Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a4d0de-9bd8-4f27-b93f-52f811af1636/1/WS9YOvU6OhkqFL25q0FViF5cLWo.mft
File: WS9YOvU6OhkqFL25q0FViF5cLWo.mft (raw, json)
Hash identifier: /oCeh78tA95KnmByQa3OPVg0EAgv6sAEEKq660p1mG4=
Subject key identifier: DD:4E:2E:B9:1C:69:13:87:AB:A7:A5:A5:A2:F7:2E:8D:E5:D5:26:D4
Authority key identifier: 59:2F:58:3A:F5:3A:3A:19:2A:14:BD:B9:AB:41:55:88:5E:5C:2D:6A
Certificate issuer: /CN=592f583af53a3a192a14bdb9ab4155885e5c2d6a
Certificate serial: 0185D9B3A4A83FF118BEF5258F8829432DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS9YOvU6OhkqFL25q0FViF5cLWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a4d0de-9bd8-4f27-b93f-52f811af1636/1/WS9YOvU6OhkqFL25q0FViF5cLWo.mft
Manifest number: 03
Signing time: Sun 22 Jan 2023 13:38:26 +0000
Manifest this update: Sun 22 Jan 2023 13:38:26 +0000
Manifest next update: Mon 23 Jan 2023 13:38:26 +0000
Files and hashes: 1: WS9YOvU6OhkqFL25q0FViF5cLWo.crl (hash: 9yOn97mBW9yzZIqdf/SflaEIEzBkOXq0cPLCbKCBiuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d9:b3:a4:a8:3f:f1:18:be:f5:25:8f:88:29:43:2d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592f583af53a3a192a14bdb9ab4155885e5c2d6a
Validity
Not Before: Jan 22 13:38:26 2023 GMT
Not After : Jan 23 13:38:26 2023 GMT
Subject: CN=dd4e2eb91c691387aba7a5a5a2f72e8de5d526d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dc:1c:3c:fb:e6:5d:ff:92:52:11:50:3a:6c:
77:cf:7d:11:81:03:a9:ab:d8:b9:8b:46:fd:81:6c:
f2:d3:6e:1e:39:cb:fd:9b:48:8c:a4:d7:65:56:a4:
38:39:e0:18:64:41:a0:d4:0d:6a:7a:cd:c1:64:f2:
90:b1:13:17:c6:89:0e:6f:09:83:cc:0f:dd:a7:f7:
48:a0:b2:a4:ee:19:13:e9:95:30:b2:62:93:ad:e9:
1e:bd:ed:2a:47:cf:b2:5f:d7:db:a7:70:7b:8c:83:
0c:6c:f0:57:5d:78:d0:3c:d9:c4:6e:29:9e:08:bc:
5d:94:3c:3e:48:25:31:84:ac:7c:f5:ea:8a:f0:fb:
a9:7e:73:4c:3b:ca:4f:e0:9d:c8:00:b8:be:e8:c2:
69:b7:54:3b:b1:7b:78:56:4e:74:5d:a1:e0:cb:d0:
a4:48:7b:36:73:fd:8d:34:38:88:df:ef:76:c5:fc:
fa:4e:e9:8d:b8:e8:66:0f:2d:12:24:ed:81:d9:4c:
60:49:eb:63:ac:56:28:7a:07:c6:60:06:6d:32:35:
92:8c:52:28:8c:30:e0:f7:9a:b2:16:21:f9:5c:ed:
3b:29:23:ef:2f:30:b5:d7:6e:f9:17:e5:52:76:cf:
6b:d8:e5:64:86:ef:a3:78:31:f4:8a:3d:11:93:f8:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4E:2E:B9:1C:69:13:87:AB:A7:A5:A5:A2:F7:2E:8D:E5:D5:26:D4
X509v3 Authority Key Identifier:
keyid:59:2F:58:3A:F5:3A:3A:19:2A:14:BD:B9:AB:41:55:88:5E:5C:2D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS9YOvU6OhkqFL25q0FViF5cLWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a4d0de-9bd8-4f27-b93f-52f811af1636/1/WS9YOvU6OhkqFL25q0FViF5cLWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a4d0de-9bd8-4f27-b93f-52f811af1636/1/WS9YOvU6OhkqFL25q0FViF5cLWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:20:95:08:56:9f:10:b5:ef:53:73:10:3e:7e:f5:db:62:c4:
88:e1:e9:9c:4d:78:95:87:bc:d9:3d:4b:9c:f3:f1:91:08:7f:
d6:e6:3c:5a:92:9c:ae:a8:5d:1e:92:31:dc:7a:1e:34:bc:21:
4f:f0:bc:bc:df:73:59:a4:fc:76:ab:30:3c:72:e3:ef:07:af:
bd:86:e1:3e:28:ad:d2:20:42:32:70:9d:48:a7:46:f6:09:b6:
a5:88:0a:05:15:ed:c5:f0:81:48:15:ac:e1:58:8e:eb:3f:d8:
ea:17:c0:7c:19:74:ab:31:0f:9d:1d:eb:d0:9c:bc:9c:d6:10:
81:ff:fa:60:e0:30:f7:4c:03:70:f4:d9:d5:7f:7f:5c:16:e4:
b1:ed:2f:59:14:55:b5:55:c6:7d:ec:d1:01:c0:45:52:a9:30:
38:34:1f:e6:3f:d5:76:1d:4f:e9:b1:bb:2e:17:f5:f1:60:89:
98:b0:3b:1f:32:3e:af:bb:06:8c:78:a5:14:41:e7:12:c3:02:
1f:a2:50:80:69:31:46:72:d7:80:e8:4a:e7:e6:51:03:57:3a:
01:48:af:9d:8e:c1:dc:d6:84:f5:37:07:36:55:e6:43:19:98:
d3:8b:0d:b9:7f:e8:75:88:41:5f:57:5e:58:b7:af:95:73:72:
29:31:6f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:30:47 2025 by rpki-client