Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
File: jlDZuD8_AVrYi_a3xShIZ0rly24.mft (raw, json)
Hash identifier: Gjy8H9CbJMIvrgDWeW5n7JkDRMTfgQ9kexsTpD4u6TQ=
Subject key identifier: 36:30:28:C2:DC:DA:F1:CE:AA:DF:AC:AD:AD:3B:D1:64:E9:93:D6:CC
Authority key identifier: 8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
Certificate issuer: /CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Certificate serial: 01973EE4046717CE9144D1757019D9DE9D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
Manifest number: 08F1
Signing time: Thu 05 Jun 2025 07:00:19 +0000
Manifest this update: Thu 05 Jun 2025 07:00:19 +0000
Manifest next update: Fri 06 Jun 2025 07:00:19 +0000
Files and hashes: 1: jlDZuD8_AVrYi_a3xShIZ0rly24.crl (hash: ysSYrddnkxV78PXIduOAYa6xFTYFj/TwIle4p3oUA8A=)
2: kchIPTEIqMp0vpAjfgQEwz2BSpw.roa (hash: Nd32beBirDyD6e0HPEc2YHkqNEJViSi6nJI2FhIdX3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3e:e4:04:67:17:ce:91:44:d1:75:70:19:d9:de:9d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Validity
Not Before: Jun 5 07:00:19 2025 GMT
Not After : Jun 6 07:00:19 2025 GMT
Subject: CN=363028c2dcdaf1ceaadfacadad3bd164e993d6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:a4:96:51:80:58:b0:3f:fe:af:68:62:79:
1d:a0:68:92:bc:71:30:dd:3f:70:bb:fa:5d:59:7e:
55:76:3a:3c:ad:3b:c9:d1:4b:88:37:de:87:84:aa:
d0:94:9f:47:bb:e5:4a:1e:b9:fe:5c:20:e9:a0:74:
ee:63:b4:4d:97:c7:4d:77:f1:58:a9:69:80:78:75:
38:5b:5d:4f:ef:c3:ab:20:89:86:40:88:e6:2a:30:
46:14:dc:5b:bc:2c:9e:9e:4f:ac:b7:91:30:23:b6:
54:ba:22:0f:09:66:5e:2b:61:f4:8e:e9:55:e7:50:
69:cf:86:46:bd:4a:9c:1b:15:59:ee:52:5b:d2:7e:
c4:73:c6:dd:9f:58:cf:33:02:ec:89:95:14:41:da:
46:be:64:41:b9:73:37:bc:0c:c3:6d:0e:66:20:3c:
00:32:52:82:6a:fa:50:85:5a:a2:34:02:76:c5:4c:
78:ac:18:24:4e:c0:1f:95:ee:b3:84:10:4f:ac:e4:
5e:3c:76:01:a0:e2:df:45:f9:e0:f1:16:c8:d7:62:
2d:e4:d6:d4:f0:21:cb:03:5a:74:14:58:cb:ff:99:
7e:1a:b4:04:de:9c:da:9d:90:06:3b:29:9c:a2:38:
63:c3:97:12:52:1b:71:6c:10:09:49:9b:7e:55:fc:
3c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:30:28:C2:DC:DA:F1:CE:AA:DF:AC:AD:AD:3B:D1:64:E9:93:D6:CC
X509v3 Authority Key Identifier:
keyid:8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:1c:a9:82:3e:2e:6e:3a:5c:aa:aa:29:51:30:d7:0b:01:c6:
3e:be:15:61:64:93:14:5a:03:40:b2:3f:c5:1e:4d:e6:6e:95:
43:07:28:01:71:0e:d7:3c:75:02:b8:d9:c0:48:54:5b:fc:92:
bf:6e:d7:ae:e9:7f:a3:0b:7e:5c:78:cc:b3:3c:a1:d4:d9:fd:
fc:2e:15:b0:c8:a8:1b:72:92:b7:23:1e:ef:65:fe:06:b2:03:
24:6a:a6:cc:43:b3:9a:5b:7c:3b:56:69:be:61:96:52:ad:9d:
2b:d6:f7:3c:26:8a:3d:4e:ec:f9:59:98:5f:04:d7:b5:70:ce:
16:19:fd:65:78:0a:ea:f4:25:cc:a9:af:57:e5:f2:49:8b:52:
32:32:1e:fe:6f:8f:5d:4e:05:b1:0c:5c:f4:89:1e:c1:f6:13:
68:a3:a1:fa:08:d4:c5:67:cd:97:2a:e8:9c:3e:af:8e:40:7b:
43:75:c6:de:8f:c6:72:e0:62:8d:db:6d:21:af:03:93:d3:2f:
c6:f5:7a:dd:d7:e2:b6:52:24:02:6d:40:30:91:91:82:39:6e:
49:98:c0:ef:6f:0d:20:bc:2c:90:c1:5e:7d:1f:05:26:ce:3e:
92:5e:2d:17:65:78:93:05:44:7a:b0:fb:1a:c2:e0:c0:c1:58:
87:aa:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:53 2025 by rpki-client