Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
File: Un0m8LBCyUz2f2JeXY5i4qKudVI.mft (raw, json)
Hash identifier: JHvxrDkEQM3wC69rbRGUYJXVoZcMwHYd/Qj3n06x5GA=
Subject key identifier: 0B:EC:08:07:4D:C9:55:50:CA:38:01:7A:3B:F2:A4:55:2F:8E:D3:4C
Authority key identifier: 52:7D:26:F0:B0:42:C9:4C:F6:7F:62:5E:5D:8E:62:E2:A2:AE:75:52
Certificate issuer: /CN=527d26f0b042c94cf67f625e5d8e62e2a2ae7552
Certificate serial: 0198EFB23DE4E8BAA5F8D950B9395C1A4819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
Manifest number: 0621
Signing time: Thu 28 Aug 2025 08:01:32 +0000
Manifest this update: Thu 28 Aug 2025 08:01:32 +0000
Manifest next update: Fri 29 Aug 2025 08:01:32 +0000
Files and hashes: 1: Un0m8LBCyUz2f2JeXY5i4qKudVI.crl (hash: /aPq0QzSshXqXYa5Fj8lYjoRtF7f2sQHb2r+hP5Z8VM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ef:b2:3d:e4:e8:ba:a5:f8:d9:50:b9:39:5c:1a:48:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527d26f0b042c94cf67f625e5d8e62e2a2ae7552
Validity
Not Before: Aug 28 08:01:32 2025 GMT
Not After : Aug 29 08:01:32 2025 GMT
Subject: CN=0bec08074dc95550ca38017a3bf2a4552f8ed34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:f2:98:b0:01:2e:8c:10:8b:d7:f2:6d:7d:
0f:00:2b:4c:76:e3:e8:8f:b2:4f:de:fd:9e:b3:5a:
73:00:c5:16:26:e8:be:c5:f2:97:ee:2e:60:d7:c4:
b6:a7:28:b0:8a:fd:a3:a7:0a:21:ba:49:ff:ac:0e:
c3:67:af:a4:33:9c:5e:fc:67:c9:7a:7f:a3:b0:bf:
3d:75:a4:5f:09:14:6b:bd:a1:3a:11:5a:73:62:9d:
fa:bc:84:b9:2e:fb:75:ad:f3:db:2f:48:24:b9:17:
f9:46:80:36:69:96:ff:8a:df:ed:c0:b3:52:ff:94:
33:5d:ce:62:0c:63:70:b0:18:f8:c1:82:05:28:15:
eb:24:19:72:11:16:eb:49:f9:25:6c:f2:c4:92:08:
e9:21:41:c7:96:88:1d:9f:6e:7d:b9:af:a1:b4:9d:
12:4b:03:d7:89:eb:94:87:42:6d:52:f9:40:6b:92:
0a:4e:2f:d2:ac:83:5c:21:d8:d4:f4:03:f4:50:05:
96:cf:f0:32:1c:08:86:02:0b:b0:43:b1:62:6e:99:
30:1d:8f:9c:74:ef:f2:4b:96:62:93:62:ca:23:b3:
6a:59:6e:c4:32:74:e1:e1:af:9b:21:fa:24:09:26:
8a:2d:47:d8:6e:bd:d1:18:3a:ce:9e:ea:2f:58:0a:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:08:07:4D:C9:55:50:CA:38:01:7A:3B:F2:A4:55:2F:8E:D3:4C
X509v3 Authority Key Identifier:
keyid:52:7D:26:F0:B0:42:C9:4C:F6:7F:62:5E:5D:8E:62:E2:A2:AE:75:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cb:df:78:0a:0b:64:9e:b4:1a:bb:b2:b1:86:d3:a2:31:ab:
29:29:03:ab:ef:9c:ed:af:b7:e9:94:c0:60:b9:aa:81:f2:10:
5b:43:61:c7:1e:80:98:1c:d5:1a:f4:4c:4e:0d:7f:8a:48:2d:
aa:50:23:bd:e8:cc:3b:95:86:17:70:b3:77:22:f1:3e:7f:bb:
c8:41:56:fb:fc:2d:3a:7f:2d:cd:f9:23:79:5a:95:52:1a:62:
7d:40:1c:2c:9a:be:8a:4d:5a:d7:52:dc:53:c7:d6:72:2d:6f:
b5:57:5b:82:fa:f0:ce:07:72:b4:f0:4b:69:c8:52:8a:dd:b6:
99:2a:e9:85:07:96:d7:03:eb:42:7c:3b:b7:3c:19:aa:17:42:
d3:7c:98:2f:6b:0d:b8:5e:3b:bd:50:c7:41:e9:26:74:d4:e5:
84:ff:9c:3c:16:d1:03:37:16:0d:d4:89:78:64:50:8b:2b:2b:
4a:b2:4a:05:0a:81:20:17:c8:c0:b3:45:ef:c0:cd:78:23:a7:
94:1f:83:93:75:af:f5:ed:e6:87:44:5c:54:e4:38:32:36:f5:
10:40:54:ad:96:12:a2:5b:59:ee:bf:03:64:92:63:c1:92:46:
cc:87:9d:99:4e:f1:2b:90:d8:90:7b:82:04:1a:f2:8b:85:9e:
7b:af:4f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:15:48 2025 by rpki-client