Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
File: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft (raw, json)
Hash identifier: QmrLXn+jkFoQlig1s358dNtnc5pSRzwMqGY9kdTgis4=
Subject key identifier: 40:AC:F9:63:B8:8A:8E:33:8F:23:7D:2A:36:EB:B7:93:44:C9:F2:69
Authority key identifier: FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
Certificate issuer: /CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Certificate serial: 0198BB56E78842683661691E67C74F4ED195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
Manifest number: 1359
Signing time: Mon 18 Aug 2025 04:01:31 +0000
Manifest this update: Mon 18 Aug 2025 04:01:31 +0000
Manifest next update: Tue 19 Aug 2025 04:01:31 +0000
Files and hashes: 1: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl (hash: lcnx0R3WligpSycCHTdYmf0kA7cEHoTi0tTupdgqG3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bb:56:e7:88:42:68:36:61:69:1e:67:c7:4f:4e:d1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Validity
Not Before: Aug 18 04:01:31 2025 GMT
Not After : Aug 19 04:01:31 2025 GMT
Subject: CN=40acf963b88a8e338f237d2a36ebb79344c9f269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:e1:c0:ea:f5:a6:e7:48:48:ee:ab:60:72:
45:e9:86:af:dc:0d:fe:d4:8f:95:ef:58:2c:4b:71:
cc:5f:a2:72:98:f9:bd:29:60:2c:de:77:1e:63:05:
da:b5:4a:d3:9a:ee:8c:08:e6:dc:7e:17:ae:5b:98:
b6:b2:2b:4f:95:e2:63:59:03:fb:d2:d6:a3:6d:06:
ee:6f:16:0a:71:40:7d:8a:96:d1:e9:cc:cf:f8:ff:
5d:5d:b0:56:fc:6d:d5:3b:41:0e:2b:fd:81:6d:3d:
12:ad:b8:40:cc:ed:cf:40:d8:ba:36:73:cc:db:ba:
9d:da:0d:70:92:a7:5b:b7:f4:82:22:00:8f:36:5e:
c4:8f:83:12:c6:28:60:70:15:07:31:d2:1c:f3:58:
85:9e:aa:9f:00:52:98:e9:2d:34:f7:97:64:fa:41:
56:94:43:03:f3:a4:68:6c:1c:1e:a5:a1:6a:38:38:
5f:ed:a5:90:a1:f0:72:ba:0c:8a:be:53:9c:e4:7a:
d7:9b:b4:f5:a7:9d:3b:2b:53:a3:95:07:bc:2d:fe:
65:67:0d:94:e2:57:6b:c9:de:f7:04:ed:6a:83:08:
7b:45:ba:46:d2:ef:1f:39:1a:4c:06:c1:3d:fd:e6:
2c:a7:77:a3:c0:32:03:40:d9:dd:37:07:39:37:3c:
d7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AC:F9:63:B8:8A:8E:33:8F:23:7D:2A:36:EB:B7:93:44:C9:F2:69
X509v3 Authority Key Identifier:
keyid:FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:41:85:12:f2:b2:96:b4:df:10:04:ea:cb:9b:b5:d6:2a:a0:
a4:11:14:fd:e3:76:a4:5f:20:cb:e3:d5:96:3e:4a:a8:58:22:
2a:97:8c:fb:88:fa:85:66:7e:a4:63:d5:30:d7:cc:30:bb:65:
22:2a:59:03:03:c2:66:86:ee:30:b1:f7:15:67:6d:23:0f:bc:
be:fa:c9:d9:f9:a2:a9:56:30:fc:98:1f:2f:72:cc:f5:c4:3f:
a2:b7:0e:31:b3:49:33:d5:73:7a:df:f5:d4:db:9c:f3:8c:9c:
0c:e6:53:62:dd:09:24:74:c1:6d:11:e0:74:ca:a7:1e:65:34:
db:c1:aa:82:d1:26:5a:a0:28:92:0d:e0:67:70:d1:6f:31:2e:
08:15:47:ed:69:fc:10:07:53:06:79:f5:c7:44:fc:ad:13:71:
78:71:f5:20:42:76:0c:e2:da:31:f5:26:43:67:74:50:bf:f0:
4e:48:ef:bd:e7:2d:19:d4:10:93:f6:69:71:20:60:c4:26:74:
c8:db:21:4c:32:e2:0c:d3:2d:e2:0c:51:5a:da:2c:23:74:a2:
69:3d:cc:36:99:86:d3:60:e1:24:09:0d:90:de:ba:ef:db:02:
6f:34:c4:01:06:2f:ca:95:16:9a:52:39:22:ce:db:81:40:23:
22:60:7a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:08:21 2025 by rpki-client