Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
File: 2L2bhs89vBD7aV_xTYu1ShMHsqU.mft (raw, json)
Hash identifier: hcKDGaBUtQuZ15zZCzi4lukOlPOBTOyQ7poZwKdfROM=
Subject key identifier: 11:1E:0B:91:48:40:BA:24:17:7D:24:88:7C:73:B3:DF:EE:97:42:99
Authority key identifier: D8:BD:9B:86:CF:3D:BC:10:FB:69:5F:F1:4D:8B:B5:4A:13:07:B2:A5
Certificate issuer: /CN=d8bd9b86cf3dbc10fb695ff14d8bb54a1307b2a5
Certificate serial: 0197E30BE2B8BD1C0B001B1846B7CA526C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
Manifest number: 0D2C
Signing time: Mon 07 Jul 2025 04:01:36 +0000
Manifest this update: Mon 07 Jul 2025 04:01:36 +0000
Manifest next update: Tue 08 Jul 2025 04:01:36 +0000
Files and hashes: 1: 2L2bhs89vBD7aV_xTYu1ShMHsqU.crl (hash: MxX8W5GJqtFIdy1FOU6UHOLQdlXmGMzHBCd62gB11Hs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e3:0b:e2:b8:bd:1c:0b:00:1b:18:46:b7:ca:52:6c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8bd9b86cf3dbc10fb695ff14d8bb54a1307b2a5
Validity
Not Before: Jul 7 04:01:36 2025 GMT
Not After : Jul 8 04:01:36 2025 GMT
Subject: CN=111e0b914840ba24177d24887c73b3dfee974299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:a0:8f:e5:50:c7:5e:4f:91:f4:7d:04:69:
56:5d:65:bf:ac:c4:4f:73:af:04:e2:d9:63:43:cd:
5b:f7:c3:e6:7b:2f:fd:ea:02:b1:f6:5a:bf:32:be:
4a:22:ef:4f:e9:5b:ba:19:5f:f1:ba:8d:2c:18:2e:
40:1e:1e:7a:f4:df:19:07:92:6b:35:8a:35:26:77:
a8:a9:de:7c:04:f8:d8:d9:78:23:a3:2d:bf:38:a9:
8b:46:85:12:c2:ca:38:bb:b1:4a:2c:1a:6a:13:a7:
00:f4:15:60:09:3e:04:1e:99:f1:87:69:80:c3:49:
f9:56:bd:9b:8d:11:48:93:0a:f2:73:05:99:44:b4:
b0:20:1d:68:b2:b0:87:d9:58:06:78:42:9e:9e:64:
eb:c6:4b:0c:05:6a:fb:9f:9e:cf:34:47:ba:ce:50:
a8:d3:d0:a0:46:b2:53:9d:a0:ab:4f:ba:12:cc:6e:
ea:b3:67:fa:d5:da:8e:ed:a7:f5:42:ec:fb:50:99:
bb:00:12:f7:c3:96:bc:09:64:d8:86:68:94:0c:be:
83:99:11:88:a2:3f:e0:e7:80:21:87:45:2b:db:12:
bd:e4:35:e6:7f:98:9a:74:13:d4:13:1f:90:e7:e0:
56:59:68:4d:2f:51:b9:d7:7d:f9:a4:1c:07:40:99:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1E:0B:91:48:40:BA:24:17:7D:24:88:7C:73:B3:DF:EE:97:42:99
X509v3 Authority Key Identifier:
keyid:D8:BD:9B:86:CF:3D:BC:10:FB:69:5F:F1:4D:8B:B5:4A:13:07:B2:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bd:94:fc:6a:5f:14:05:4b:ce:de:ae:dc:3c:18:db:13:47:
26:51:67:eb:e8:2b:74:e0:c2:91:31:2f:ea:67:9d:0b:04:01:
b8:22:b3:5b:1a:b7:08:23:09:34:1b:4c:2d:bd:5c:77:bd:ec:
f4:e9:59:1c:93:0a:9e:f7:b8:39:08:c3:bf:59:12:41:5e:89:
48:23:2e:75:a9:b8:d8:e4:24:f4:1b:0f:42:1b:a4:3b:8d:ea:
36:54:5f:1d:f0:23:d5:05:e6:9f:f0:67:7e:1a:08:c0:45:26:
35:31:b0:83:b5:1b:c5:fa:5e:24:7e:e3:c5:58:95:18:6b:58:
5d:87:5f:cd:a2:07:2f:b2:db:c7:93:f4:2d:70:85:9f:18:3b:
34:f4:07:be:69:25:26:97:15:d4:c3:14:ae:4d:b6:22:48:92:
82:5c:f9:83:ad:e3:9a:b6:a7:50:85:c1:3b:a1:17:9d:bd:d3:
c3:c1:70:31:32:cd:05:ae:1e:b8:93:ce:f4:81:92:9e:dd:76:
b3:61:97:6c:d5:f3:0d:a4:94:cd:5a:b0:90:45:06:b9:6f:f4:
5f:17:bb:d6:8e:df:a8:22:bb:7b:3f:2f:33:5a:d3:72:91:67:
8d:00:1c:49:85:0c:77:1d:af:f1:36:1d:a2:f1:0b:ae:0a:3a:
89:a4:3b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:36 2025 by rpki-client