Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
File: Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft (raw, json)
Hash identifier: b2U9XOGB5+fGLVsB3IUKzDMh6oDMLQcKTV9cblpThFM=
Subject key identifier: FF:45:76:2D:0F:EB:B8:8C:2E:77:17:1F:A0:46:3C:C9:B2:9E:87:38
Authority key identifier: 43:66:84:74:E7:BB:3D:BD:B2:6A:DC:01:83:8C:E7:06:2D:70:C4:98
Certificate issuer: /CN=43668474e7bb3dbdb26adc01838ce7062d70c498
Certificate serial: 01979BCD45B0E1B28A2C9BB9D1DEC8C130C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
Manifest number: 15A9
Signing time: Mon 23 Jun 2025 08:00:10 +0000
Manifest this update: Mon 23 Jun 2025 08:00:10 +0000
Manifest next update: Tue 24 Jun 2025 08:00:10 +0000
Files and hashes: 1: Q2aEdOe7Pb2yatwBg4znBi1wxJg.crl (hash: Gqc8NpSfQU2cZMJdk45ujN1Ez3VFzZ3GjTZ7+OywW5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:cd:45:b0:e1:b2:8a:2c:9b:b9:d1:de:c8:c1:30:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43668474e7bb3dbdb26adc01838ce7062d70c498
Validity
Not Before: Jun 23 08:00:10 2025 GMT
Not After : Jun 24 08:00:10 2025 GMT
Subject: CN=ff45762d0febb88c2e77171fa0463cc9b29e8738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ae:0a:ae:b2:09:40:1d:64:b4:7a:5b:62:b9:
b0:3a:fd:4a:28:ef:6b:d1:a7:34:30:c6:3c:9b:35:
e0:87:14:bf:c1:2b:8b:02:af:61:f4:b0:f8:13:33:
95:4a:a6:43:8d:76:ab:4b:09:43:47:73:3f:2f:47:
c9:83:e9:ab:8b:23:d9:11:12:03:3d:f6:16:9a:66:
af:d7:b4:b8:b6:cc:7c:ab:9c:ee:02:70:2a:57:60:
73:f7:11:f9:b5:b0:10:1b:26:ff:8c:55:7a:2c:60:
13:e3:76:a0:ce:fc:71:c0:49:c4:9a:52:9d:d6:7b:
75:55:19:95:78:5a:05:66:ad:fc:68:b7:2c:be:78:
6f:19:da:f4:0b:9e:60:75:41:4e:d1:30:03:78:21:
ae:da:bd:9f:b2:c4:48:fe:ad:30:0c:db:44:3b:e9:
35:69:5e:62:e9:68:95:55:2f:45:2b:12:30:10:69:
3f:89:b7:e3:5c:4e:f4:dc:14:ab:15:02:78:7b:78:
88:23:0e:61:3b:f4:a9:34:d7:1f:94:58:e6:64:ac:
e3:00:cf:9d:70:c8:3f:c2:2b:4b:62:98:84:c1:b7:
39:6d:a7:21:3b:1d:37:1e:72:fb:3c:a4:30:a1:1c:
69:82:c3:ee:80:c2:47:45:04:06:9d:05:dc:40:5e:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:45:76:2D:0F:EB:B8:8C:2E:77:17:1F:A0:46:3C:C9:B2:9E:87:38
X509v3 Authority Key Identifier:
keyid:43:66:84:74:E7:BB:3D:BD:B2:6A:DC:01:83:8C:E7:06:2D:70:C4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a4:7b:fa:7a:c2:68:98:1a:af:98:b2:4a:15:9a:1c:d6:aa:
7a:4b:1e:4e:b7:ef:ac:35:21:9f:3d:20:cb:cb:f4:f9:06:b1:
2e:7d:ee:c4:6d:ee:da:a9:2f:92:54:c1:f8:aa:02:b1:4f:2c:
06:16:9d:38:66:ac:10:80:bb:6b:1b:92:ce:b9:39:64:7e:97:
6d:85:d2:b3:57:b7:e7:fa:a6:8a:e9:03:45:4a:41:97:d2:90:
28:46:3f:0e:ae:37:b6:39:b3:0c:1b:4b:da:ac:56:25:82:a2:
9a:d0:08:d1:3b:4d:1f:95:30:01:a8:a6:fe:dd:a7:79:17:38:
b7:fb:f6:b3:db:b0:18:30:e2:f2:96:96:6b:87:e3:22:a3:f8:
ce:db:05:b6:dd:14:3f:f2:0b:0f:44:37:11:13:4a:27:83:85:
1c:47:63:38:5c:59:bf:44:28:91:3a:65:b0:e5:d2:15:ee:1e:
a4:b9:83:c4:d3:d1:99:96:d6:b9:94:52:86:13:4f:0b:b6:11:
af:f9:a1:f2:85:f4:82:8c:2e:83:d1:0f:e9:4a:9e:ed:c2:76:
14:cf:95:52:95:73:20:e6:69:d1:3e:94:f9:a2:0e:c3:68:37:
bd:6e:64:76:b9:e5:38:95:1d:5d:c7:5d:57:c6:17:c0:15:4c:
de:08:ab:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:46:22 2025 by rpki-client