Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
File: TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft (raw, json)
Hash identifier: Y1mSAVmEvbAR3087xwCd1aM6HjGWDoQ8jHPvNfASkTo=
Subject key identifier: B3:6E:E2:70:0B:D5:8D:D6:63:A7:0A:2A:14:F3:FE:D2:2E:05:7B:8E
Authority key identifier: 4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
Certificate issuer: /CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
Certificate serial: 0198CB016EB27534C59191EA527E26A263D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
Manifest number: 1640
Signing time: Thu 21 Aug 2025 05:02:05 +0000
Manifest this update: Thu 21 Aug 2025 05:02:05 +0000
Manifest next update: Fri 22 Aug 2025 05:02:05 +0000
Files and hashes: 1: TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl (hash: kyUnt8peZXAXMHgdRISwOGCkSNJR0TTseWAgSa5Y2cE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:01:6e:b2:75:34:c5:91:91:ea:52:7e:26:a2:63:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
Validity
Not Before: Aug 21 05:02:05 2025 GMT
Not After : Aug 22 05:02:05 2025 GMT
Subject: CN=b36ee2700bd58dd663a70a2a14f3fed22e057b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:9a:1d:0b:7e:d3:c7:12:15:3c:e4:8f:96:
f6:b1:08:50:4f:c6:26:0a:ba:60:ce:20:38:2c:81:
4f:5f:28:b3:62:a0:e8:74:e4:c4:66:e1:25:49:40:
1c:23:a2:90:85:af:cc:ab:fb:f7:52:f3:ce:94:f2:
e0:c8:2a:44:38:e4:d4:f6:e3:c9:67:00:73:44:ae:
27:eb:52:19:07:02:74:9f:e7:51:f7:94:78:90:2d:
5a:43:38:da:c8:dd:b6:33:c8:ca:f1:45:1c:62:b0:
8e:27:c5:a7:e3:77:59:f4:a0:1b:e7:c1:88:b0:2e:
17:8b:cc:80:7a:89:fe:48:d0:5c:b5:4c:48:0d:26:
77:5e:68:a5:ed:ca:6c:8b:69:a0:ec:df:5a:72:3f:
7e:e6:05:52:b8:eb:59:3e:a8:23:9e:01:6b:17:fe:
ac:60:37:cf:43:ba:1a:94:06:31:47:d5:4c:3d:3b:
33:6c:63:72:49:44:4f:47:fd:76:3e:74:96:8e:7c:
5d:66:bd:91:4c:1f:61:c3:14:09:bb:20:f7:e7:ea:
a4:2d:76:fe:c7:d0:fb:e1:5d:59:c0:ab:ee:48:eb:
a1:30:88:b4:1e:44:aa:5f:09:9e:dd:37:42:79:83:
a9:9e:e3:c5:54:de:9f:dd:77:9c:ff:d6:bf:26:e9:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6E:E2:70:0B:D5:8D:D6:63:A7:0A:2A:14:F3:FE:D2:2E:05:7B:8E
X509v3 Authority Key Identifier:
keyid:4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:21:10:96:44:e0:a7:b1:e8:c7:53:62:85:bf:f7:49:8e:eb:
59:dd:80:11:91:57:cc:4e:4c:15:1a:a0:0f:a1:a8:a0:0c:a1:
90:3a:fd:dd:a6:cf:10:c8:18:1c:2b:0b:86:ea:1d:07:bd:a2:
f0:bb:d0:e2:a5:6e:15:e4:5a:50:3a:c3:19:a1:4b:db:81:62:
f9:64:27:9c:e4:d2:93:83:c8:bc:ab:f8:f1:f1:23:39:fa:f5:
a5:5d:cc:84:07:0f:bb:73:e2:40:82:5f:5a:7d:95:05:2d:5d:
0f:be:b5:92:a9:de:2e:1a:f9:f3:37:a4:31:fb:48:dc:4f:4a:
09:04:80:94:9d:cf:98:23:e0:54:27:45:22:79:0f:2a:d0:ce:
a2:85:f9:02:cc:59:e8:67:90:29:74:31:8c:00:c0:40:1b:12:
8b:2a:a0:cc:00:b5:d2:59:b7:92:1a:70:ef:2b:a6:0c:21:e2:
4e:0d:29:63:65:5f:02:37:cb:c2:43:72:9b:86:fa:e1:ca:9f:
b2:a4:af:d0:5e:cc:f1:c6:ff:6e:39:fd:56:1e:b8:57:c5:c2:
26:b9:be:42:32:5d:d6:31:19:d4:b9:e4:b0:93:03:82:d7:fb:
78:c5:0b:d6:9a:ee:ca:67:4e:1b:75:33:17:79:4e:de:ed:93:
64:ea:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:07:00 2025 by rpki-client