Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft
File: PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft (raw, json)
Hash identifier: ZRZHDgH463hX14VJtP++pFqRYV/4V5Qd5WRn4wdWGFI=
Subject key identifier: C5:68:52:3C:A7:83:EA:03:4E:C2:0A:F7:8D:51:91:75:09:14:1E:DB
Authority key identifier: 3D:2D:1A:DA:61:4C:68:E1:74:C4:DE:DF:55:99:6A:95:43:16:EA:E6
Certificate issuer: /CN=3d2d1ada614c68e174c4dedf55996a954316eae6
Certificate serial: 01988920DF980DAE933C0F0A60F0AC136A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS0a2mFMaOF0xN7fVZlqlUMW6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft
Manifest number: 161F
Signing time: Fri 08 Aug 2025 10:01:29 +0000
Manifest this update: Fri 08 Aug 2025 10:01:29 +0000
Manifest next update: Sat 09 Aug 2025 10:01:29 +0000
Files and hashes: 1: PS0a2mFMaOF0xN7fVZlqlUMW6uY.crl (hash: 3PFN9+avM0YLPks4Eex6lyB7jEV91zRsLzTzNNn7glo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:df:98:0d:ae:93:3c:0f:0a:60:f0:ac:13:6a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2d1ada614c68e174c4dedf55996a954316eae6
Validity
Not Before: Aug 8 10:01:29 2025 GMT
Not After : Aug 9 10:01:29 2025 GMT
Subject: CN=c568523ca783ea034ec20af78d51917509141edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:31:08:62:f4:97:90:b7:13:b3:6d:b4:e1:11:
39:3f:ac:a0:dd:4d:a2:9e:ba:12:80:04:4d:11:1f:
22:2b:ee:ca:25:36:a6:54:85:ff:44:0f:9a:5e:86:
bd:70:75:c5:58:b4:ce:18:d5:b3:35:22:80:6e:ab:
48:0e:64:21:1c:a3:1a:b4:8e:b1:1b:87:e9:c2:15:
f2:7c:bf:17:1a:2e:39:5d:36:7a:8a:5e:64:20:72:
ef:67:cf:02:dd:20:32:18:79:13:6a:13:ab:dd:eb:
d7:e0:8c:c7:4a:33:fa:2c:7a:43:c3:fd:d5:37:2f:
a2:b2:59:b1:0b:e8:d3:2a:cf:9d:b2:8e:0b:79:39:
f8:b6:5f:55:6d:ba:ac:fb:9e:8a:d6:68:06:f4:ec:
50:9f:42:c4:c1:0a:34:a8:07:0c:59:e7:15:74:ce:
40:7b:8d:ad:9b:f8:3c:db:29:d2:36:c7:c1:0c:6b:
80:04:28:f1:03:f2:f6:03:69:20:ca:ce:97:38:74:
3c:56:da:ff:43:a9:b0:1c:c7:d7:a5:b6:27:de:8b:
0f:71:55:96:d1:60:e1:1b:fe:a2:f9:02:02:03:25:
a2:30:09:a7:01:4c:0c:1a:24:26:63:0e:f9:7e:95:
ec:02:ff:86:d4:54:12:a8:5b:d8:42:27:af:7f:24:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:68:52:3C:A7:83:EA:03:4E:C2:0A:F7:8D:51:91:75:09:14:1E:DB
X509v3 Authority Key Identifier:
keyid:3D:2D:1A:DA:61:4C:68:E1:74:C4:DE:DF:55:99:6A:95:43:16:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS0a2mFMaOF0xN7fVZlqlUMW6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a8:dc:ed:41:83:21:71:62:45:e3:cf:3b:98:e4:30:d7:fd:
8f:88:8d:b7:0d:f4:83:e8:a2:c0:1d:ef:eb:f8:46:d0:9d:22:
cb:0f:82:e2:a4:16:6f:8d:4f:b5:5f:31:2a:1d:fd:86:7b:ea:
a4:b2:7b:54:ff:60:63:24:5f:d5:0d:32:dd:58:ca:4f:36:7a:
86:43:fd:ea:15:6a:3a:82:68:e5:70:d9:63:f9:a6:da:a6:69:
93:ab:2f:9b:ed:ae:5c:a6:e1:6e:3b:e4:39:3d:8b:02:6f:ae:
8c:f8:c9:04:e2:a2:a0:e1:ee:aa:28:85:a1:9f:73:63:8f:e4:
4f:d5:00:86:a2:74:43:6c:ff:fb:51:79:0a:b1:ee:e3:ba:bc:
3d:cb:ea:01:b7:65:43:13:cb:98:50:0f:86:51:d8:9f:59:72:
f6:bd:da:01:1f:2b:af:d6:3d:f6:dc:18:c4:b2:09:97:8a:8d:
a5:37:8b:ce:3b:4e:84:9f:c0:a6:8d:17:13:cb:e0:64:4e:b3:
8b:af:a6:59:8c:13:ae:01:06:36:da:a3:1e:13:c9:9d:c8:d2:
ec:4c:34:b0:b5:16:e7:64:8d:82:e5:47:fb:77:02:74:f9:eb:
b1:52:a7:5a:d0:7f:fb:e6:69:e6:38:5c:14:fd:72:05:4d:b6:
86:b2:c8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:10:16 2025 by rpki-client