Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft
File: aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft (raw, json)
Hash identifier: MiGtl6PoqifjSbIBU93+D55QjVBBl1zsFrJAFmak/iw=
Subject key identifier: 02:48:88:0D:C2:BF:02:CE:91:08:78:AF:95:CD:6D:1F:F3:C6:E0:A3
Authority key identifier: 68:A7:47:2D:53:28:40:95:90:5A:DE:20:3C:AF:91:1C:D1:AC:17:71
Certificate issuer: /CN=68a7472d53284095905ade203caf911cd1ac1771
Certificate serial: 01982B244B2368378E60347E209D813A8612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKdHLVMoQJWQWt4gPK-RHNGsF3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft
Manifest number: 0297
Signing time: Mon 21 Jul 2025 04:00:55 +0000
Manifest this update: Mon 21 Jul 2025 04:00:55 +0000
Manifest next update: Tue 22 Jul 2025 04:00:55 +0000
Files and hashes: 1: aKdHLVMoQJWQWt4gPK-RHNGsF3E.crl (hash: XH1Oz82kfWJ6D3UVu1br/+bH/brUHSrvYtR2C33453s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:24:4b:23:68:37:8e:60:34:7e:20:9d:81:3a:86:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7472d53284095905ade203caf911cd1ac1771
Validity
Not Before: Jul 21 04:00:55 2025 GMT
Not After : Jul 22 04:00:55 2025 GMT
Subject: CN=0248880dc2bf02ce910878af95cd6d1ff3c6e0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:87:00:a4:0f:8b:35:a4:01:94:2d:6b:00:
33:3d:3c:52:1c:48:93:6e:ee:f9:58:e3:b7:83:59:
6f:f7:04:ce:c9:4f:39:8a:3c:fe:10:a5:58:41:b9:
55:56:bd:a8:56:ef:d0:b3:3e:76:c1:87:40:15:64:
1f:5c:d2:3b:82:75:be:1c:aa:11:ad:f9:90:34:9c:
a4:28:36:53:82:fb:81:17:2d:32:6c:5f:fc:06:64:
d5:03:7a:21:d5:cf:02:a0:93:f8:c1:b8:2b:1b:5a:
21:de:1c:48:b4:d1:32:48:c4:25:64:77:2a:b8:63:
92:36:61:3f:d6:45:fa:bb:53:6e:f6:46:65:65:d3:
9b:e8:29:e4:88:02:28:1e:ce:56:74:6b:61:ec:26:
2e:09:db:5e:3b:3c:66:70:df:9f:cf:7c:2e:53:7d:
ab:41:e4:7e:dc:b4:a3:d4:3d:ed:37:a5:7e:45:ea:
94:cd:c5:e9:70:ea:d9:88:94:a3:86:81:d3:f7:06:
5f:fc:a7:fc:bc:9d:20:80:cd:95:98:99:55:42:e1:
27:eb:d8:d1:b4:24:0b:0d:2f:43:a2:de:75:b4:01:
80:0f:c4:c4:97:dd:c7:7c:77:7e:c0:e1:14:b1:8e:
9a:2a:86:87:be:a0:3b:e3:29:ad:1c:ac:94:3d:e8:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:48:88:0D:C2:BF:02:CE:91:08:78:AF:95:CD:6D:1F:F3:C6:E0:A3
X509v3 Authority Key Identifier:
keyid:68:A7:47:2D:53:28:40:95:90:5A:DE:20:3C:AF:91:1C:D1:AC:17:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKdHLVMoQJWQWt4gPK-RHNGsF3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2a:d7:9f:b5:da:55:21:cf:f9:54:54:0b:c0:3f:73:24:bb:
9d:d1:3f:7c:b5:bf:ca:86:f4:a7:45:b6:ba:cc:07:97:ec:62:
e3:a6:79:90:1c:bc:df:6e:c5:21:a5:89:14:4c:d3:b4:5a:ee:
b1:c9:72:a7:2a:e0:33:91:60:58:c8:87:fb:d1:de:8c:82:ce:
52:7d:1f:af:ef:49:82:82:f2:a2:de:ad:c2:bb:fa:91:69:ed:
cc:05:a0:a8:0d:61:b2:20:5f:d6:65:d3:5c:1a:1b:3f:ce:9d:
d5:e9:01:54:bb:e2:c8:17:18:fd:a6:f9:5d:28:e9:a1:f8:74:
51:43:27:69:0d:10:7a:de:91:a1:c9:5c:be:3a:78:4f:c3:e1:
45:3d:92:63:d1:dc:da:47:76:a9:d9:0f:9b:58:3d:22:da:13:
57:bc:aa:f6:05:1a:15:0a:9a:b4:8f:f9:72:ea:e6:f0:cc:f9:
05:7f:e6:a8:05:d4:e0:03:e1:3d:75:29:46:20:a5:0d:2b:65:
e1:cf:e5:97:fb:bf:be:fb:75:79:95:92:3b:06:e8:42:26:33:
10:1b:b8:c4:82:94:d3:76:22:86:7e:30:9b:2f:b5:a4:0f:62:
b6:a8:a9:b9:86:7a:d0:6a:bc:ee:c1:00:c9:f1:83:bb:6a:e7:
7b:33:4f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:05:04 2025 by rpki-client