Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
File: FXll7fKBfF_wlm8i1yscqI4NNyw.mft (raw, json)
Hash identifier: Fi5sqzvS9nWYc+zwd9rfADNPs6VPfEXfLyvHfKzCBj8=
Subject key identifier: 11:38:94:A4:4C:2C:8C:EE:43:3A:19:A9:D9:A3:69:46:15:57:28:1C
Authority key identifier: 15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C
Certificate issuer: /CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
Certificate serial: 01981B0D173265AE705518827A025833A6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
Manifest number: 15E3
Signing time: Fri 18 Jul 2025 01:01:39 +0000
Manifest this update: Fri 18 Jul 2025 01:01:39 +0000
Manifest next update: Sat 19 Jul 2025 01:01:39 +0000
Files and hashes: 1: FXll7fKBfF_wlm8i1yscqI4NNyw.crl (hash: 4KNuOBQU154nrwMs1DFOOC4EUtgwzgiauyevfJpPCOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1b:0d:17:32:65:ae:70:55:18:82:7a:02:58:33:a6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
Validity
Not Before: Jul 18 01:01:39 2025 GMT
Not After : Jul 19 01:01:39 2025 GMT
Subject: CN=113894a44c2c8cee433a19a9d9a369461557281c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:5b:7f:d4:f3:2c:68:64:7e:34:c6:2c:f3:
1a:df:ab:07:e5:9f:71:e7:87:a4:65:a6:08:1a:ca:
cd:b2:a1:30:b2:1f:43:fd:c0:e4:21:80:81:03:2f:
88:09:8b:a8:7c:d5:cf:81:e3:7f:7f:04:65:a9:a3:
76:09:f7:3b:63:1f:cf:35:8d:bb:5b:01:4f:7a:3b:
72:0b:b9:d4:44:69:8d:62:9c:7d:77:f0:d3:2c:5a:
3d:e2:4c:42:af:ef:91:79:84:60:87:4f:e7:d7:55:
f6:36:c3:84:16:e5:a0:5a:41:38:7d:25:20:46:3c:
1e:56:ba:e6:45:e8:92:f2:ca:bc:1f:24:69:be:e4:
25:ad:b1:6a:2f:5d:00:c5:cc:fa:6c:59:06:7b:01:
3d:b1:fd:26:05:6c:b6:0c:b7:cb:9b:a4:2e:c6:d0:
2c:ad:dd:6a:3e:02:e3:11:5d:c4:e5:56:1e:53:79:
3b:fa:bd:ea:23:25:7b:49:fa:74:d8:8b:c4:c2:0d:
e6:46:3a:80:4a:2d:c8:69:ea:b0:76:76:82:65:58:
f2:c4:58:6b:75:ec:62:83:dd:57:83:92:bc:fa:02:
ed:b3:4a:62:98:0e:3a:da:5f:3f:86:c6:15:4e:b2:
36:4c:28:99:23:b6:fd:f3:12:fd:1c:be:08:4a:68:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:94:A4:4C:2C:8C:EE:43:3A:19:A9:D9:A3:69:46:15:57:28:1C
X509v3 Authority Key Identifier:
keyid:15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ef:bc:5c:ab:36:ac:df:2b:7e:43:37:1d:86:81:34:1e:08:
f7:bf:d8:36:29:e9:37:e1:4c:9d:7c:a4:ba:d6:06:90:81:52:
52:e8:b4:91:df:aa:15:fd:79:68:fe:fa:f2:0b:f2:ed:c3:a3:
94:37:4b:f8:37:e8:cd:98:1a:41:28:ec:81:d9:5e:94:ad:ad:
b8:f5:70:00:bb:bd:d4:6c:67:77:4e:43:2b:ba:a1:31:dd:4d:
9d:61:2f:f0:b3:34:ad:81:f6:79:9d:6c:ef:d7:4f:9a:34:d0:
f4:9c:ac:7a:94:1f:86:90:1f:00:a6:b8:71:cc:3e:55:fd:f2:
4c:69:da:5c:84:71:42:37:2e:23:51:5d:c4:db:00:be:dd:d4:
94:a1:f4:0b:bc:32:93:00:eb:45:7c:fb:de:24:ce:e4:fd:2f:
2f:59:ac:a5:b2:b9:ce:77:ae:cd:b5:4c:91:a5:3a:29:e8:06:
3e:9d:aa:22:b5:13:33:7d:03:0b:5d:aa:98:c8:e5:07:b0:0a:
73:e8:9d:5f:11:a0:ff:55:87:49:90:fa:53:c9:3c:23:5b:ee:
88:1d:26:ed:3c:78:74:6a:46:5a:a3:b8:e8:10:b8:04:51:f8:
f5:1b:04:23:49:d8:82:66:d8:40:5c:5b:66:6f:50:41:1d:b7:
a0:39:50:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:46 2025 by rpki-client