Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.mft
File: kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.mft (raw, json)
Hash identifier: lOwbArJcVYQzvUEXiD3ekgRVvjdQtsakkJ9OtqGSvuM=
Subject key identifier: A6:D1:7F:C5:86:64:4E:DD:C1:4F:39:7F:05:0D:60:B1:0E:66:06:95
Authority key identifier: 90:AF:98:73:83:86:5A:4A:FC:67:40:3B:60:D3:F3:38:9F:69:5F:5B
Certificate issuer: /CN=90af987383865a4afc67403b60d3f3389f695f5b
Certificate serial: 01892A47D4A90FC1AFCA231EBD7350532F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.mft
Manifest number: 0735
Signing time: Thu 06 Jul 2023 08:18:17 +0000
Manifest this update: Thu 06 Jul 2023 08:18:17 +0000
Manifest next update: Fri 07 Jul 2023 08:18:17 +0000
Files and hashes: 1: 1-U93vkX4Yb_VWIBq9kJnKTvcSBM.roa (hash: 7pQCZjS2z6+K/Y8xg7yaKW/1hpPkt6DGDMD6QllNOeo=)
2: kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.crl (hash: Z0BzZmJpX4CLzMZU3L2PjcmyCQK15XtLRmVouqp5DiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:47:d4:a9:0f:c1:af:ca:23:1e:bd:73:50:53:2f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90af987383865a4afc67403b60d3f3389f695f5b
Validity
Not Before: Jul 6 08:18:17 2023 GMT
Not After : Jul 7 08:18:17 2023 GMT
Subject: CN=a6d17fc586644eddc14f397f050d60b10e660695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2c:90:43:e8:79:ee:d5:9c:59:24:63:fb:75:
54:98:a4:ae:f8:ff:12:df:9b:40:0a:df:08:8b:11:
5c:96:df:a8:6e:c1:1c:ca:f0:da:ad:f2:f6:fb:9b:
c5:85:03:88:8c:11:3a:fb:73:34:41:2a:9f:f9:4e:
3a:49:3d:13:84:b0:d5:da:38:f7:3f:62:b9:22:c3:
0d:a0:e9:2f:44:d9:03:1a:cb:3d:6d:ae:48:e3:fc:
8b:fb:ee:81:4b:5e:1b:4d:2f:06:6e:35:98:14:9c:
20:ee:ee:32:05:31:af:d2:ed:70:33:57:01:ef:ff:
cf:14:7b:a1:2d:34:cb:79:24:da:53:a5:27:32:ad:
09:60:ef:84:c5:aa:49:9f:9c:84:bc:57:93:8a:6b:
51:18:6a:cf:25:54:23:09:0f:4d:40:8d:4a:02:15:
d7:a4:77:62:9e:fe:7b:b3:d4:e2:57:38:de:14:16:
4e:a7:ee:21:0b:f3:56:f9:ad:fa:4f:e0:9b:03:86:
bd:63:97:59:e0:30:ca:99:00:09:21:d7:99:c5:1b:
15:6d:5f:01:6e:73:52:54:75:f3:eb:7e:36:30:38:
e6:80:ee:b9:b0:49:09:f7:78:b5:c7:df:c9:48:d0:
04:9c:08:7a:15:57:b2:1c:a9:e9:5d:70:ab:6c:85:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D1:7F:C5:86:64:4E:DD:C1:4F:39:7F:05:0D:60:B1:0E:66:06:95
X509v3 Authority Key Identifier:
keyid:90:AF:98:73:83:86:5A:4A:FC:67:40:3B:60:D3:F3:38:9F:69:5F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7f:5d:a6:29:b2:72:d8:23:96:e0:3a:49:db:1d:ba:79:4e:
5c:c4:8f:97:cf:3a:c0:d9:0d:c1:b3:de:78:b3:06:e7:fe:59:
03:73:64:a1:c7:72:82:5f:e3:cb:77:36:2d:cd:5c:69:04:a5:
6e:39:19:51:35:cd:bb:33:cb:25:8b:c4:36:8a:5f:d9:db:90:
7d:c6:02:da:69:f4:2b:e2:1a:38:90:e4:b0:ab:09:04:28:e1:
f6:e6:cd:a6:80:aa:1d:cd:1c:61:d8:e3:88:da:6b:cd:ac:75:
12:cb:d8:ef:3d:7d:75:80:cc:df:c5:83:a8:e0:5c:e6:4b:6a:
29:8a:ae:a0:a4:89:64:10:38:c9:e7:1f:e6:fe:68:6a:c5:fe:
33:0a:39:d6:03:d7:a7:f4:b1:11:6b:c1:73:0a:64:cc:24:5c:
b3:4c:55:22:1f:97:92:32:9b:cd:95:e7:e4:10:48:1c:d3:fd:
25:62:4a:cd:29:05:d0:5a:9e:70:21:10:b2:3f:5e:89:27:62:
d4:63:0b:cf:48:6a:c3:16:e1:80:c7:32:72:37:e5:92:af:c7:
c6:e6:46:c4:79:8f:84:54:fd:8b:8c:f6:6a:c8:b8:0a:2e:59:
f1:87:b8:a8:d3:ba:7f:28:0e:aa:e8:26:06:d7:43:4e:99:cd:
be:c2:26:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:12:28 2025 by rpki-client