Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
File: 0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft (raw, json)
Hash identifier: 76gITa/N4jtXJbDh8gSaWOt0/vE87bQVND8zqmf00zo=
Subject key identifier: 1A:53:BD:AA:EA:B2:AB:7A:96:03:32:78:9E:81:44:11:5A:71:6E:CD
Authority key identifier: D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
Certificate issuer: /CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Certificate serial: 019758DB1EA6EEC55E9342618EB18359F905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 08:00:44 +0000
Manifest this update: Tue 10 Jun 2025 08:00:44 +0000
Manifest next update: Wed 11 Jun 2025 08:00:44 +0000
Files and hashes: 1: 0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl (hash: mfLe011cDoAvpzKXd0NGLRjqQ2QBL3tN6zAOP3HHv5Q=)
2: 9fYVFfHTqf1a_imjPpvJGZndsKw.roa (hash: rlKOE4E7l83H6REVCLchmgjMBofrkEYi53PSu+quf3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:db:1e:a6:ee:c5:5e:93:42:61:8e:b1:83:59:f9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Validity
Not Before: Jun 10 08:00:44 2025 GMT
Not After : Jun 11 08:00:44 2025 GMT
Subject: CN=1a53bdaaeab2ab7a960332789e8144115a716ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:c7:2a:48:12:09:52:84:de:74:fb:b7:b0:
84:97:b3:4b:3f:14:ab:68:ae:48:a5:64:0e:ae:1e:
8f:41:10:0d:a3:f9:81:73:7c:28:ec:56:61:e9:64:
75:58:35:94:3e:1f:f9:ac:db:87:9e:e6:5e:b7:cc:
2b:1b:84:55:eb:c3:bb:6c:68:9d:d6:ad:80:5e:bc:
e6:b6:d3:da:61:d3:3a:1e:64:8e:49:f9:a5:a3:07:
73:b5:c3:46:fe:6a:d8:9d:d9:c0:3b:2c:47:f9:2e:
47:ea:2a:91:8b:6c:c8:96:05:44:9b:a5:b0:f0:18:
a7:ef:03:da:35:42:13:85:ad:47:98:d4:dd:47:da:
f8:9c:1f:9c:a2:37:4e:61:16:88:3f:71:92:23:19:
11:e6:ec:dc:7c:e9:53:37:cb:40:44:9b:72:f4:c1:
6d:2c:11:a7:75:be:17:ee:1c:28:5f:d8:6a:91:ab:
8f:db:74:3a:1d:f7:33:d8:ed:18:97:03:16:c2:ec:
51:44:b4:f3:8c:49:6b:82:7a:fe:02:52:91:af:56:
97:9a:9b:bb:24:e1:d1:e6:0c:13:13:51:6f:f7:22:
db:0c:55:8d:ef:58:ca:e5:71:bd:dc:79:22:94:fc:
dc:5d:32:fb:17:ff:39:67:fa:c2:39:7e:ac:be:c1:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:53:BD:AA:EA:B2:AB:7A:96:03:32:78:9E:81:44:11:5A:71:6E:CD
X509v3 Authority Key Identifier:
keyid:D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7d:5a:5b:0d:85:f0:aa:7e:3f:60:62:9a:04:5c:26:82:d8:
43:17:33:9f:af:69:95:15:8f:02:ff:03:05:3f:0f:fa:ad:48:
07:43:a0:8f:ad:d0:53:dd:2f:2d:9e:8c:b9:c4:d1:15:e8:7c:
22:70:77:eb:d3:46:92:3d:ce:5c:ac:5a:7e:4b:37:df:47:c0:
f2:e4:8a:e0:54:b1:00:fd:c1:03:7e:88:75:41:11:b4:24:bf:
65:dd:58:1d:a2:33:8d:6e:06:fd:94:12:b6:ba:47:4a:69:e8:
d9:70:c0:ac:59:65:27:fc:d3:2e:8c:8e:99:db:57:93:f6:00:
fc:e9:2a:06:4b:6b:52:6b:25:bb:e1:43:e3:5e:17:a3:4f:23:
e5:c0:3d:7b:5c:97:26:f2:43:33:3f:3a:1e:34:51:aa:4d:e7:
58:c5:7d:56:90:c5:91:49:9e:b8:12:53:85:39:51:88:35:e7:
22:64:7f:1b:db:d4:f6:06:9c:14:f5:f9:63:55:9a:01:08:16:
de:25:46:26:19:a4:ac:2c:87:5d:09:74:6c:b5:fb:7f:c1:c4:
6b:4f:28:36:d6:4f:72:f4:c1:b9:30:46:33:8d:83:bc:e9:a8:
3a:db:67:b8:67:ea:b8:f9:e4:2f:78:37:18:02:93:e7:33:03:
4f:c4:94:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:34:30 2025 by rpki-client