Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.mft
File: YoNhOQ7U4GYi62soNtdn918Ic2g.mft (raw, json)
Hash identifier: xZkeZKpZcRWI6p5iosZ28STmwC0GE3v7daC54+LTBwo=
Subject key identifier: EC:C1:81:0A:EF:38:2A:BF:EE:FF:94:4F:44:CE:1E:7B:EC:C4:7A:A0
Authority key identifier: 62:83:61:39:0E:D4:E0:66:22:EB:6B:28:36:D7:67:F7:5F:08:73:68
Certificate issuer: /CN=628361390ed4e06622eb6b2836d767f75f087368
Certificate serial: 0195E159196A4DEE17A92C44BEAA2EA3D3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoNhOQ7U4GYi62soNtdn918Ic2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.mft
Manifest number: 0961
Signing time: Sat 29 Mar 2025 10:01:07 +0000
Manifest this update: Sat 29 Mar 2025 10:01:07 +0000
Manifest next update: Sun 30 Mar 2025 10:01:07 +0000
Files and hashes: 1: YoNhOQ7U4GYi62soNtdn918Ic2g.crl (hash: Ca4qiTmpmZ+F6f2B79htjiseoJWfEsXh5F0FDw1h/wU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:19:6a:4d:ee:17:a9:2c:44:be:aa:2e:a3:d3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628361390ed4e06622eb6b2836d767f75f087368
Validity
Not Before: Mar 29 10:01:07 2025 GMT
Not After : Mar 30 10:01:07 2025 GMT
Subject: CN=ecc1810aef382abfeeff944f44ce1e7becc47aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:95:a4:c9:24:86:2b:53:54:b1:30:cf:e1:
f0:79:4d:68:90:a6:f1:3b:60:3f:4b:62:c7:14:1b:
91:74:6c:6b:fc:b0:ef:51:77:79:fb:f9:72:e3:88:
7a:f9:50:7b:67:8a:48:fe:b0:d0:d9:02:02:3b:12:
d1:7b:7c:21:99:4d:00:a6:ab:cd:ec:2c:bc:15:e5:
18:78:95:6e:03:b8:35:4b:c7:0a:8b:23:e8:70:cf:
6e:66:fa:d5:be:d0:bd:9a:dd:87:f7:b7:9d:3c:81:
a6:dc:2b:54:73:bc:4e:87:bf:b5:a4:7b:09:53:64:
c6:a5:80:77:c5:b9:96:fb:52:ae:0c:10:bb:b2:cf:
21:d4:57:e5:67:1b:7b:0a:a8:84:11:2b:c0:87:fc:
0a:41:66:08:d8:ff:19:97:86:ca:ff:41:4e:e6:66:
20:05:aa:21:2f:14:76:8b:89:93:f3:39:08:60:88:
29:e4:c4:98:85:54:23:53:bf:f6:7c:78:15:92:2d:
6a:6f:a5:7d:a9:ce:46:d5:79:1f:2a:e3:41:ed:3c:
e5:1f:c2:0b:2c:7c:04:04:69:9e:e8:16:30:e1:7c:
e8:47:c0:1e:79:49:29:5f:ef:d7:f7:58:58:8b:ec:
57:ce:e1:c3:61:01:aa:18:0b:5f:ee:ea:a5:b2:d8:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C1:81:0A:EF:38:2A:BF:EE:FF:94:4F:44:CE:1E:7B:EC:C4:7A:A0
X509v3 Authority Key Identifier:
keyid:62:83:61:39:0E:D4:E0:66:22:EB:6B:28:36:D7:67:F7:5F:08:73:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoNhOQ7U4GYi62soNtdn918Ic2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:db:0e:1b:40:12:61:86:f5:80:72:c7:31:d1:f2:ed:a9:4f:
9e:04:a3:9d:a3:45:6e:c4:8e:f6:75:28:09:38:42:9f:f5:76:
88:d0:a0:ab:7e:c9:6e:3b:06:48:0b:91:a0:13:0e:e5:5f:57:
93:8f:96:29:b1:02:ff:78:d4:24:7b:40:5e:ec:14:06:ea:c3:
85:5f:e1:a7:5e:4d:c9:89:26:9d:74:3b:0f:fc:c3:1c:8a:fe:
47:41:a6:93:3e:8a:66:24:e7:67:ef:aa:7e:26:9c:fd:24:34:
ac:11:50:b6:ec:92:3a:dd:ff:7c:b0:35:36:20:8c:91:8c:92:
04:c5:a3:a5:a4:c2:79:d8:d4:2b:ab:bc:bd:85:36:39:db:ff:
c6:d6:f6:7e:7d:0a:1f:c0:ec:09:a7:cf:40:23:b4:ef:02:eb:
a4:91:02:9b:69:b8:18:45:79:55:18:a6:b0:06:64:b1:94:07:
6c:ec:1f:03:a5:75:96:24:49:82:9d:51:54:80:3e:81:8b:48:
3d:b5:96:7d:70:29:83:dc:f7:5c:96:a8:e2:5f:5a:f5:4a:3c:
21:0c:8e:83:8f:1d:22:f1:0f:b1:66:12:df:91:0b:07:60:99:
d5:03:4b:14:ac:27:29:71:95:6a:47:3b:6f:7a:64:58:e5:de:
70:90:a2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:31 2025 by rpki-client