
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9abec8-23eb-4e28-b5fe-820b17149f90/1/O_FdVr2lyNQafXdytQkmbRC5wgc.mft
File: O_FdVr2lyNQafXdytQkmbRC5wgc.mft (raw, json)
Hash identifier: UiNqWtgLrr/Quh2xza00loF1gvvjxFKOKh28PJ7n31Y=
Subject key identifier: 23:2A:A2:E4:9C:E5:AC:C7:E6:84:58:1B:1E:63:73:56:04:B2:DB:7C
Authority key identifier: 3B:F1:5D:56:BD:A5:C8:D4:1A:7D:77:72:B5:09:26:6D:10:B9:C2:07
Certificate issuer: /CN=3bf15d56bda5c8d41a7d7772b509266d10b9c207
Certificate serial: 01975F4B3214E3975D6A3D9F4EB6C443D688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_FdVr2lyNQafXdytQkmbRC5wgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9abec8-23eb-4e28-b5fe-820b17149f90/1/O_FdVr2lyNQafXdytQkmbRC5wgc.mft
Manifest number: 04
Signing time: Wed 11 Jun 2025 14:00:52 +0000
Manifest this update: Wed 11 Jun 2025 14:00:52 +0000
Manifest next update: Thu 12 Jun 2025 14:00:52 +0000
Files and hashes: 1: O_FdVr2lyNQafXdytQkmbRC5wgc.crl (hash: RIHkeUMiA2V6zh7yCKDL9a3aCOo6WXvOPqsMl857zr0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:4b:32:14:e3:97:5d:6a:3d:9f:4e:b6:c4:43:d6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf15d56bda5c8d41a7d7772b509266d10b9c207
Validity
Not Before: Jun 11 14:00:52 2025 GMT
Not After : Jun 12 14:00:52 2025 GMT
Subject: CN=232aa2e49ce5acc7e684581b1e63735604b2db7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:09:28:87:ac:e9:94:8f:11:41:1e:18:ba:
2f:50:78:22:4b:ee:3a:43:23:07:60:b1:5a:a4:58:
6f:34:d2:0e:77:96:fd:f5:93:38:5f:cc:7c:d7:22:
48:1b:8d:1a:0f:b6:5e:80:00:81:07:0a:83:a9:b7:
6d:9a:e7:80:60:ec:8b:a0:e3:24:86:30:41:97:c7:
ae:4d:c2:61:ce:4c:8f:2a:99:38:db:8b:a2:35:89:
25:a1:e3:39:a8:95:3d:58:e5:21:b6:f4:ad:bb:b1:
80:be:1b:60:1c:2e:19:ec:35:06:e6:28:d7:de:2b:
01:d5:52:34:cd:e3:fc:fa:c6:d5:87:49:61:ce:b1:
b1:79:0f:70:e6:09:51:49:e8:35:08:e2:8b:fc:68:
e6:69:ef:df:90:cb:c0:9a:cd:e6:94:eb:3f:44:ee:
74:eb:cd:4f:b3:01:74:26:ed:b7:01:dc:f0:68:52:
6d:b7:48:e1:f8:7d:0a:23:e9:62:0a:20:20:a1:62:
3c:77:ca:cb:16:e4:c1:a7:5f:3c:46:74:10:9d:d5:
b5:0d:7f:e3:59:67:05:38:26:31:a1:55:15:f1:f8:
f6:3f:e2:29:ea:f4:01:1b:6b:9d:8e:d0:d8:2b:f7:
73:52:23:0e:05:0a:b5:e1:09:a3:5b:8f:5b:6d:6e:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2A:A2:E4:9C:E5:AC:C7:E6:84:58:1B:1E:63:73:56:04:B2:DB:7C
X509v3 Authority Key Identifier:
keyid:3B:F1:5D:56:BD:A5:C8:D4:1A:7D:77:72:B5:09:26:6D:10:B9:C2:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_FdVr2lyNQafXdytQkmbRC5wgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9abec8-23eb-4e28-b5fe-820b17149f90/1/O_FdVr2lyNQafXdytQkmbRC5wgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9abec8-23eb-4e28-b5fe-820b17149f90/1/O_FdVr2lyNQafXdytQkmbRC5wgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:71:89:44:2a:ff:1e:c9:88:bc:a4:44:5b:61:eb:98:9c:49:
48:26:b8:5c:0e:e7:45:9c:1b:f6:eb:23:1a:6b:ec:b3:5e:25:
79:40:08:62:b9:c4:d6:3e:42:fc:c7:49:74:dd:21:5d:07:9f:
e6:9c:38:83:d2:e0:4a:25:b3:03:20:c5:6b:af:db:50:b6:99:
49:7b:33:0c:5d:a0:73:66:0d:60:b5:56:34:d4:97:60:9a:35:
16:01:d7:98:dc:5c:22:e4:c6:b3:1e:1a:19:31:d6:77:c0:fa:
ce:ba:3c:de:1e:b1:8c:b6:c3:53:e8:a3:1d:84:b8:6d:41:a5:
fe:c6:cd:ee:b2:7d:3f:5f:16:b6:c6:b7:2b:88:8a:20:32:ea:
e9:fb:08:c6:a8:e8:03:7a:01:02:e0:5a:c3:35:f8:96:0f:59:
11:08:32:8e:c9:3c:0e:df:f6:47:4b:10:8e:29:91:13:14:28:
f3:e1:06:02:7b:fd:d9:19:0b:18:f1:cf:ac:ed:29:8a:9b:7c:
e6:30:42:33:7b:f1:33:63:a8:86:27:c1:b0:ef:75:46:b6:4d:
ea:7c:95:ef:a9:22:9c:91:d3:03:50:f2:84:57:3c:6e:ff:d8:
6b:65:17:b5:0b:c9:8a:1b:70:6f:26:12:4b:00:3d:81:a4:19:
65:15:bb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:43 2025 by rpki-client