Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
File: N-1J76yXlZh3cazcd6DiKJBCd60.mft (raw, json)
Hash identifier: Q0bDYMf35X6bk/jcaJjve0ySf61skkD1k3DVcgr+674=
Subject key identifier: AD:11:A5:FF:A6:A3:C9:1F:AB:E2:1D:1C:E8:20:B4:22:54:38:E3:B4
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 01975CEE90C0A58A7ED667AC04547FAEC5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
Manifest number: 0D85
Signing time: Wed 11 Jun 2025 03:00:27 +0000
Manifest this update: Wed 11 Jun 2025 03:00:27 +0000
Manifest next update: Thu 12 Jun 2025 03:00:27 +0000
Files and hashes: 1: N-1J76yXlZh3cazcd6DiKJBCd60.crl (hash: iPL2ijTtpGeuLFM1Q/NZxaN/C/Rtg0qF4lXgPd2v7Fw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:ee:90:c0:a5:8a:7e:d6:67:ac:04:54:7f:ae:c5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Jun 11 03:00:27 2025 GMT
Not After : Jun 12 03:00:27 2025 GMT
Subject: CN=ad11a5ffa6a3c91fabe21d1ce820b4225438e3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a3:5d:78:2c:b9:d1:2f:81:d3:74:49:be:e1:
8c:af:e3:44:ea:4f:d6:5c:df:5e:bc:77:3e:60:90:
f1:0a:a0:4d:71:7a:a9:91:b5:d6:fe:5e:84:33:84:
d6:5b:af:ea:b4:fc:0f:6f:f8:b0:c3:ee:1f:e7:3e:
5b:28:bd:76:e9:75:6d:9f:cd:52:66:56:19:f7:7c:
3d:4d:7f:c6:f7:a0:30:bc:ea:47:b3:86:6b:7b:79:
8d:fb:43:7b:f4:e2:a4:c2:80:6d:c5:07:b4:0f:b5:
fc:9a:5c:13:f9:b1:e7:c5:5b:af:82:60:92:81:33:
f9:fd:e6:22:8a:3e:d7:79:89:9e:12:c5:7d:1d:05:
39:96:9e:45:08:27:8c:e6:46:9c:ab:0d:bd:8b:dc:
ea:b9:be:6e:be:ac:64:97:8b:a7:d4:11:9f:2f:e6:
ae:c0:ba:1c:f7:33:74:40:7e:c6:be:3e:f4:11:4b:
be:3d:9f:c5:88:57:49:b7:ab:d5:11:dd:07:69:26:
f3:bd:8f:48:44:7e:98:c7:3a:c0:ee:f2:9f:e1:9a:
c1:31:74:95:41:9d:f6:a8:88:42:23:1d:65:37:07:
7a:f3:92:35:e0:9d:b5:39:3e:eb:af:69:73:2f:6e:
f1:27:36:fc:ae:43:76:08:c3:14:b5:1c:64:7f:67:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:11:A5:FF:A6:A3:C9:1F:AB:E2:1D:1C:E8:20:B4:22:54:38:E3:B4
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c6:b2:d1:4e:1a:8d:50:83:5e:19:c5:4f:ea:eb:38:1b:5c:
ba:19:28:fb:42:95:a5:bd:a0:e4:88:05:52:22:f9:f2:8e:cf:
22:b7:01:1b:c1:62:85:5e:3b:73:98:c7:46:14:3c:8d:1d:8a:
39:ea:24:01:09:49:b9:3c:59:48:5b:d2:65:22:2b:c1:ff:fa:
38:96:e2:80:ed:9b:7f:4e:cc:a3:43:89:a9:fc:24:1f:be:bd:
96:fd:30:99:59:c8:72:77:b9:96:e3:a1:dd:7f:19:72:73:84:
fc:6a:7d:8d:7f:d3:2c:64:1d:be:3e:4c:ee:f2:12:a3:22:a5:
b9:7a:32:a8:0d:a2:33:f9:f5:eb:6c:0e:ce:75:14:2a:52:ce:
84:db:e6:74:71:d0:01:a3:61:11:6d:21:9b:cb:0d:95:5e:fc:
66:c9:de:bb:ef:f0:a3:bb:6a:27:39:92:b8:ec:8f:af:dc:22:
75:5c:26:cf:33:65:b7:e5:59:d3:4c:9c:e9:f1:16:8a:41:28:
36:e2:5e:77:d2:3e:d2:d3:b7:21:65:5f:10:1c:ec:04:11:f4:
49:d7:4b:5e:d5:b0:0f:c1:8a:db:14:17:a8:54:79:ef:a6:7b:
bf:1d:10:5d:06:44:b3:67:15:4f:ce:83:15:49:a6:90:cc:44:
d8:fe:07:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:19:53 2025 by rpki-client