Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
File: rKbqw5z6mj664iKLy9RXaD5Swgo.mft (raw, json)
Hash identifier: eK7meQMGEpCnGagYWyG2VLnMhsCpieTsSznjnKoyId0=
Subject key identifier: 1D:00:BA:EA:E7:AC:F8:87:6C:DE:90:93:85:20:47:EE:D0:ED:3B:61
Authority key identifier: AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A
Certificate issuer: /CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
Certificate serial: 0199123F6F023E3658D57CED1A8F50522319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
Manifest number: 1664
Signing time: Thu 04 Sep 2025 01:02:50 +0000
Manifest this update: Thu 04 Sep 2025 01:02:50 +0000
Manifest next update: Fri 05 Sep 2025 01:02:50 +0000
Files and hashes: 1: rKbqw5z6mj664iKLy9RXaD5Swgo.crl (hash: FtxakkB+MlUzFtmD4tXdV2lekBOxBBjTIz1KIbILHVg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:12:3f:6f:02:3e:36:58:d5:7c:ed:1a:8f:50:52:23:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
Validity
Not Before: Sep 4 01:02:50 2025 GMT
Not After : Sep 5 01:02:50 2025 GMT
Subject: CN=1d00baeae7acf8876cde9093852047eed0ed3b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:78:4c:a1:38:ee:c4:2f:b6:57:fc:ec:c0:
32:a5:f1:eb:b0:d1:b9:af:8c:7b:f9:e1:54:0f:d1:
24:55:8e:c9:57:a9:f3:d4:19:f8:47:ee:51:47:f7:
f1:4d:4f:22:e6:ea:92:d7:5d:e8:33:b0:5e:2f:28:
c8:6b:fc:eb:55:cd:a5:e3:94:0b:3a:1d:72:85:fa:
78:99:62:4a:f5:ca:fe:c8:e6:de:4b:f1:16:13:47:
b5:fd:03:fe:96:c3:4f:c2:26:c4:64:01:d9:be:2b:
13:08:fc:e3:75:a5:7f:72:6b:27:e5:c5:1e:f5:1f:
86:95:0b:a4:ea:00:a4:e7:f8:9c:b4:34:fb:2c:cc:
15:b3:61:74:f1:3a:ab:89:90:19:d9:63:b4:61:62:
88:82:69:50:f9:69:e4:83:9f:b6:d5:a1:07:9d:33:
a2:77:dd:fe:90:22:92:e7:fe:7d:dd:52:67:b8:1c:
9e:56:38:1f:f5:0e:45:a0:73:3c:84:54:bf:33:bc:
43:a9:bc:54:5e:de:18:cf:ac:0f:13:ad:a0:88:4f:
9e:53:55:af:2c:90:5e:60:07:26:c8:27:c2:6d:91:
1e:8f:e6:7f:f5:9e:09:ad:ce:02:cb:38:20:6d:d4:
17:70:03:2e:47:53:34:f9:b0:84:65:7d:73:b0:93:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:00:BA:EA:E7:AC:F8:87:6C:DE:90:93:85:20:47:EE:D0:ED:3B:61
X509v3 Authority Key Identifier:
keyid:AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ff:1a:5a:88:a8:17:c5:8c:15:d4:23:57:f0:af:e4:4b:c2:
c4:c0:05:67:22:93:fd:05:cc:a5:a4:0b:7e:de:29:13:f8:92:
7b:7f:b5:fd:ed:73:7e:e4:55:4c:15:b1:ef:64:80:b0:b6:01:
9b:18:c4:ac:b4:98:14:ab:7c:0c:48:ec:d9:ef:0d:55:a0:d3:
da:ad:80:fb:59:cd:36:67:4b:a4:cd:1b:0e:43:3a:b9:8c:04:
02:bd:11:69:28:4e:57:ae:74:f5:8f:3d:74:f0:5d:a8:a5:ae:
a7:8a:fa:d9:29:d8:54:0d:28:79:a4:bb:73:63:3d:93:e7:a9:
69:58:07:27:eb:5c:dd:64:d9:0b:f7:34:53:4d:ca:45:21:1d:
e4:02:37:db:89:38:20:33:04:17:a7:67:ad:ae:19:e5:de:35:
13:70:53:de:53:86:2e:62:71:5e:e3:ba:c1:3b:2d:79:7e:88:
cb:69:67:45:9c:7e:68:2e:eb:13:d9:81:68:30:ae:2a:c4:16:
69:0c:1f:20:86:da:45:89:63:95:82:b5:2e:29:e1:cd:8a:38:
64:5a:f3:81:96:9f:95:b3:0e:77:cc:f3:47:45:ec:6e:bf:d5:
98:d5:a7:cd:42:f5:cf:b7:8d:b1:f8:9f:ea:2d:de:ea:a1:fc:
cf:63:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:28 2025 by rpki-client