Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5f61a5-7fdb-4d02-93ec-0c65c41a6d2b/1/rEmesNS882vbjnuqgFcJ1Z8jSa0.mft
File: rEmesNS882vbjnuqgFcJ1Z8jSa0.mft (raw, json)
Hash identifier: yat8Pg2GdlLCPpKIINUdp6fpzYPQa9i5WUu08G7aw6U=
Subject key identifier: 30:A9:10:D2:0E:83:99:D4:DA:64:E6:0A:FC:14:04:1E:80:76:28:44
Authority key identifier: AC:49:9E:B0:D4:BC:F3:6B:DB:8E:7B:AA:80:57:09:D5:9F:23:49:AD
Certificate issuer: /CN=ac499eb0d4bcf36bdb8e7baa805709d59f2349ad
Certificate serial: 0196EFB77581839878BE9C24659FBA8B923F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEmesNS882vbjnuqgFcJ1Z8jSa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5f61a5-7fdb-4d02-93ec-0c65c41a6d2b/1/rEmesNS882vbjnuqgFcJ1Z8jSa0.mft
Manifest number: 0554
Signing time: Tue 20 May 2025 22:01:39 +0000
Manifest this update: Tue 20 May 2025 22:01:39 +0000
Manifest next update: Wed 21 May 2025 22:01:39 +0000
Files and hashes: 1: rEmesNS882vbjnuqgFcJ1Z8jSa0.crl (hash: iVG4c3QN09ZiVMXCc+XbDR0J412EOAD6yhj5Biw+Sss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ef:b7:75:81:83:98:78:be:9c:24:65:9f:ba:8b:92:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac499eb0d4bcf36bdb8e7baa805709d59f2349ad
Validity
Not Before: May 20 22:01:39 2025 GMT
Not After : May 21 22:01:39 2025 GMT
Subject: CN=30a910d20e8399d4da64e60afc14041e80762844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:23:85:f4:6d:a2:21:a5:40:37:85:41:f8:ee:
d7:0b:76:24:77:16:9e:d3:6d:f2:42:e6:ca:d7:16:
cd:48:e2:a8:f8:74:74:47:23:00:d3:20:fe:5d:64:
8d:13:95:1b:52:85:de:66:42:b5:e4:b1:1d:26:13:
93:41:76:0e:4f:dd:22:c7:74:45:e6:94:95:90:e6:
1e:f4:f2:79:02:98:b4:73:33:b4:49:af:86:a6:7a:
75:d9:86:5e:50:42:0e:9f:e2:cb:0b:bd:a9:61:5c:
58:07:6e:df:3f:00:4d:23:7d:3a:03:69:d4:ab:5c:
bc:56:ee:3f:a5:2c:69:5b:d8:0c:9b:83:e8:b3:ec:
eb:b4:c4:85:f1:44:6a:48:b0:44:c9:19:03:ce:ab:
99:cb:bd:d4:5c:7a:12:15:54:ab:e1:00:55:00:16:
49:49:53:9b:ab:78:09:c3:22:4e:5f:35:de:5e:13:
e6:9f:e9:5e:d3:52:fa:0f:47:e4:a6:39:e1:bc:6a:
0d:a9:3f:54:36:ab:11:3f:6c:7a:5a:70:36:0f:43:
33:47:3e:5f:f3:2a:c5:b5:0b:b6:6e:7f:e5:42:69:
6f:3f:80:dc:41:33:e6:06:84:3b:4d:0f:a1:5c:c8:
ab:6d:59:d8:b6:b7:b6:4c:6c:94:6d:15:39:71:aa:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A9:10:D2:0E:83:99:D4:DA:64:E6:0A:FC:14:04:1E:80:76:28:44
X509v3 Authority Key Identifier:
keyid:AC:49:9E:B0:D4:BC:F3:6B:DB:8E:7B:AA:80:57:09:D5:9F:23:49:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEmesNS882vbjnuqgFcJ1Z8jSa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f61a5-7fdb-4d02-93ec-0c65c41a6d2b/1/rEmesNS882vbjnuqgFcJ1Z8jSa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f61a5-7fdb-4d02-93ec-0c65c41a6d2b/1/rEmesNS882vbjnuqgFcJ1Z8jSa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e6:35:11:71:c6:b5:c3:1d:9a:83:66:3a:b8:76:53:a2:44:
bd:1e:a1:82:10:b7:b0:d0:d2:a4:ae:7d:0b:02:56:e8:e4:4b:
34:88:8f:ec:6f:16:1e:e0:a6:90:b5:42:c5:ba:de:e3:7c:11:
10:0f:d1:f1:62:44:39:a0:b2:b7:8f:fa:14:c8:c1:f1:d7:79:
8e:6a:9d:a8:ff:68:b1:d9:54:20:d7:ea:05:d0:6c:cb:a4:8a:
40:9c:fe:6c:3a:3c:2d:32:b4:db:aa:9e:a6:39:4e:20:4b:0a:
6f:45:47:34:8d:24:21:f1:23:4e:7d:7e:6c:b5:69:bf:3c:14:
e7:d3:78:b3:66:eb:b9:d3:75:6d:e4:d4:0d:5d:63:15:e2:8a:
cf:14:f2:ba:7e:db:dd:14:30:ce:11:a2:ce:fe:73:c8:dc:25:
fc:4e:5c:30:60:6a:91:7a:6d:90:0e:c0:41:b7:f8:dc:3e:52:
04:13:49:a7:80:63:66:d6:86:62:00:09:bb:11:5c:a3:93:95:
1f:da:39:c3:5e:e3:48:4f:74:52:a7:a4:c0:ce:d6:6e:fb:e4:
f2:59:fe:42:9d:f9:34:31:c2:c5:91:b7:73:3f:aa:a3:45:20:
1c:7c:c5:46:7e:b1:c9:12:ec:e1:d7:e7:cb:74:27:9c:67:15:
41:e2:86:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:10:09 2025 by rpki-client