Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
File: AxGHu2TIff3S-gLy2F1HnsJoPlc.mft (raw, json)
Hash identifier: KrGIJsIkSFXnZfIK4ZUyqZMNSh5idTRetK4+B13AH6E=
Subject key identifier: 13:1C:DD:8A:15:1B:3E:00:BE:C4:05:5A:FC:AA:C8:A6:F5:4F:B8:70
Authority key identifier: 03:11:87:BB:64:C8:7D:FD:D2:FA:02:F2:D8:5D:47:9E:C2:68:3E:57
Certificate issuer: /CN=031187bb64c87dfdd2fa02f2d85d479ec2683e57
Certificate serial: 01975EA6B734DC7A7FFD835F2E19F2ADF558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
Manifest number: 0F03
Signing time: Wed 11 Jun 2025 11:01:13 +0000
Manifest this update: Wed 11 Jun 2025 11:01:13 +0000
Manifest next update: Thu 12 Jun 2025 11:01:13 +0000
Files and hashes: 1: 7Pk-IrjKbSkMaIFV6WzwQN1I03M.roa (hash: Hp4qd3j7wtXHjgK8l1L7RXVKrLRDd0CHGKAoHn9hvnU=)
2: AxGHu2TIff3S-gLy2F1HnsJoPlc.crl (hash: TQ/m5kM0zOew4zihoarkJ7Ms2qVvmx/zYRM5LUM81fM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:a6:b7:34:dc:7a:7f:fd:83:5f:2e:19:f2:ad:f5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031187bb64c87dfdd2fa02f2d85d479ec2683e57
Validity
Not Before: Jun 11 11:01:13 2025 GMT
Not After : Jun 12 11:01:13 2025 GMT
Subject: CN=131cdd8a151b3e00bec4055afcaac8a6f54fb870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:4c:46:46:c8:d7:a1:70:de:03:96:72:c5:
dc:00:17:d5:95:47:c3:59:30:e3:10:3b:97:4e:0f:
ec:83:3e:a2:37:6a:b7:0e:9f:1d:ce:60:08:27:86:
62:f3:3a:3e:c6:c1:ce:eb:d9:bc:e6:2d:94:b1:ab:
c5:ee:3f:65:f4:f2:e8:49:8a:e8:f9:c1:2e:c6:0f:
de:a3:c5:fc:c7:0b:26:f1:54:2b:1a:8a:a5:76:54:
c9:a8:84:85:22:52:0f:68:17:da:47:7a:33:44:af:
54:4c:ac:0a:d4:0b:c1:68:ac:aa:d7:61:ed:1f:f4:
3f:eb:59:df:02:02:2d:cf:ff:25:a3:e3:42:5d:5d:
e4:07:de:ba:a5:45:d6:cf:8c:a8:e5:01:e7:f1:60:
05:0d:46:89:a2:a1:e0:f7:90:75:b8:21:8b:ff:6d:
a1:81:50:e1:ac:39:66:d7:b0:87:c7:27:be:61:80:
c7:f6:2b:7f:33:94:9a:98:25:1f:a2:07:03:d0:14:
0a:64:97:30:1a:b2:cd:71:9d:95:2d:8d:7b:1c:7d:
dc:c2:3e:a7:9a:cb:9b:ba:4a:13:bd:0c:7a:4f:2a:
6d:7f:e6:e7:3f:86:f8:0b:a8:b3:77:95:de:a7:f9:
04:26:b9:8b:dc:e8:ca:f2:2f:06:78:91:de:1b:80:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1C:DD:8A:15:1B:3E:00:BE:C4:05:5A:FC:AA:C8:A6:F5:4F:B8:70
X509v3 Authority Key Identifier:
keyid:03:11:87:BB:64:C8:7D:FD:D2:FA:02:F2:D8:5D:47:9E:C2:68:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a6:83:ca:83:6b:bf:ed:22:02:96:69:7e:8b:0c:f4:6d:a5:
a0:10:e9:b8:b9:15:9d:7c:71:96:dc:dc:6e:2e:34:74:bd:45:
90:c9:1f:96:1a:1a:48:36:fd:cd:79:9a:a4:e3:e1:39:80:7e:
9e:ff:ab:49:8d:60:c7:a9:94:70:cf:8e:36:89:b9:27:2c:5c:
6b:3f:a4:52:a9:9c:d0:77:d3:df:bb:39:03:d5:52:c2:b4:e9:
bb:76:ea:f5:b0:9c:b0:73:c5:45:51:69:88:d5:0a:2b:e9:a1:
8b:4d:c3:f2:7a:f6:d0:c5:24:2e:ec:8a:5d:cb:60:bc:63:a2:
25:5d:f1:4a:37:1d:5f:75:aa:ea:26:80:1e:89:d4:a3:31:e9:
2f:a6:b8:e7:da:54:49:4e:a1:72:04:a0:e6:1c:93:54:62:77:
5e:27:b9:44:a4:f9:f5:14:ae:8b:6f:04:2b:df:99:10:84:2a:
42:75:54:a6:ed:03:5e:62:7b:b2:1e:a7:8b:00:f9:f7:e9:0d:
83:ee:ff:13:a2:35:0a:36:60:72:fe:40:8d:3e:e4:f5:e9:1b:
04:ef:6c:82:97:cc:64:47:fa:62:96:ec:39:4d:75:3b:8d:22:
1e:0b:2c:e0:73:64:43:7b:8e:34:3c:28:97:f4:f1:66:d9:9c:
6c:f4:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:02:21 2025 by rpki-client