Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c10346-d98e-4d77-b4e4-05376e69cdc5/1/kcqUs1u3hNZZGVgtI5qia_NXGUY.mft
File: kcqUs1u3hNZZGVgtI5qia_NXGUY.mft (raw, json)
Hash identifier: 85oMpWWwBwNGtf2rJlLmOoD4UrAfsHPNPzpk6qUJMak=
Subject key identifier: 64:05:FC:03:87:C5:20:B8:F0:45:F4:27:D2:FA:B7:C3:EF:9E:BE:E2
Authority key identifier: 91:CA:94:B3:5B:B7:84:D6:59:19:58:2D:23:9A:A2:6B:F3:57:19:46
Certificate issuer: /CN=91ca94b35bb784d65919582d239aa26bf3571946
Certificate serial: 018C908B916F4A34D524245579A403B1339D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcqUs1u3hNZZGVgtI5qia_NXGUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c10346-d98e-4d77-b4e4-05376e69cdc5/1/kcqUs1u3hNZZGVgtI5qia_NXGUY.mft
Manifest number: 0CC1
Signing time: Fri 22 Dec 2023 08:01:54 +0000
Manifest this update: Fri 22 Dec 2023 08:01:54 +0000
Manifest next update: Sat 23 Dec 2023 08:01:54 +0000
Files and hashes: 1: kcqUs1u3hNZZGVgtI5qia_NXGUY.crl (hash: 8BLwrNqPyhG/HNV7Fy/z0sxqEyX183sLdlko+16+f3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:8b:91:6f:4a:34:d5:24:24:55:79:a4:03:b1:33:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ca94b35bb784d65919582d239aa26bf3571946
Validity
Not Before: Dec 22 08:01:54 2023 GMT
Not After : Dec 23 08:01:54 2023 GMT
Subject: CN=6405fc0387c520b8f045f427d2fab7c3ef9ebee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3f:b4:26:a6:87:df:6a:3d:4c:61:19:70:2d:
3b:c8:13:09:3e:69:00:9b:7e:ab:d2:99:47:cd:e4:
bc:c1:0f:44:00:1c:e6:57:c0:ff:95:ec:61:8b:ba:
0d:c0:d8:77:6a:49:ce:c5:4c:c7:35:27:41:f9:95:
3a:6f:08:0a:08:4d:93:a7:3d:58:2f:0c:4a:19:f1:
41:01:2a:81:f4:71:c2:ba:cf:07:54:6b:8c:f0:7b:
60:f5:49:9e:28:21:1b:12:1f:d1:b2:9e:af:2a:e3:
d3:55:b2:5a:b7:e1:d7:e8:b6:03:92:42:81:51:64:
5d:08:f9:7a:3c:f8:9a:73:70:b3:6f:d0:9f:11:cb:
5c:90:46:13:5f:f5:78:27:89:f9:e1:79:6d:b2:ad:
d9:c3:fc:3b:73:28:f8:af:5c:7f:00:e8:90:62:3b:
6e:ad:12:0c:c0:fb:4c:35:b8:93:77:41:47:e1:f4:
08:6f:f0:3e:b3:7e:41:f5:35:0f:92:43:76:ce:41:
68:49:42:7f:a6:ce:e6:87:5f:a7:fb:e0:9c:7d:46:
74:d4:fa:2c:d2:e8:9f:d4:11:b6:80:5f:be:16:8a:
f6:42:c1:d9:c2:ae:fa:01:ad:31:ad:83:f7:a6:5a:
51:db:3e:2c:94:86:bd:b5:37:41:b2:ea:91:3c:8e:
9f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:05:FC:03:87:C5:20:B8:F0:45:F4:27:D2:FA:B7:C3:EF:9E:BE:E2
X509v3 Authority Key Identifier:
keyid:91:CA:94:B3:5B:B7:84:D6:59:19:58:2D:23:9A:A2:6B:F3:57:19:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcqUs1u3hNZZGVgtI5qia_NXGUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c10346-d98e-4d77-b4e4-05376e69cdc5/1/kcqUs1u3hNZZGVgtI5qia_NXGUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c10346-d98e-4d77-b4e4-05376e69cdc5/1/kcqUs1u3hNZZGVgtI5qia_NXGUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:82:b5:53:c2:79:f1:4d:ae:ee:40:ff:15:b8:dc:c1:f9:69:
4e:ca:de:bc:b1:32:8f:a4:a0:b9:04:2d:c1:a4:28:b6:52:e4:
76:93:74:63:23:0c:1d:a9:b0:dd:4c:3e:1e:bb:55:d7:d2:3b:
06:85:22:dd:f4:3e:47:e7:05:a4:9e:65:a9:28:41:14:33:cc:
55:58:01:2a:f8:60:01:4e:32:9f:61:1f:5c:7b:6c:fb:dc:81:
ee:9c:d3:70:e9:57:1e:dd:e4:d2:54:8f:44:67:44:73:77:cf:
8f:61:31:08:48:85:ab:06:64:86:c4:e2:12:36:73:dc:dd:3c:
07:2e:21:12:85:dc:36:c8:9a:22:a9:d5:f6:90:e0:de:c2:dc:
5d:c3:0c:74:de:f0:49:7f:80:5b:96:d7:74:40:98:3a:1d:98:
85:69:e1:84:fa:e4:2a:32:d2:9a:18:43:d3:72:0e:6c:2a:9f:
b6:83:5d:52:45:51:d5:ca:46:c4:cb:f8:65:8f:0d:4e:54:05:
d0:82:fd:90:c0:52:1a:38:4e:1b:be:57:f4:ac:38:7f:44:b2:
ba:b3:6c:0d:9a:ca:72:bc:65:b0:c4:3d:3d:cc:8f:74:7b:f6:
63:57:ba:4b:a9:d4:57:1b:5f:9e:4d:90:fc:46:fa:d1:99:8d:
63:a4:68:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:35:46 2025 by rpki-client