
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft
File: 4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft (raw, json)
Hash identifier: CnVe0QAUxXD6l3wp9FNg6NG222sRbLBPUniWgKMrqUk=
Subject key identifier: 17:43:0F:B3:30:AF:A0:BA:65:DE:6B:A5:FE:8C:2A:14:A6:A4:94:1D
Authority key identifier: E0:31:74:A0:12:87:30:FA:AC:0D:78:C7:A3:D9:08:AA:51:05:4B:E7
Certificate issuer: /CN=e03174a0128730faac0d78c7a3d908aa51054be7
Certificate serial: 0196A276E39939ECBD96AF4AE940CF8D86DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DF0oBKHMPqsDXjHo9kIqlEFS-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 22:00:22 +0000
Manifest this update: Mon 05 May 2025 22:00:22 +0000
Manifest next update: Tue 06 May 2025 22:00:22 +0000
Files and hashes: 1: 4DF0oBKHMPqsDXjHo9kIqlEFS-c.crl (hash: 3N7oEboXAcHwOzfq6MXolKQmmqnESe78U2mD3wKJ/bY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:76:e3:99:39:ec:bd:96:af:4a:e9:40:cf:8d:86:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03174a0128730faac0d78c7a3d908aa51054be7
Validity
Not Before: May 5 22:00:22 2025 GMT
Not After : May 6 22:00:22 2025 GMT
Subject: CN=17430fb330afa0ba65de6ba5fe8c2a14a6a4941d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:31:8d:ea:ec:64:1c:fc:09:b6:9c:16:e5:
f5:14:72:f9:a4:52:bf:07:3d:5e:56:af:23:76:78:
39:e2:9f:39:4b:31:c8:51:c0:9f:29:45:cb:cf:26:
75:b1:91:56:69:3c:2e:a1:8c:ea:46:52:59:7b:23:
41:c2:6c:ba:be:13:20:ae:0f:7b:86:35:26:39:dd:
b7:97:bc:92:76:ac:20:7c:cb:17:3e:59:56:e6:9d:
58:f1:94:1c:4a:9c:98:0e:48:c0:05:ea:fe:51:f8:
4b:10:d0:38:04:da:81:b8:51:06:da:46:b4:a9:41:
d7:9f:e7:81:80:5e:05:97:34:9a:a0:a6:e4:00:02:
2b:8e:72:f6:5a:f8:34:e0:55:fc:c3:5c:6a:44:6f:
83:3f:43:10:ab:6b:9e:65:de:2c:b2:09:8c:02:a1:
a6:ab:74:47:7c:a4:14:3c:07:a3:35:52:15:d9:e6:
99:0a:b9:38:1b:84:38:e4:78:e2:a2:3b:4b:46:ff:
ca:f6:a3:59:34:c1:9e:3b:53:00:4f:7f:f5:b1:34:
49:1d:ac:33:98:c9:7b:83:a7:69:19:56:69:f5:d0:
f7:2f:b7:ea:b6:a8:e3:c2:2a:52:9e:ef:da:be:86:
6e:4d:21:6f:6c:d0:02:06:6f:bc:1b:c4:29:5e:46:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:43:0F:B3:30:AF:A0:BA:65:DE:6B:A5:FE:8C:2A:14:A6:A4:94:1D
X509v3 Authority Key Identifier:
keyid:E0:31:74:A0:12:87:30:FA:AC:0D:78:C7:A3:D9:08:AA:51:05:4B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DF0oBKHMPqsDXjHo9kIqlEFS-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:6e:95:5f:ba:a4:ac:56:ea:ed:01:86:e6:9e:2b:bb:9e:f3:
6c:30:fd:bc:1b:9c:89:c5:64:e8:be:51:1b:49:0d:c6:fd:68:
5f:37:93:cf:41:47:8e:f9:e8:2e:18:d6:e2:11:2d:b3:60:b9:
de:4f:bc:38:08:60:ed:98:a9:0f:2a:b8:47:9b:cb:36:10:a4:
79:8a:08:c3:fa:8c:c0:44:89:4c:ba:ca:4c:89:13:5c:f7:33:
c5:68:97:d7:94:76:c7:41:71:de:2c:aa:a9:a7:54:33:fd:bc:
63:9e:07:e2:85:b2:1d:c2:87:fd:f1:e6:85:8c:37:ec:27:08:
7d:d6:33:c3:dd:21:35:6d:60:18:04:2c:af:0b:3c:91:91:8e:
e6:ba:7a:74:d6:b5:ed:6e:77:e5:83:ec:7f:e5:72:1c:2f:4d:
21:8c:19:fb:d7:f0:d4:48:af:18:c5:b4:e3:1a:66:a8:e3:d7:
fe:2e:fa:7f:2c:f6:69:bd:f1:63:d0:43:eb:39:58:0d:e9:4a:
1c:3e:23:5b:12:20:a3:c3:ac:6e:04:d8:67:73:3d:b5:82:57:
cb:31:9a:b1:44:77:83:3a:86:d7:05:b7:1a:c6:ca:2f:ab:14:
e4:4b:12:66:97:f0:ec:f9:08:4f:91:6d:b1:07:10:97:26:c0:
67:60:4f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:58:07 2025 by rpki-client