Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
File: CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft (raw, json)
Hash identifier: BlJ5k4kp51qGs9OaJKgUANTDAu8aa5R12uRI3FDu6Ok=
Subject key identifier: CF:4E:10:F0:3B:2B:74:E7:CF:00:F9:1B:FF:41:BB:9E:A2:49:7B:DA
Authority key identifier: 08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24
Certificate issuer: /CN=0817255df3130bdb77fc37187d06005fee066724
Certificate serial: 0195EBA5C81A0D57B91AEADEE1C4CCE14853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
Manifest number: 0E55
Signing time: Mon 31 Mar 2025 10:01:04 +0000
Manifest this update: Mon 31 Mar 2025 10:01:04 +0000
Manifest next update: Tue 01 Apr 2025 10:01:04 +0000
Files and hashes: 1: CBclXfMTC9t3_DcYfQYAX-4GZyQ.crl (hash: fzPVjpyewjf8pKsDmmNbwSd9LWC535atmrzo2pWgRKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:a5:c8:1a:0d:57:b9:1a:ea:de:e1:c4:cc:e1:48:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0817255df3130bdb77fc37187d06005fee066724
Validity
Not Before: Mar 31 10:01:04 2025 GMT
Not After : Apr 1 10:01:04 2025 GMT
Subject: CN=cf4e10f03b2b74e7cf00f91bff41bb9ea2497bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3a:10:99:7c:32:4e:46:f1:fa:6e:da:2f:07:
bf:09:90:58:be:a2:a1:51:b2:87:80:7e:c9:c8:7f:
6d:9f:6a:4f:7d:a8:04:5d:58:f0:d9:67:9a:b2:24:
a9:92:15:ef:16:54:fc:8c:0d:75:da:50:25:40:17:
8a:0d:a1:e4:e3:e0:b1:46:47:7f:42:e8:a6:6e:43:
a1:0b:23:bf:96:e5:30:c7:dd:a0:de:8f:dc:4d:a3:
43:b0:50:5a:13:b8:9a:81:f1:d8:9d:54:8a:b7:8e:
f8:f6:fb:9b:e8:cc:e7:f2:bc:58:7c:ca:f1:5c:b8:
9d:a6:ae:18:48:73:19:ca:27:c8:82:a3:f5:13:47:
a9:a4:cc:72:fb:4f:f5:31:bc:f9:24:d7:3c:19:4b:
ea:5b:c6:5d:69:d4:dd:ab:56:eb:47:8a:56:b3:4e:
ab:7e:5b:f6:10:be:2c:ad:5b:15:8b:03:9f:01:12:
ad:d9:35:0b:f2:9c:be:e7:2f:25:c9:45:8c:d9:8c:
87:0e:0f:7d:98:c7:7e:d8:7f:fe:64:24:21:96:ab:
95:80:0b:46:28:6a:4d:8a:81:21:7c:df:93:75:d2:
b1:28:33:16:7e:a7:0c:c0:da:18:49:0e:3f:8f:03:
d3:fe:6a:c9:d4:9a:1e:af:db:11:46:52:f7:82:42:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4E:10:F0:3B:2B:74:E7:CF:00:F9:1B:FF:41:BB:9E:A2:49:7B:DA
X509v3 Authority Key Identifier:
keyid:08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fa:2c:44:8a:43:1a:a9:cb:08:98:eb:65:7b:51:9c:da:9c:
6c:75:7a:86:b1:75:f8:0a:e1:64:c7:2c:cb:03:1d:ed:10:76:
d3:99:c2:84:98:2a:40:4f:b9:0c:03:f1:6a:57:f7:26:46:f6:
48:d9:80:99:47:c4:42:5f:b1:93:5a:4c:af:7d:f1:2e:8d:f4:
30:d7:1c:1b:bc:c2:e0:15:70:a8:2c:86:d3:6e:dc:ce:f8:ba:
e2:1e:e5:b9:2a:1f:04:dc:31:38:e5:99:14:c2:cd:38:95:2e:
7d:23:4a:48:9d:2f:30:aa:94:bf:ee:41:9e:d5:eb:0b:85:00:
c7:b5:04:bd:68:e7:f5:98:12:08:cb:ba:29:7c:7f:f4:a7:36:
b7:58:9f:6c:1c:35:31:ba:ff:2a:84:df:7f:f5:35:5e:9f:2a:
00:fc:e7:6a:4c:dc:0a:0a:4f:b4:2b:91:d6:44:9c:cc:d6:85:
cd:4a:ed:26:41:d9:44:04:26:8b:95:f3:a8:08:73:f3:46:a3:
b8:5a:cc:24:eb:e4:ae:52:84:e9:94:b8:90:04:91:3e:51:26:
f9:b1:f5:69:19:28:62:89:81:a7:06:55:8d:40:a2:1c:21:28:
9f:81:54:c7:91:97:8c:4a:48:e0:ab:6b:98:67:5a:a7:b1:21:
07:3e:2b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:35:07 2025 by rpki-client