c:2e:e0:d5:8b:00:65:7d:89:1b:a9:d0:
a9:be:a8:93:c0:6d:e5:5a:19:80:bc:78:ee:eb:11:
01:90:17:cf:5b:d3:4a:5b:1f:1c:3a:3c:91:b9:e6:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:33:09:E6:45:E6:82:9A:BA:A3:57:55:7B:DA:0F:65:06:84:34:11
X509v3 Authority Key Identifier:
keyid:77:DC:30:1B:3C:41:33:1B:8B:48:F8:26:F5:87:1B:1D:85:EC:35:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9wwGzxBMxuLSPgm9YcbHYXsNZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e792b0-76c2-4ce5-a45f-2cd5fac2c44e/1/d9wwGzxBMxuLSPgm9YcbHYXsNZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e792b0-76c2-4ce5-a45f-2cd5fac2c44e/1/d9wwGzxBMxuLSPgm9YcbHYXsNZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5f:e0:36:56:58:3d:aa:bc:c5:f0:89:a2:3a:6f:d0:00:90:
c0:96:1e:91:d9:65:32:a6:da:e8:27:56:57:e5:be:d3:72:23:
e0:a5:9b:6b:dd:14:a3:5c:8e:8d:5f:b1:a5:fe:db:13:65:95:
08:f2:50:50:ea:00:dd:6c:bd:08:26:50:23:e8:ed:ee:e7:34:
b6:91:7d:52:8c:82:ec:86:f3:af:6c:40:c0:e2:01:bc:41:bb:
50:b6:f8:e0:9f:c1:ae:86:3f:78:95:0b:25:9e:72:f7:d1:02:
c3:88:89:a0:1f:84:18:63:de:25:b4:2c:20:d1:95:96:17:1f:
07:4f:65:e5:eb:ff:99:ea:cb:35:59:1f:ee:66:d9:f2:7a:8e:
c5:04:49:72:98:75:d4:bb:0c:76:92:65:d9:57:ab:a6:0a:8f:
71:25:c3:b1:7f:f1:fc:0d:79:c3:42:1d:bf:05:74:5d:6f:77:
8c:ea:4d:b4:9d:7f:69:92:cf:e4:5e:20:e0:2d:c4:24:83:3b:
6a:8a:44:68:6e:10:79:5f:1f:77:55:20:87:0e:c8:4d:33:95:
68:e2:0b:ec:77:72:38:05:09:e1:a7:08:39:c9:78:26:d4:83:
e6:ce:76:5a:c7:8b:27:cf:49:80:3d:e2:2e:83:34:f1:58:99:
07:bc:2f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:56:48 2025 by rpki-client