Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
File: LDfpq5czmfAvAyfJgRoYdQDEtsk.mft (raw, json)
Hash identifier: Jt+YljR8BGUVd99BUCrUSgC+wDO+qYtoXjvrswnEUVY=
Subject key identifier: FB:D9:EC:2B:E2:92:A5:E5:70:A4:43:5B:79:CE:7B:39:8B:CE:2C:73
Authority key identifier: 2C:37:E9:AB:97:33:99:F0:2F:03:27:C9:81:1A:18:75:00:C4:B6:C9
Certificate issuer: /CN=2c37e9ab973399f02f0327c9811a187500c4b6c9
Certificate serial: 0197CEA90A5F95F56582786C1121FAA623A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDfpq5czmfAvAyfJgRoYdQDEtsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
Manifest number: 03F9
Signing time: Thu 03 Jul 2025 05:01:13 +0000
Manifest this update: Thu 03 Jul 2025 05:01:13 +0000
Manifest next update: Fri 04 Jul 2025 05:01:13 +0000
Files and hashes: 1: LDfpq5czmfAvAyfJgRoYdQDEtsk.crl (hash: fzlVoDp46XowfWenObR0WIWaFGo2oeSvSZkCKUH6+9U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a9:0a:5f:95:f5:65:82:78:6c:11:21:fa:a6:23:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37e9ab973399f02f0327c9811a187500c4b6c9
Validity
Not Before: Jul 3 05:01:13 2025 GMT
Not After : Jul 4 05:01:13 2025 GMT
Subject: CN=fbd9ec2be292a5e570a4435b79ce7b398bce2c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:52:8c:de:d8:cb:47:14:83:2d:85:77:d7:
19:73:a8:5b:5f:a6:8c:3f:e2:20:fd:5d:8e:ff:4b:
96:55:f3:8e:cf:2e:65:10:7b:2b:89:d6:30:b4:c8:
d2:02:ff:58:0f:e8:77:b7:46:b2:26:6f:a7:7c:ea:
a7:dd:88:a3:c5:0d:93:d9:7d:a5:45:a1:64:db:f9:
56:ef:72:83:17:ac:2c:25:dc:d5:ff:1a:0d:e3:84:
d0:c2:81:2c:6d:14:77:1f:05:89:7e:aa:c3:0d:f3:
1f:13:5a:e5:db:20:6b:3b:08:19:32:c8:84:99:c1:
54:e3:46:92:6d:f3:5b:1b:47:df:c2:53:0c:ac:9a:
8a:b5:e1:d2:32:41:b7:21:38:64:89:08:aa:bb:83:
dc:e6:20:4a:93:3e:cb:84:85:69:3e:43:8b:bd:ca:
6f:81:bc:c2:90:0d:01:0e:14:9b:80:3d:89:7e:ba:
97:7a:25:88:15:b5:22:c9:03:97:91:ec:f0:a4:f6:
eb:0f:f2:1c:14:f5:a7:33:73:75:fa:88:ec:10:c9:
d4:6b:4b:5c:4f:9a:3c:2d:0f:9b:5d:3b:39:0d:34:
bf:58:a7:c2:fb:74:04:14:43:94:ef:f4:f4:7d:17:
d1:f0:e4:4a:94:7b:a6:34:55:e0:e3:00:14:bd:76:
e5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D9:EC:2B:E2:92:A5:E5:70:A4:43:5B:79:CE:7B:39:8B:CE:2C:73
X509v3 Authority Key Identifier:
keyid:2C:37:E9:AB:97:33:99:F0:2F:03:27:C9:81:1A:18:75:00:C4:B6:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDfpq5czmfAvAyfJgRoYdQDEtsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:08:b3:f1:17:68:d4:c2:4f:e3:e8:97:1e:3c:2e:e4:43:11:
de:7e:17:f4:0d:9a:4a:23:91:5d:b8:41:97:d5:22:03:f5:09:
96:41:93:c8:fe:91:4f:af:a7:8c:bf:31:ae:09:c9:43:03:2a:
3e:a4:9a:9a:e1:f4:7a:c6:5f:82:86:35:39:45:34:68:e7:c8:
ed:1d:dc:e0:c5:41:c5:b8:63:43:0b:a7:ed:ce:a0:f5:72:82:
52:41:34:65:89:a6:8b:64:bb:44:38:4f:85:d6:d0:c1:3f:53:
f1:af:49:e7:7a:a8:9d:59:39:02:88:72:ee:15:9d:41:3e:49:
29:74:90:41:bb:d0:3f:7b:96:5e:d9:d8:17:ac:63:80:ad:57:
2a:e8:c4:05:ff:c9:b5:4b:47:11:4c:6e:3d:0c:ec:d3:95:76:
2a:59:1c:f5:be:53:40:03:84:ed:79:83:49:0a:aa:bd:97:1a:
a3:6a:f0:d0:c9:97:29:00:3d:97:1e:44:69:4e:80:ef:69:66:
38:98:72:27:66:7d:46:6d:6b:1f:79:67:9e:a5:ff:84:aa:ca:
e0:d0:b0:fb:e7:ae:5a:8a:3b:ad:0b:b4:0b:88:a6:81:08:27:
74:ef:9a:16:08:c6:d0:70:87:b7:c7:23:d0:9a:64:24:5b:e6:
73:f8:70:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:52:55 2025 by rpki-client