Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft
File: b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft (raw, json)
Hash identifier: 7y0OAJHMeZfCwUoM3geQQ8Qpp9aqX/k5cD+mSghMv2o=
Subject key identifier: 23:19:FC:C7:AD:81:88:94:6D:FF:77:8E:FD:48:65:4F:B9:E3:3B:A3
Authority key identifier: 6F:9C:98:94:B1:13:E7:D5:A3:F0:B2:BC:39:D6:36:05:B8:BC:AC:D3
Certificate issuer: /CN=6f9c9894b113e7d5a3f0b2bc39d63605b8bcacd3
Certificate serial: 0196C3F0A4E77B039DDD0468723FAFC47FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5yYlLET59Wj8LK8OdY2Bbi8rNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft
Manifest number: 1234
Signing time: Mon 12 May 2025 10:00:50 +0000
Manifest this update: Mon 12 May 2025 10:00:50 +0000
Manifest next update: Tue 13 May 2025 10:00:50 +0000
Files and hashes: 1: b5yYlLET59Wj8LK8OdY2Bbi8rNM.crl (hash: Vx7MdMQcKNoF7ODNTZDWcnn5i4EPY8S5Jv6LzSq+wMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:a4:e7:7b:03:9d:dd:04:68:72:3f:af:c4:7f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9c9894b113e7d5a3f0b2bc39d63605b8bcacd3
Validity
Not Before: May 12 10:00:50 2025 GMT
Not After : May 13 10:00:50 2025 GMT
Subject: CN=2319fcc7ad8188946dff778efd48654fb9e33ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:9a:06:2d:42:22:a5:1e:84:3f:f3:4f:32:
39:20:d3:7e:aa:b9:6e:f5:22:f9:6b:74:84:75:82:
04:df:bf:8c:a8:de:64:59:b7:da:e8:1e:74:21:32:
97:9d:fc:16:62:68:31:d4:c8:08:8c:e5:dd:45:56:
6f:3f:29:4c:fd:f0:3f:76:24:0f:2c:ef:5d:a0:af:
fe:b8:e1:3c:fd:3d:c7:c7:b2:91:f8:b5:ef:e8:1f:
3d:fc:45:9d:38:09:24:5a:0a:4f:be:17:ca:05:c2:
6d:78:bb:2a:ca:8b:22:fc:91:69:8e:ea:b5:61:7c:
d8:28:e9:55:21:bd:73:29:90:82:3c:da:d3:c9:36:
a1:63:15:7c:6e:70:47:39:23:3c:91:39:19:4c:1d:
f4:4f:6a:4c:6f:f9:f9:a6:d7:ce:07:05:7b:e9:03:
12:45:57:40:3c:6e:f1:10:20:a8:d7:7b:04:b8:83:
b3:4a:a4:80:6e:d4:af:43:0f:dd:d9:9e:ce:05:ef:
9b:ba:aa:76:34:93:99:80:e7:3d:b9:7e:f0:43:b0:
5e:78:9b:7b:a7:a5:db:dd:22:03:52:7f:50:fc:ad:
32:da:e9:f3:64:c9:e9:ed:93:04:b7:32:44:e2:99:
56:32:91:3a:ce:48:24:98:6a:1c:fc:99:7c:94:c4:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:19:FC:C7:AD:81:88:94:6D:FF:77:8E:FD:48:65:4F:B9:E3:3B:A3
X509v3 Authority Key Identifier:
keyid:6F:9C:98:94:B1:13:E7:D5:A3:F0:B2:BC:39:D6:36:05:B8:BC:AC:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5yYlLET59Wj8LK8OdY2Bbi8rNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:60:0a:a8:92:28:09:04:e2:73:9f:27:ea:df:60:35:ab:e5:
d6:01:11:b7:ed:ac:78:b9:6f:2b:fd:a4:98:86:cd:57:c2:79:
1f:03:36:15:8b:49:37:fe:23:67:bd:fe:18:05:76:23:88:9e:
ca:21:2e:65:3c:10:cb:85:bc:2a:18:71:5c:7b:1a:34:94:b1:
c8:14:74:9e:9c:73:ac:ed:ad:23:44:b3:ea:19:10:97:ec:07:
25:65:db:45:90:eb:4b:28:28:1d:cb:98:c2:eb:23:25:64:cf:
c4:01:bd:67:a4:99:93:9f:2e:3a:4a:63:e4:6d:52:77:ae:1f:
32:98:c5:0a:52:06:54:02:cd:38:5d:5b:c9:25:0c:6e:f6:6c:
86:92:1e:6b:e2:e0:dc:96:cf:b5:83:84:11:6c:4f:c9:33:31:
15:ca:e4:58:a9:c6:3f:04:08:9f:37:1b:1a:11:96:18:9e:b4:
97:b4:e0:fe:66:e2:49:2d:6a:6c:4f:ee:5c:db:ea:6f:7c:85:
19:26:2e:c8:4a:8b:6c:a6:b6:f3:4d:47:bd:9b:a4:85:36:46:
05:1b:bb:3b:43:f6:03:cd:97:61:2d:b0:2b:bc:26:c3:93:d3:
44:27:00:da:5f:2b:21:f2:9a:05:26:35:f6:ec:da:19:55:bf:
66:12:d2:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbD8KTnewOd3QRocj+vxH/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOWM5ODk0YjExM2U3ZDVhM2YwYjJiYzM5ZDYzNjA1Yjhi
Y2FjZDMwHhcNMjUwNTEyMTAwMDUwWhcNMjUwNTEzMTAwMDUwWjAzMTEwLwYDVQQD
EygyMzE5ZmNjN2FkODE4ODk0NmRmZjc3OGVmZDQ4NjU0ZmI5ZTMzYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW6aBi1CIqUehD/zTzI5INN+qrlu
9SL5a3SEdYIE37+MqN5kWbfa6B50ITKXnfwWYmgx1MgIjOXdRVZvPylM/fA/diQP
LO9doK/+uOE8/T3Hx7KR+LXv6B89/EWdOAkkWgpPvhfKBcJteLsqyosi/JFpjuq1
YXzYKOlVIb1zKZCCPNrTyTahYxV8bnBHOSM8kTkZTB30T2pMb/n5ptfOBwV76QMS
RVdAPG7xECCo13sEuIOzSqSAbtSvQw/d2Z7OBe+buqp2NJOZgOc9uX7wQ7BeeJt7
p6Xb3SIDUn9Q/K0y2unzZMnp7ZMEtzJE4plWMpE6zkgkmGoc/Jl8lMSKKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMZ/MetgYiUbf93jv1IZU+54zujMB8GA1UdIwQY
MBaAFG+cmJSxE+fVo/CyvDnWNgW4vKzTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjV5WWxMRVQ1OVdqOExLOE9kWTJCYmk4ck5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmQzY2YtNGYwNy00OWFkLTk5Yjct
Njc2YTRjNmViYjM5LzEvYjV5WWxMRVQ1OVdqOExLOE9kWTJCYmk4ck5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZmQzY2YtNGYwNy00OWFkLTk5YjctNjc2YTRjNmViYjM5
LzEvYjV5WWxMRVQ1OVdqOExLOE9kWTJCYmk4ck5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGAKqJIo
CQTic58n6t9gNavl1gERt+2seLlvK/2kmIbNV8J5HwM2FYtJN/4jZ73+GAV2I4ie
yiEuZTwQy4W8KhhxXHsaNJSxyBR0npxzrO2tI0Sz6hkQl+wHJWXbRZDrSygoHcuY
wusjJWTPxAG9Z6SZk58uOkpj5G1Sd64fMpjFClIGVALNOF1bySUMbvZshpIea+Lg
3JbPtYOEEWxPyTMxFcrkWKnGPwQInzcbGhGWGJ60l7Tg/mbiSS1qbE/uXNvqb3yF
GSYuyEqLbKa2801HvZukhTZGBRu7O0P2A82XYS2wK7wmw5PTRCcA2l8rIfKaBSY1
9uzaGVW/ZhLSWQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:58:08 2025 by rpki-client