Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft
File: xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft (raw, json)
Hash identifier: /os+eekkoTsSTkZuUJhbsOLA1O+j7gsxTKTdDVw+hTc=
Subject key identifier: 3E:BF:F2:13:B0:53:F2:32:79:1B:C3:96:33:BC:CD:4F:8A:DC:48:CE
Authority key identifier: C5:99:38:89:B7:34:01:8D:B7:50:94:5B:FB:45:67:FD:AD:86:C4:98
Certificate issuer: /CN=c5993889b734018db750945bfb4567fdad86c498
Certificate serial: 01958883FA591B03B3840AEB2D8A5FAC900B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZk4ibc0AY23UJRb-0Vn_a2GxJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft
Manifest number: 1050
Signing time: Wed 12 Mar 2025 04:01:45 +0000
Manifest this update: Wed 12 Mar 2025 04:01:45 +0000
Manifest next update: Thu 13 Mar 2025 04:01:45 +0000
Files and hashes: 1: xZk4ibc0AY23UJRb-0Vn_a2GxJg.crl (hash: k1rV3ETOfr9yRT0HQvrwzbd7+0zRHv990kdMZ1656BA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:88:83:fa:59:1b:03:b3:84:0a:eb:2d:8a:5f:ac:90:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5993889b734018db750945bfb4567fdad86c498
Validity
Not Before: Mar 12 04:01:45 2025 GMT
Not After : Mar 13 04:01:45 2025 GMT
Subject: CN=3ebff213b053f232791bc39633bccd4f8adc48ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:a6:ad:86:10:c8:4e:1d:1a:a8:13:7e:b3:
03:b2:7b:03:e2:1f:ab:19:20:9b:fe:f3:20:e7:b8:
c9:80:13:a3:25:e0:80:f8:4d:7a:0a:f7:b2:13:1a:
cc:4b:18:e4:ae:d4:d9:8c:be:c6:ee:c3:a4:c2:a5:
b4:6d:9b:38:8e:2a:9e:b0:1c:a8:1d:6a:18:aa:f9:
2a:aa:4d:54:a0:44:3f:b9:3c:c4:d8:97:63:c4:5c:
08:d2:af:a2:ec:29:6f:c5:03:0e:8e:b3:0a:f7:91:
0f:a1:ad:f1:2a:e7:bd:83:c8:5d:16:9f:da:fe:0e:
3c:08:c5:65:47:84:f8:86:85:d6:29:bb:ae:16:9e:
a4:e5:1b:d7:f0:40:89:4d:27:48:5b:a6:6e:43:04:
a2:90:ac:67:02:35:30:33:72:fb:d7:2e:e9:90:54:
37:10:f3:80:4e:d5:64:ec:ee:76:42:2d:03:d0:47:
64:58:be:3d:3f:52:34:11:e0:8b:b9:b0:07:7a:f3:
8a:fb:85:79:02:37:fa:50:42:9b:63:cf:12:b4:02:
83:9d:c8:eb:08:5e:95:44:13:14:c0:d6:4f:5e:f7:
a1:fb:5e:a1:52:12:bd:60:f5:53:45:89:b4:a9:9c:
fa:36:e1:38:5f:a7:fc:5f:0b:ad:86:ca:ae:97:aa:
4f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BF:F2:13:B0:53:F2:32:79:1B:C3:96:33:BC:CD:4F:8A:DC:48:CE
X509v3 Authority Key Identifier:
keyid:C5:99:38:89:B7:34:01:8D:B7:50:94:5B:FB:45:67:FD:AD:86:C4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZk4ibc0AY23UJRb-0Vn_a2GxJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e3:97:c3:bd:c9:ea:02:d0:31:5e:3e:a9:35:a2:a2:9b:7e:
9c:a1:d6:e9:a4:c8:bd:ce:9f:a9:51:71:e5:1d:05:54:23:14:
dd:6d:57:2c:19:11:16:8b:b1:40:2a:28:55:dc:4d:90:7e:df:
cc:bd:5a:79:2c:70:db:96:5c:8f:16:41:96:d1:42:8c:86:07:
19:d8:b7:fb:20:ea:9a:44:83:2d:66:ad:4a:4a:d3:b0:7c:1c:
01:c1:4d:70:36:5e:be:a5:ef:51:2d:b1:d0:0c:4c:45:ca:4f:
1b:3d:be:8a:6e:2a:b4:15:98:76:7b:f8:ee:00:91:d2:10:bd:
07:ad:2c:a5:87:c5:34:02:65:ad:fa:1c:fb:44:bd:0f:7f:fc:
a0:cb:b5:5c:ac:f0:50:bd:d9:2f:3e:b0:ef:e4:55:d7:1d:ff:
ff:f3:4f:bd:32:d5:88:fe:ef:38:81:6a:16:99:10:e2:dd:12:
4c:9c:49:7d:b1:dc:09:09:74:d3:b5:cc:7d:3e:3e:2a:4b:63:
01:07:5a:a5:83:eb:e8:a7:dd:f7:04:a5:df:64:a9:75:18:65:
c7:ad:a9:75:ed:59:34:d0:e4:c7:31:bb:65:6a:90:5c:11:a5:
73:82:6f:0e:e0:6a:b2:97:dc:7e:0b:f3:d2:42:42:4f:6a:9d:
2f:65:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:44:46 2025 by rpki-client