Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
File: 8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft (raw, json)
Hash identifier: 7sza6CVZpXLFRWCLe9EkUUH2vftQ81ebPvtq3xHH6OQ=
Subject key identifier: EC:31:C1:24:67:D0:2A:5C:36:33:7E:8C:85:C2:96:5D:85:77:93:2E
Authority key identifier: F3:0C:57:E1:B7:D7:D6:8B:49:51:D8:C4:7E:CF:57:9A:3F:0E:F1:B7
Certificate issuer: /CN=f30c57e1b7d7d68b4951d8c47ecf579a3f0ef1b7
Certificate serial: 0195E0EB7F6B04707DF619FD87BA1235B0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wxX4bfX1otJUdjEfs9Xmj8O8bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
Manifest number: 0238
Signing time: Sat 29 Mar 2025 08:01:24 +0000
Manifest this update: Sat 29 Mar 2025 08:01:24 +0000
Manifest next update: Sun 30 Mar 2025 08:01:24 +0000
Files and hashes: 1: 8wxX4bfX1otJUdjEfs9Xmj8O8bc.crl (hash: BwqRASSndFZr4fGSdwTXmY3lmBuVzl4rBI7bVuvHy7w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:7f:6b:04:70:7d:f6:19:fd:87:ba:12:35:b0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30c57e1b7d7d68b4951d8c47ecf579a3f0ef1b7
Validity
Not Before: Mar 29 08:01:24 2025 GMT
Not After : Mar 30 08:01:24 2025 GMT
Subject: CN=ec31c12467d02a5c36337e8c85c2965d8577932e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:af:1f:31:57:f2:a5:21:af:e9:05:d2:30:
87:e4:a5:fe:d3:cc:9f:b7:ed:95:a1:34:48:49:65:
63:a8:93:c0:9c:88:de:4e:38:1d:02:46:1c:04:02:
32:af:80:ad:f7:9d:6a:9f:76:0d:58:03:b9:e8:f5:
5c:65:c8:50:ad:19:10:de:ed:38:16:a3:31:8a:49:
dc:0e:72:82:42:09:28:d1:ac:5b:80:fc:af:02:6d:
30:28:c1:5b:a9:40:bb:16:60:8d:a0:f2:ae:76:2c:
7d:cf:78:45:c0:08:be:1d:52:b5:8d:b9:7b:48:5f:
9e:f3:a9:d3:70:4f:83:ce:8e:2b:2f:5c:6e:40:de:
4d:fc:a4:d6:3e:83:bd:39:11:eb:d7:45:cb:a8:df:
f4:0b:f7:8c:f6:0c:e4:87:ea:06:be:5a:8e:8f:be:
2d:df:d7:db:ff:1c:b0:ce:6d:98:aa:3a:71:3d:eb:
8d:44:ef:24:cf:b7:c3:d0:e1:47:16:cb:6a:81:84:
40:d6:62:bf:22:d8:47:15:79:9d:60:ed:ff:a6:23:
eb:7f:32:06:fb:69:f2:52:5c:1c:08:42:e5:92:4c:
48:7f:0a:25:d1:f3:10:1b:81:85:1f:38:b1:06:bd:
53:37:dc:9d:74:03:6f:19:50:c9:4a:1b:0a:23:a7:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:31:C1:24:67:D0:2A:5C:36:33:7E:8C:85:C2:96:5D:85:77:93:2E
X509v3 Authority Key Identifier:
keyid:F3:0C:57:E1:B7:D7:D6:8B:49:51:D8:C4:7E:CF:57:9A:3F:0E:F1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wxX4bfX1otJUdjEfs9Xmj8O8bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:27:c3:5d:1a:22:61:b2:17:09:3d:8e:35:b4:12:cd:59:08:
85:8a:ac:b6:9a:6d:11:19:ce:e4:1a:28:c2:70:51:d7:d6:d2:
be:b2:fa:26:43:59:bb:47:6d:61:cc:0a:6a:21:4a:9f:fe:ad:
ce:e8:20:30:db:21:7e:c0:16:f2:40:ff:d6:13:f7:64:71:60:
e3:a8:e6:0f:fc:6d:9b:3e:4d:87:7e:78:59:af:4c:76:a2:c6:
2c:e3:1e:cf:c9:02:2c:fa:92:85:52:e8:c2:c6:2e:2f:fc:57:
cd:bd:a5:dd:da:9a:69:f9:58:9e:03:e1:4d:1f:b8:dd:92:e8:
35:b3:89:e0:ab:37:54:a5:c8:d0:6c:c5:90:cc:e6:b3:45:f6:
bf:6a:cf:bc:db:2b:60:56:ba:4f:95:ea:4d:06:4e:bb:3b:40:
d2:db:4e:73:22:98:a0:26:20:97:7a:4f:33:58:42:80:fd:4b:
0a:53:46:f5:da:03:4e:5f:5a:56:fe:29:a6:44:ba:d8:a6:02:
23:b7:3e:67:7b:6e:38:8f:a9:70:db:08:7d:54:4a:e7:3c:31:
19:8a:e1:76:b3:5e:52:47:f9:c6:b5:d7:f4:ed:be:82:96:2d:
02:73:53:d7:86:40:97:16:3e:f1:77:85:d2:31:42:da:a2:8a:
57:87:4b:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXg639rBHB99hn9h7oSNbDPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMGM1N2UxYjdkN2Q2OGI0OTUxZDhjNDdlY2Y1NzlhM2Yw
ZWYxYjcwHhcNMjUwMzI5MDgwMTI0WhcNMjUwMzMwMDgwMTI0WjAzMTEwLwYDVQQD
EyhlYzMxYzEyNDY3ZDAyYTVjMzYzMzdlOGM4NWMyOTY1ZDg1Nzc5MzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwevHzFX8qUhr+kF0jCH5KX+08yf
t+2VoTRISWVjqJPAnIjeTjgdAkYcBAIyr4Ct951qn3YNWAO56PVcZchQrRkQ3u04
FqMxikncDnKCQgko0axbgPyvAm0wKMFbqUC7FmCNoPKudix9z3hFwAi+HVK1jbl7
SF+e86nTcE+Dzo4rL1xuQN5N/KTWPoO9ORHr10XLqN/0C/eM9gzkh+oGvlqOj74t
39fb/xywzm2YqjpxPeuNRO8kz7fD0OFHFstqgYRA1mK/IthHFXmdYO3/piPrfzIG
+2nyUlwcCELlkkxIfwol0fMQG4GFHzixBr1TN9yddANvGVDJShsKI6fWLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwxwSRn0CpcNjN+jIXCll2Fd5MuMB8GA1UdIwQY
MBaAFPMMV+G319aLSVHYxH7PV5o/DvG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHd4WDRiZlgxb3RKVWRqRWZzOVhtajhPOGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85MzNhZDgtYzBiYi00YmUxLTg0YTct
MWExZGMwODkwNjc4LzEvOHd4WDRiZlgxb3RKVWRqRWZzOVhtajhPOGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85MzNhZDgtYzBiYi00YmUxLTg0YTctMWExZGMwODkwNjc4
LzEvOHd4WDRiZlgxb3RKVWRqRWZzOVhtajhPOGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyfDXRoi
YbIXCT2ONbQSzVkIhYqstpptERnO5BoownBR19bSvrL6JkNZu0dtYcwKaiFKn/6t
zuggMNshfsAW8kD/1hP3ZHFg46jmD/xtmz5Nh354Wa9MdqLGLOMez8kCLPqShVLo
wsYuL/xXzb2l3dqaaflYngPhTR+43ZLoNbOJ4Ks3VKXI0GzFkMzms0X2v2rPvNsr
YFa6T5XqTQZOuztA0ttOcyKYoCYgl3pPM1hCgP1LClNG9doDTl9aVv4ppkS62KYC
I7c+Z3tuOI+pcNsIfVRK5zwxGYrhdrNeUkf5xrXX9O2+gpYtAnNT14ZAlxY+8XeF
0jFC2qKKV4dLhA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:11:27 2025 by rpki-client