Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
File: HQ2zVo5FXz2isidKnVJcrAkxx9U.mft (raw, json)
Hash identifier: G4uZlumUlE02CV6QuqKih4mDLTaMa0V8UwNQC68gmkQ=
Subject key identifier: 71:EF:44:8A:8D:C7:73:0F:E5:66:6C:39:33:25:BC:F4:09:45:FB:06
Authority key identifier: 1D:0D:B3:56:8E:45:5F:3D:A2:B2:27:4A:9D:52:5C:AC:09:31:C7:D5
Certificate issuer: /CN=1d0db3568e455f3da2b2274a9d525cac0931c7d5
Certificate serial: 0197819FF4E75751A9D0DD57F117165AE4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
Manifest number: 03D4
Signing time: Wed 18 Jun 2025 06:00:33 +0000
Manifest this update: Wed 18 Jun 2025 06:00:33 +0000
Manifest next update: Thu 19 Jun 2025 06:00:33 +0000
Files and hashes: 1: HQ2zVo5FXz2isidKnVJcrAkxx9U.crl (hash: RhgmA3iIjGYa0/g0ibIyV48QqWueqoZnzJHYKAE1qg0=)
2: yht62Ehavo3uZINByDHEHOjVZVw.roa (hash: mqAvN4VPlszrLeatuKNPPUoNf7NdmTA8jofCmdZ20jg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:9f:f4:e7:57:51:a9:d0:dd:57:f1:17:16:5a:e4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0db3568e455f3da2b2274a9d525cac0931c7d5
Validity
Not Before: Jun 18 06:00:33 2025 GMT
Not After : Jun 19 06:00:33 2025 GMT
Subject: CN=71ef448a8dc7730fe5666c393325bcf40945fb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:e9:e2:25:66:e3:6d:03:2f:b4:cb:13:e7:
93:14:e7:95:ca:05:4e:39:7a:42:8c:41:c6:ba:ac:
3f:38:fb:f8:6b:5a:e6:c0:76:eb:15:0b:d9:b2:d1:
34:c3:78:ff:ba:51:1f:78:fb:d3:1c:07:87:45:30:
67:cf:e4:a8:cd:8a:b1:3f:8a:63:33:f9:da:e6:6e:
fd:26:13:99:21:fc:94:33:ca:b5:a3:7f:66:2a:4c:
98:70:c4:43:89:29:7f:6e:34:90:5b:03:58:24:2c:
1e:a5:6a:d6:a7:05:76:a9:5d:88:30:2e:3e:a2:22:
3f:2c:ed:85:63:48:29:b8:b6:79:34:32:9a:2c:4f:
19:7a:90:b9:54:06:9e:0b:41:f7:08:04:96:ad:3b:
81:88:c5:fb:26:6e:00:38:28:9b:6a:cc:c4:8f:71:
fa:cb:dd:2e:82:43:5f:e6:62:59:cd:1c:e1:0f:14:
dc:be:8d:e6:ec:0e:98:6b:e5:52:f7:cb:cd:bf:6d:
15:28:2b:40:5d:d1:f4:6a:7e:4d:64:26:17:5c:bb:
47:a6:2b:ad:90:c7:bc:82:c0:cb:47:37:bd:25:32:
d4:56:fc:af:16:a6:ad:ad:55:f5:27:56:a1:cd:ef:
93:68:75:5b:cc:72:9a:ae:ce:bf:0d:23:59:dc:ec:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EF:44:8A:8D:C7:73:0F:E5:66:6C:39:33:25:BC:F4:09:45:FB:06
X509v3 Authority Key Identifier:
keyid:1D:0D:B3:56:8E:45:5F:3D:A2:B2:27:4A:9D:52:5C:AC:09:31:C7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fa:19:90:8e:98:13:31:a0:f7:dc:46:d7:ee:17:bb:ea:f3:
b9:4b:ff:4f:85:01:44:31:e8:f3:be:3d:d0:4e:4f:47:99:20:
d1:dc:78:e6:76:f3:99:4f:4c:2d:9b:36:a4:f0:8a:6c:d1:63:
33:f6:f7:dd:38:9c:a2:45:f2:88:81:00:94:47:d5:3e:28:f9:
01:ba:26:9f:ae:8e:d5:7d:32:07:15:a8:ae:d8:f1:8a:24:9f:
c3:fe:a4:0e:89:b1:14:4b:ba:b1:ad:a7:08:80:8a:c8:20:d5:
84:ce:c5:3e:fe:e4:32:c1:06:37:68:1f:e9:66:51:0a:4f:88:
9a:5c:58:11:bd:34:9f:72:e4:08:df:74:9c:cf:5a:5d:23:e7:
60:f8:ff:f4:e7:f4:8c:af:39:a6:77:01:89:12:d7:29:86:6b:
62:a6:6b:21:5d:b3:a6:8e:8c:00:d1:7f:f0:17:fa:ab:93:21:
15:38:7e:2c:66:55:05:d9:a1:ea:69:43:9d:35:15:f5:56:46:
7a:8f:66:32:67:b9:a6:6f:58:a0:96:17:00:31:21:5d:80:ad:
e0:70:8f:a0:a6:ff:9f:ed:15:8b:03:d8:0c:96:2d:b6:9a:84:
98:d6:20:59:72:a0:67:d8:b6:40:b2:8a:b2:0b:b3:59:05:ac:
b2:76:88:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:36:44 2025 by rpki-client