Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
File: SXoXzvuUeLbK6PZdWfsepdB2LWg.mft (raw, json)
Hash identifier: PIbRMEwmak/EJin6/zm+SaM6pgn99ZXVBIdUHMHY874=
Subject key identifier: 8E:A2:1E:5A:BB:7A:F0:01:D5:DD:D5:B6:A1:69:27:D9:4E:ED:F0:5E
Authority key identifier: 49:7A:17:CE:FB:94:78:B6:CA:E8:F6:5D:59:FB:1E:A5:D0:76:2D:68
Certificate issuer: /CN=497a17cefb9478b6cae8f65d59fb1ea5d0762d68
Certificate serial: 01977CB0E52466F1187928E4B8D261C649B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
Manifest number: 09D2
Signing time: Tue 17 Jun 2025 07:00:57 +0000
Manifest this update: Tue 17 Jun 2025 07:00:57 +0000
Manifest next update: Wed 18 Jun 2025 07:00:57 +0000
Files and hashes: 1: SXoXzvuUeLbK6PZdWfsepdB2LWg.crl (hash: 2BZ4IFuog5IDWyn50DLI33QJMQ8Nh+FItCRnWj4UjUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b0:e5:24:66:f1:18:79:28:e4:b8:d2:61:c6:49:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497a17cefb9478b6cae8f65d59fb1ea5d0762d68
Validity
Not Before: Jun 17 07:00:57 2025 GMT
Not After : Jun 18 07:00:57 2025 GMT
Subject: CN=8ea21e5abb7af001d5ddd5b6a16927d94eedf05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:5a:70:1c:4d:0e:4e:72:ea:f6:7b:7d:f1:
2b:04:ae:43:8b:4e:8d:77:32:f6:99:de:44:8c:67:
23:b4:cb:cc:f7:db:e2:c2:ab:b3:47:5a:a6:f0:f1:
76:e1:ea:99:0c:c8:f0:ec:ba:c7:4f:90:59:a4:83:
76:70:c9:e6:ef:88:45:9e:00:d7:c5:03:8b:cb:c6:
16:8b:11:72:22:f3:0a:f1:5b:4c:1d:3d:b8:72:ee:
fd:6e:2b:1d:b4:35:72:d7:9b:04:96:d5:ba:50:ec:
d2:61:56:d6:3e:e8:44:fc:66:c3:2b:20:16:4f:b1:
e9:da:0b:bc:64:81:23:c7:b5:6e:c6:b3:81:1e:0c:
aa:3b:d6:f9:64:8e:65:a4:8b:a7:89:bd:cf:87:87:
29:67:af:0b:ec:bd:82:80:37:68:ca:43:d9:36:86:
a4:72:82:ed:e6:0d:a2:62:96:98:02:3f:0e:ba:fa:
fe:8b:8e:96:ae:fe:5a:ed:17:db:4a:68:3c:7e:1d:
90:4f:9e:4f:a0:c6:81:ef:43:65:4f:78:1a:4a:50:
20:72:7e:3a:eb:42:18:d5:26:9b:aa:d4:7d:21:09:
8b:b6:a0:f6:77:88:39:f1:8c:06:47:66:61:94:25:
a2:75:f9:cc:87:47:54:27:e1:f1:7f:82:c6:1a:62:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A2:1E:5A:BB:7A:F0:01:D5:DD:D5:B6:A1:69:27:D9:4E:ED:F0:5E
X509v3 Authority Key Identifier:
keyid:49:7A:17:CE:FB:94:78:B6:CA:E8:F6:5D:59:FB:1E:A5:D0:76:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ca:a9:2e:f9:4b:89:da:4c:87:d7:3e:8e:d7:07:e9:de:68:
59:4f:fd:fa:1e:14:bc:16:bd:d2:c5:1a:06:6a:ca:2f:18:16:
ce:40:37:a5:0b:1f:1f:4b:bc:6c:68:a4:a5:a1:60:ad:75:74:
e9:7e:d1:8f:f8:7d:fc:d3:f2:75:e3:13:4e:a7:e0:5c:3f:1c:
13:57:58:fc:8a:1f:ab:aa:78:db:6a:51:04:4c:a3:a4:ba:14:
39:13:b5:d5:c3:0c:71:34:1c:5f:28:86:9a:be:c5:96:50:21:
c2:29:60:2b:4a:86:a6:ab:93:a7:fe:36:7b:39:77:fc:fd:a9:
1f:e7:af:69:33:c4:d5:6f:ca:57:07:c6:84:e9:7f:d3:ae:9e:
07:17:0f:a8:e2:f9:35:33:f1:71:e6:47:60:92:6c:8e:99:61:
ff:7a:ec:69:2b:18:59:0b:e5:60:96:51:e4:c0:b4:52:85:c4:
a1:82:5c:45:46:de:0f:31:1b:c7:61:7d:a6:2d:05:e0:9c:22:
41:be:b4:3b:df:bb:2e:f7:c4:37:58:ab:97:36:33:67:d8:b9:
8a:16:15:34:d6:b6:33:56:95:b5:e6:05:36:c8:af:ed:e0:40:
a0:09:fd:23:18:bf:fd:3c:a1:1e:0e:1e:e2:2c:30:18:58:c6:
5e:a8:a0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:20:03 2025 by rpki-client