Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
File: kd0jFN2bfGHXHU2-2o-jllxCRXA.mft (raw, json)
Hash identifier: Zmhn9bb/JGaiWYWWUlF11Th+y+jJAE6bURHddYeFqRs=
Subject key identifier: D9:63:D6:F1:79:23:ED:DC:E8:8A:BA:17:35:CF:1E:4C:6D:12:9A:64
Authority key identifier: 91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
Certificate issuer: /CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Certificate serial: 0197C9F1C6053F45D3812E1C79E4AC4152A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
Manifest number: 127C
Signing time: Wed 02 Jul 2025 07:02:34 +0000
Manifest this update: Wed 02 Jul 2025 07:02:34 +0000
Manifest next update: Thu 03 Jul 2025 07:02:34 +0000
Files and hashes: 1: 1QgdyuQWVblUntU5znb6VUOcImg.roa (hash: 8ewfHwhOXDGmHEAryCOm3WfF+5LJGrecBJVM/3LIdo0=)
2: kd0jFN2bfGHXHU2-2o-jllxCRXA.crl (hash: pNWEbWirz89DPFaV+B2Wkft/tvFMMryd2Yk2CsHD3Dk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:c6:05:3f:45:d3:81:2e:1c:79:e4:ac:41:52:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Validity
Not Before: Jul 2 07:02:34 2025 GMT
Not After : Jul 3 07:02:34 2025 GMT
Subject: CN=d963d6f17923eddce88aba1735cf1e4c6d129a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:0a:dd:66:26:a3:db:04:9a:51:2a:51:b5:
3d:44:90:0f:c2:98:f6:91:c5:f7:80:04:37:58:ba:
96:57:11:9b:ce:2b:e8:4d:45:18:70:b5:98:6d:ba:
36:84:94:1e:36:3c:dd:3d:21:ea:3f:6e:7c:45:b3:
2f:0f:a1:79:75:4d:46:b6:63:b7:ff:16:98:96:f7:
02:a7:92:21:7d:16:06:e1:d1:20:75:26:2d:4d:0e:
a4:4b:fa:d3:b2:d6:a8:71:f5:2d:b3:b0:14:e3:02:
54:93:4d:af:f7:df:fa:91:f4:2d:ad:a2:8a:a5:fb:
2c:ff:c7:f4:fc:a9:7e:cb:a0:90:ce:06:cc:b7:e2:
0e:c2:aa:7d:8d:16:2c:5d:9d:5c:07:f1:25:52:b9:
2a:41:e1:32:0b:4c:59:10:a9:9f:43:52:10:f5:3c:
6f:13:af:8a:83:57:db:45:10:67:c5:67:28:43:24:
ad:0c:9e:22:08:29:5a:fb:43:ee:a7:b9:58:f2:78:
f4:16:e8:a1:3f:2e:79:ae:37:1c:1c:11:20:48:a0:
37:8f:bb:c5:9b:20:c4:9c:7f:18:be:a9:6e:31:4d:
9f:cb:9b:fc:ea:be:90:ad:c9:88:c7:38:a4:70:06:
fd:7b:a5:03:00:09:9a:5d:cc:fd:d2:91:11:b4:fc:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:63:D6:F1:79:23:ED:DC:E8:8A:BA:17:35:CF:1E:4C:6D:12:9A:64
X509v3 Authority Key Identifier:
keyid:91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:50:7c:32:2a:d6:09:0f:41:80:f5:14:36:9f:b1:9f:6a:2e:
3d:99:3b:71:ae:42:2a:6c:81:c7:cc:68:ed:65:58:1b:8f:c3:
e2:a4:e8:7c:e4:e2:75:f6:a1:a4:cf:6f:a9:ab:e8:38:3a:e4:
57:55:83:ed:48:2a:38:96:5d:a5:22:b4:1b:80:fa:42:27:04:
81:37:88:e3:e9:8b:ad:be:70:2a:99:8c:a3:67:33:90:59:24:
ae:4e:9c:78:9b:17:b3:9f:92:e1:c0:af:4a:8d:95:9a:11:fd:
bf:49:e5:b8:80:01:22:95:c1:5e:c9:e6:55:15:99:a9:8e:48:
d9:b8:6a:cc:c3:26:c7:65:34:10:88:9c:13:00:e7:2a:0e:3f:
76:4e:4a:04:01:02:fd:60:26:ad:38:fe:fa:c6:07:45:00:87:
1b:d4:58:c3:c0:f3:bb:b1:9c:ca:f1:b7:b1:4d:10:2b:9e:7d:
38:1d:0e:eb:a6:c0:cd:08:95:5f:8e:2f:aa:9d:0d:fa:0c:0d:
b6:1a:3f:93:f1:1c:7c:e7:16:22:9b:91:5f:d2:84:c2:25:cc:
37:17:d7:35:1e:97:18:1f:3b:0e:99:f5:dd:11:f2:2e:56:2c:
d7:70:1b:84:d3:ec:7c:b0:91:bc:5e:37:e2:75:bc:00:a8:55:
29:59:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:16 2025 by rpki-client