Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
File: HJglkTOVXy7mNvuB8MDqYExmM1g.mft (raw, json)
Hash identifier: SAIOK1xxztbooIUIwG8XVDfp8q1Bu+282wki4Hy9MW4=
Subject key identifier: C0:F6:0C:1F:27:27:0C:20:5F:DE:8E:60:8C:D1:2A:AD:7D:77:D8:A0
Authority key identifier: 1C:98:25:91:33:95:5F:2E:E6:36:FB:81:F0:C0:EA:60:4C:66:33:58
Certificate issuer: /CN=1c98259133955f2ee636fb81f0c0ea604c663358
Certificate serial: 01965A5E3A55028C37CF48CC2E68BF53EAF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJglkTOVXy7mNvuB8MDqYExmM1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
Manifest number: 01E0
Signing time: Mon 21 Apr 2025 22:00:46 +0000
Manifest this update: Mon 21 Apr 2025 22:00:46 +0000
Manifest next update: Tue 22 Apr 2025 22:00:46 +0000
Files and hashes: 1: HJglkTOVXy7mNvuB8MDqYExmM1g.crl (hash: 7afp2Hi9uw+yt9UoCoQ/Kesp0JF3/8VbNLqRiayJA+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:3a:55:02:8c:37:cf:48:cc:2e:68:bf:53:ea:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c98259133955f2ee636fb81f0c0ea604c663358
Validity
Not Before: Apr 21 22:00:46 2025 GMT
Not After : Apr 22 22:00:46 2025 GMT
Subject: CN=c0f60c1f27270c205fde8e608cd12aad7d77d8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:58:85:d3:b0:52:0a:5b:95:98:8a:fd:23:fe:
3b:93:ed:a8:c0:0f:77:3e:6a:03:17:93:17:e2:e2:
3e:87:f8:4f:e0:0a:ac:ca:5d:50:69:54:3a:27:c0:
f4:78:31:97:1c:0c:83:89:c5:26:18:41:51:99:57:
11:23:cf:de:f8:be:b2:63:ad:40:d8:86:4f:4c:76:
3c:63:c6:cc:eb:96:53:42:39:a3:c8:c2:b8:42:5d:
33:4f:2d:eb:70:2e:d4:34:bc:f0:37:af:43:b9:13:
7a:9d:63:8b:aa:9a:71:8f:81:d2:11:81:18:68:71:
1c:a0:e3:46:ec:7f:11:e5:b7:a7:98:aa:33:5e:45:
64:c8:f1:de:5d:a9:bd:ba:31:57:fc:be:66:fc:f7:
4a:77:45:49:bb:79:55:1b:a2:51:ff:7f:dd:4d:4f:
e8:67:ea:07:ec:15:2f:12:85:ae:0c:7f:60:55:1f:
24:e9:ea:c1:f6:ec:56:84:ed:c0:0d:2c:5b:ad:e9:
1f:43:0f:22:59:3a:b1:2b:9a:9c:39:ae:b0:ec:fc:
96:2a:1a:22:7a:0b:e5:55:e0:18:ed:07:b8:50:42:
07:82:ef:17:ff:c3:b2:ec:4a:52:62:e3:04:7b:dd:
53:d5:a2:16:5d:fb:34:9d:c7:26:a4:91:e7:f1:c3:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:0C:1F:27:27:0C:20:5F:DE:8E:60:8C:D1:2A:AD:7D:77:D8:A0
X509v3 Authority Key Identifier:
keyid:1C:98:25:91:33:95:5F:2E:E6:36:FB:81:F0:C0:EA:60:4C:66:33:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJglkTOVXy7mNvuB8MDqYExmM1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fb:63:87:4b:32:1b:7b:8e:ba:c4:3b:bd:8a:0a:59:13:3f:
55:66:d9:07:1e:8c:62:79:a3:3f:14:17:2f:02:cc:2c:f8:63:
61:a8:fa:07:c6:ef:c2:c5:5c:7b:3a:47:19:5c:f7:6a:40:df:
ce:d5:92:17:83:bc:60:d2:c5:e7:d8:61:63:8a:83:d6:86:29:
29:bd:a8:17:17:bf:f2:03:9e:c0:4a:50:09:d0:f8:3e:ae:01:
59:62:25:7d:8d:0d:77:d8:37:9f:c7:8f:52:eb:6d:e6:4d:8d:
bf:20:0b:ae:2f:50:be:5e:34:e4:43:3f:fa:ee:41:43:f4:b4:
b4:37:df:15:42:44:41:14:4a:e6:12:51:3c:d7:28:b8:ce:21:
a9:57:08:55:87:ad:2b:d8:6c:c1:f4:c9:26:65:71:54:9c:25:
4c:0c:8c:b3:4a:e8:84:2e:4f:28:96:10:4d:ec:b6:5e:9c:83:
07:bf:81:76:bf:f9:6b:76:57:57:81:57:71:02:b3:ca:7a:2f:
f4:7a:8c:ae:a8:ae:6c:a4:fd:d5:f5:1a:33:86:98:b8:e4:2e:
ff:22:c2:72:b4:b0:b5:f9:98:f4:aa:0e:34:3d:51:ff:4d:d8:
7d:44:93:ae:70:0e:72:93:20:f9:d5:71:46:7d:2f:ab:4e:b4:
2f:0a:19:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaXjpVAow3z0jMLmi/U+r1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTgyNTkxMzM5NTVmMmVlNjM2ZmI4MWYwYzBlYTYwNGM2
NjMzNTgwHhcNMjUwNDIxMjIwMDQ2WhcNMjUwNDIyMjIwMDQ2WjAzMTEwLwYDVQQD
EyhjMGY2MGMxZjI3MjcwYzIwNWZkZThlNjA4Y2QxMmFhZDdkNzdkOGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+1iF07BSCluVmIr9I/47k+2owA93
PmoDF5MX4uI+h/hP4Aqsyl1QaVQ6J8D0eDGXHAyDicUmGEFRmVcRI8/e+L6yY61A
2IZPTHY8Y8bM65ZTQjmjyMK4Ql0zTy3rcC7UNLzwN69DuRN6nWOLqppxj4HSEYEY
aHEcoONG7H8R5benmKozXkVkyPHeXam9ujFX/L5m/PdKd0VJu3lVG6JR/3/dTU/o
Z+oH7BUvEoWuDH9gVR8k6erB9uxWhO3ADSxbrekfQw8iWTqxK5qcOa6w7PyWKhoi
egvlVeAY7Qe4UEIHgu8X/8Oy7EpSYuMEe91T1aIWXfs0nccmpJHn8cOmrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMD2DB8nJwwgX96OYIzRKq19d9igMB8GA1UdIwQY
MBaAFByYJZEzlV8u5jb7gfDA6mBMZjNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpnbGtUT1ZYeTdtTnZ1QjhNRHFZRXhtTTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lNmNkNzctOGU3NS00NTAxLWIzY2It
NTM2MTMzNzdlMzE3LzEvSEpnbGtUT1ZYeTdtTnZ1QjhNRHFZRXhtTTFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lNmNkNzctOGU3NS00NTAxLWIzY2ItNTM2MTMzNzdlMzE3
LzEvSEpnbGtUT1ZYeTdtTnZ1QjhNRHFZRXhtTTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPtjh0sy
G3uOusQ7vYoKWRM/VWbZBx6MYnmjPxQXLwLMLPhjYaj6B8bvwsVcezpHGVz3akDf
ztWSF4O8YNLF59hhY4qD1oYpKb2oFxe/8gOewEpQCdD4Pq4BWWIlfY0Nd9g3n8eP
Uutt5k2NvyALri9Qvl405EM/+u5BQ/S0tDffFUJEQRRK5hJRPNcouM4hqVcIVYet
K9hswfTJJmVxVJwlTAyMs0rohC5PKJYQTey2XpyDB7+Bdr/5a3ZXV4FXcQKzynov
9HqMrqiubKT91fUaM4aYuOQu/yLCcrSwtfmY9KoOND1R/03YfUSTrnAOcpMg+dVx
Rn0vq060LwoZ4w==
-----END CERTIFICATE-----
Generated at Thu Jun 12 11:30:20 2025 by rpki-client