
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/hZgt-MdxoBI0HmZ6w42L1PMbCE4.mft
File: hZgt-MdxoBI0HmZ6w42L1PMbCE4.mft (raw, json)
Hash identifier: Fgg0mOYxQzZcbureR/MO1dxkwUqVIMdPWPdH7KZDyBA=
Subject key identifier: 1E:90:38:7C:0E:27:35:0F:26:58:1F:4D:30:21:D4:DB:10:48:5D:28
Authority key identifier: 85:98:2D:F8:C7:71:A0:12:34:1E:66:7A:C3:8D:8B:D4:F3:1B:08:4E
Certificate issuer: /CN=85982df8c771a012341e667ac38d8bd4f31b084e
Certificate serial: 01972AB994DDC7E756AF417BD75BD928D8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZgt-MdxoBI0HmZ6w42L1PMbCE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/hZgt-MdxoBI0HmZ6w42L1PMbCE4.mft
Manifest number: 0A
Signing time: Sun 01 Jun 2025 09:01:34 +0000
Manifest this update: Sun 01 Jun 2025 09:01:34 +0000
Manifest next update: Mon 02 Jun 2025 09:01:34 +0000
Files and hashes: 1: Lv1YgVYRSN8W_x16sodxlW3roWQ.roa (hash: 4LJUbHHdRepVcfjxCbefEVxM2Ei8JousJ1c6kTbySf8=)
2: hZgt-MdxoBI0HmZ6w42L1PMbCE4.crl (hash: PDXXSim19xqgSLq7kI5Q2Koztx3q1lQGVLzANPGAACo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2a:b9:94:dd:c7:e7:56:af:41:7b:d7:5b:d9:28:d8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85982df8c771a012341e667ac38d8bd4f31b084e
Validity
Not Before: Jun 1 09:01:34 2025 GMT
Not After : Jun 2 09:01:34 2025 GMT
Subject: CN=1e90387c0e27350f26581f4d3021d4db10485d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:4f:30:a3:d1:9b:4d:c4:50:1f:70:a0:ce:
7c:c2:2b:cb:30:35:55:95:57:b9:88:e8:e8:75:ee:
52:82:54:18:49:96:20:35:ab:99:3c:c4:d4:92:2d:
b7:f0:0b:10:8c:30:59:04:7d:d3:2b:38:85:03:15:
16:45:ff:0e:eb:7e:73:70:cd:6e:bc:5b:62:8a:77:
13:2b:0c:08:30:b4:86:90:d9:cc:65:30:46:98:13:
94:d8:a1:3b:23:87:14:f8:ca:a9:8f:b8:64:3f:c2:
e7:c6:7f:53:e6:86:f6:95:92:9c:9c:68:4a:6b:b9:
3d:03:ef:2c:66:66:72:4b:ce:9c:4b:17:1d:b3:c5:
6b:3f:6f:5b:fd:a8:58:b5:2f:07:fa:5a:0b:77:19:
c2:43:91:22:35:24:26:d3:13:2e:75:32:69:8a:7f:
ef:1e:25:54:9c:d7:d2:9c:da:02:53:ce:0e:14:72:
7d:9b:03:fb:a5:c5:18:ed:f0:ac:02:e9:d0:f2:07:
cb:66:21:80:ab:12:33:65:af:7a:ad:84:41:2c:32:
a9:93:fa:02:2f:92:ce:5d:18:8b:c3:77:24:4c:97:
8c:85:96:8f:91:6a:32:8d:c5:c2:0d:e0:e5:89:af:
ed:dc:eb:b6:15:47:4a:56:38:4b:68:6c:4c:5e:00:
40:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:90:38:7C:0E:27:35:0F:26:58:1F:4D:30:21:D4:DB:10:48:5D:28
X509v3 Authority Key Identifier:
keyid:85:98:2D:F8:C7:71:A0:12:34:1E:66:7A:C3:8D:8B:D4:F3:1B:08:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZgt-MdxoBI0HmZ6w42L1PMbCE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/hZgt-MdxoBI0HmZ6w42L1PMbCE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/hZgt-MdxoBI0HmZ6w42L1PMbCE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:26:3b:4f:12:e2:4b:0e:cd:57:5e:02:b9:78:44:e8:ad:01:
29:5f:23:50:f6:b4:d0:91:67:7b:01:bd:65:d9:33:03:66:3a:
a7:c0:e7:fb:1e:fb:9d:ff:e2:1e:38:a9:6f:13:ee:19:66:81:
ce:62:44:9d:c3:03:af:de:19:e5:d9:e5:67:37:80:35:09:f6:
c3:79:bb:3b:a9:24:6e:9c:5c:11:40:1d:58:51:f2:ff:69:2a:
55:d7:bf:bf:bb:36:06:80:5d:d4:c3:18:5c:96:e7:bd:4f:9e:
ba:4b:2d:1e:30:05:c1:03:c3:ea:65:bb:06:dc:6d:db:86:48:
3e:cb:81:b5:14:ac:93:a3:e1:aa:35:9d:44:12:4a:7a:b4:a0:
4a:47:0c:b5:bc:03:62:78:2d:d1:6c:5d:b9:35:c6:87:11:e6:
ce:3d:7c:c5:1c:6a:a3:08:1a:f4:a0:44:da:64:6b:fa:f4:9b:
b5:4b:b6:11:b2:a8:43:07:d2:d4:76:06:d2:00:25:b3:5f:aa:
df:01:1f:0a:e8:53:b9:d8:c0:4f:d0:2d:0f:ed:c7:bc:99:9d:
39:ac:df:7c:69:19:48:5c:6f:e7:20:01:4e:c7:1a:3b:dc:ea:
c7:ca:68:9c:e5:bd:82:b4:4d:0b:d7:11:80:ff:04:5a:0a:35:
fb:bf:fa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:06:15 2025 by rpki-client