Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
File: K7vWOe-xE9GWiKGszmlFu2xqmsU.mft (raw, json)
Hash identifier: Q7etW0wB4SO7cl8M6dYZ/4GGCoMlJai6ETQEE2HRuqA=
Subject key identifier: 2A:99:04:14:EF:88:BE:CF:7D:D7:2B:97:1F:23:AA:FF:24:7C:45:32
Authority key identifier: 2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
Certificate issuer: /CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Certificate serial: 01977C79C27AD21096EC7AA13B1C90A77F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 06:00:43 +0000
Manifest this update: Tue 17 Jun 2025 06:00:43 +0000
Manifest next update: Wed 18 Jun 2025 06:00:43 +0000
Files and hashes: 1: K7vWOe-xE9GWiKGszmlFu2xqmsU.crl (hash: 5iM/ljhxzxv0zMGUoSxGTTv7kt7FH6vtHpCMhy+PcIY=)
2: n0XS6IJCl3vm93lJQsjg2X6pLdw.roa (hash: k2WYtuBGETSvwmKGDnyWeLNoT+PiSlaaWRzhdHXtIhs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:79:c2:7a:d2:10:96:ec:7a:a1:3b:1c:90:a7:7f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Validity
Not Before: Jun 17 06:00:43 2025 GMT
Not After : Jun 18 06:00:43 2025 GMT
Subject: CN=2a990414ef88becf7dd72b971f23aaff247c4532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:28:ca:0c:fb:80:d6:b3:90:75:bc:53:6a:
42:ec:31:fd:c5:aa:dd:f3:87:16:cd:97:2f:2e:32:
15:32:e9:0a:a3:2e:ed:af:61:02:80:b6:71:5a:5d:
b3:2b:3f:43:55:4c:99:12:c1:af:94:e8:72:16:57:
ca:2b:83:72:29:74:42:b0:7c:1c:1a:2e:f9:b8:7a:
d3:06:54:85:a4:07:e2:c1:93:f8:9f:c7:fc:f9:d5:
c6:3a:54:5e:63:47:38:91:ff:44:41:8e:44:aa:c0:
c7:67:3a:ae:46:c7:c8:1a:20:53:02:bc:89:e8:5e:
0f:9c:b8:60:2a:70:18:ce:a0:a6:b7:4e:80:f5:bf:
4b:33:60:13:92:6d:b6:f0:dc:b1:ae:fd:1a:08:99:
61:e8:fa:70:73:0b:da:c1:4e:f8:46:75:c1:7c:56:
fc:28:28:13:a2:c0:a2:50:55:d8:d1:13:fe:ce:e7:
12:35:4b:d7:9e:70:b4:43:58:cb:7f:09:fb:dc:8a:
9d:79:10:7c:3f:93:2e:06:d6:47:1e:7d:56:77:23:
6d:02:28:d8:8b:21:f0:29:77:85:93:32:80:46:5d:
24:c8:60:1c:87:9e:70:c2:50:ad:9d:1b:15:27:4a:
6e:79:61:51:13:d6:7c:51:6f:06:b6:cc:82:aa:1e:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:99:04:14:EF:88:BE:CF:7D:D7:2B:97:1F:23:AA:FF:24:7C:45:32
X509v3 Authority Key Identifier:
keyid:2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c0:29:01:a8:98:b8:0e:73:f9:8a:53:df:ab:b9:29:e5:1f:
a7:a1:6c:99:7b:5d:ec:f8:b5:8c:9e:e1:2d:c1:e3:a0:e6:95:
5a:58:f3:8f:6e:ef:67:a4:1a:84:dd:db:53:fc:ce:ca:37:d8:
2d:80:af:ed:6e:b1:b5:26:8a:c8:3e:ad:34:79:d7:85:83:a6:
17:ba:0f:36:42:24:cd:9a:0e:86:be:bf:59:84:0d:42:98:93:
e8:30:e8:f3:ff:e8:dd:0b:84:cf:1c:7c:f9:04:9c:c8:42:c9:
0a:fe:c7:a7:0f:cb:5c:a6:31:d7:e5:58:c9:4d:1c:de:af:e2:
2a:0f:9e:07:55:4d:eb:ed:61:b4:08:d3:da:ff:73:08:ec:94:
fa:8d:90:dc:ef:4e:c3:f4:6b:c2:ed:ff:78:83:59:7a:a4:0d:
1b:88:03:ad:24:80:09:3e:8c:5a:d2:85:a4:45:b5:ba:9a:ad:
b1:62:36:be:18:f1:c3:47:11:63:f4:74:83:dc:8e:33:ad:db:
5e:4f:83:b6:0e:0c:9d:52:8b:20:fc:4e:c1:48:a8:6d:5c:7e:
cb:c3:db:d2:f8:f0:d7:e9:fa:01:5c:5b:dd:cd:6c:3f:bc:eb:
70:84:ce:01:69:31:e1:05:0d:5c:a5:ff:32:31:bc:21:4c:6c:
19:a6:0a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:10:36 2025 by rpki-client