Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
File: 0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft (raw, json)
Hash identifier: 0jsPXvMrgBUPqCm0LK7AIby9LhONHkQEOcPXkD+AwM0=
Subject key identifier: 8F:70:06:99:C1:AE:81:34:95:B1:88:E2:1D:10:95:1D:D0:C4:C3:32
Authority key identifier: D1:49:7B:32:47:76:7D:34:99:91:E9:96:CA:B8:AF:7D:49:94:2A:F4
Certificate issuer: /CN=d1497b3247767d349991e996cab8af7d49942af4
Certificate serial: 019730BAFF7DF4BC1CE8537D1311C1A19629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
Manifest number: 1500
Signing time: Mon 02 Jun 2025 13:00:50 +0000
Manifest this update: Mon 02 Jun 2025 13:00:50 +0000
Manifest next update: Tue 03 Jun 2025 13:00:50 +0000
Files and hashes: 1: 0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl (hash: MdNOfewfjoGN+G6pyd0Pg1bsd57Af8R9OXy4+QMq2eM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:ba:ff:7d:f4:bc:1c:e8:53:7d:13:11:c1:a1:96:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1497b3247767d349991e996cab8af7d49942af4
Validity
Not Before: Jun 2 13:00:50 2025 GMT
Not After : Jun 3 13:00:50 2025 GMT
Subject: CN=8f700699c1ae813495b188e21d10951dd0c4c332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:4e:90:9f:b5:b8:bd:36:60:1c:e7:12:13:
28:25:dd:80:9f:87:53:7f:eb:77:81:db:37:7a:fe:
89:a3:72:a8:5c:86:11:27:df:41:dd:6a:c4:1a:ca:
96:74:43:a2:03:3e:54:d0:30:ea:9e:60:26:8f:36:
46:61:85:97:9c:e7:3d:06:d7:3e:8a:70:ab:0c:6f:
c3:91:61:be:60:9a:2b:95:1b:40:6b:3f:d3:50:bb:
26:62:03:26:54:f9:6e:7b:c4:4e:8b:09:ee:e7:c6:
1c:7c:17:a7:62:0a:1b:6e:15:f2:3d:27:e7:86:71:
f0:0e:f9:5a:53:25:33:6f:9c:06:80:df:a7:db:af:
8e:ce:bb:ce:63:1d:4b:5b:ea:05:a0:1c:78:50:ba:
e8:8a:5e:e8:aa:1d:cd:33:f9:3e:fe:b7:96:ea:5d:
45:97:74:30:f2:97:37:c1:3c:3e:4b:77:6b:94:bd:
df:1a:35:46:27:77:7f:4c:be:ea:a4:8f:3e:05:8e:
18:7e:db:fb:9e:44:a3:e1:db:c1:c9:38:cb:40:27:
05:04:48:a5:e5:d1:b0:6d:ae:97:f5:90:83:3e:f4:
47:d9:23:dd:c6:f4:50:06:43:8e:83:52:01:39:84:
1c:9d:61:2b:de:82:95:7d:70:83:f6:bc:44:aa:43:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:70:06:99:C1:AE:81:34:95:B1:88:E2:1D:10:95:1D:D0:C4:C3:32
X509v3 Authority Key Identifier:
keyid:D1:49:7B:32:47:76:7D:34:99:91:E9:96:CA:B8:AF:7D:49:94:2A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:39:a5:37:62:28:d8:6c:48:5c:3e:07:af:79:74:a5:2e:f0:
26:cd:fb:de:b4:f2:4c:6d:b3:51:e2:f1:4d:7e:6e:7a:f3:b8:
44:b9:a2:92:45:2c:66:df:76:88:19:d9:f9:97:96:de:78:d4:
84:99:56:02:92:e5:5b:d9:40:67:ff:3c:6c:25:4d:a0:52:54:
6f:38:cf:7d:95:b7:23:ed:db:e3:f6:5f:aa:c8:1a:98:ca:25:
5b:57:12:8b:8b:11:05:4e:3c:4e:93:7a:23:c5:56:9d:09:51:
ad:76:57:9f:c6:9d:b5:f4:30:b7:47:a6:c5:4a:03:17:da:60:
2b:1e:d2:e5:17:e7:1d:11:49:57:e2:af:bd:41:fe:4f:bc:d6:
b1:55:ae:18:63:01:ff:96:e7:24:41:25:a7:6c:4a:96:76:78:
09:69:20:d3:e6:9f:f8:d1:a5:38:b4:fb:ba:1b:29:cf:b7:14:
0e:9d:e3:f6:6d:c8:12:57:64:0b:ab:1a:c0:90:44:70:b9:8a:
4d:cb:5b:b3:3b:b7:be:b7:f4:6e:78:89:27:8d:32:08:c2:ce:
21:21:5d:0b:35:28:ba:f8:74:ef:6f:8c:a2:94:54:52:47:26:
7d:ed:90:d4:1d:15:28:a2:29:aa:f0:24:b5:3a:7a:77:8c:64:
29:e1:38:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:29:44 2025 by rpki-client