Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
File: MFTtpIzl_KSJJbrLoUeMisotOcw.mft (raw, json)
Hash identifier: rsrqc8UNIr1p7ZnMh6tg76w17k/x6cYMC3lZnPWdjeo=
Subject key identifier: 2C:0B:20:DF:54:4F:8A:E1:A5:D8:7E:2D:37:BE:CD:45:6C:38:E4:52
Authority key identifier: 30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC
Certificate issuer: /CN=3054eda48ce5fca48925bacba1478c8aca2d39cc
Certificate serial: 0197778A900B303C0ABA7BFB2CDB75A04E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
Manifest number: 14B8
Signing time: Mon 16 Jun 2025 07:00:58 +0000
Manifest this update: Mon 16 Jun 2025 07:00:58 +0000
Manifest next update: Tue 17 Jun 2025 07:00:58 +0000
Files and hashes: 1: MFTtpIzl_KSJJbrLoUeMisotOcw.crl (hash: iA3wdmw2mrrVOCGT/S3kH9BQTLBXRXQLN077BKO8FEs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:90:0b:30:3c:0a:ba:7b:fb:2c:db:75:a0:4e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3054eda48ce5fca48925bacba1478c8aca2d39cc
Validity
Not Before: Jun 16 07:00:58 2025 GMT
Not After : Jun 17 07:00:58 2025 GMT
Subject: CN=2c0b20df544f8ae1a5d87e2d37becd456c38e452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0b:35:8a:f8:6c:bc:12:3e:35:31:5f:a3:53:
bc:98:0e:ee:7a:a5:e3:1b:9f:6b:a8:0a:55:eb:86:
fe:a7:ae:22:1f:f3:20:55:95:8c:9d:e1:62:4d:0e:
40:c5:e0:f8:bc:d6:5d:d2:0a:ac:3b:27:86:cc:b5:
2d:c1:ff:bb:f5:ea:b8:a5:fa:64:4d:5b:7e:8f:99:
7b:e5:20:18:a0:5d:f3:71:1a:ef:14:69:3c:bc:28:
07:8a:1f:6e:a4:62:b1:ac:0d:10:4c:38:31:ea:ff:
0e:cd:bd:53:24:38:08:ec:b2:85:fe:a8:a5:a5:55:
14:ea:a1:3d:25:d2:83:e9:4b:f4:a3:8a:f7:87:80:
c8:7a:b4:a4:6e:92:ca:fe:6f:b0:94:fb:c7:2a:9c:
01:5d:32:e0:43:53:e2:a7:1e:04:0a:8f:7d:9d:ad:
35:2b:bd:df:2f:48:b9:3f:2b:db:ef:c1:eb:bd:4f:
4b:15:a6:f8:d7:72:ca:e4:19:40:e5:2a:93:ee:ce:
8c:af:ab:e4:bb:b6:24:71:b8:29:53:9f:45:8d:d4:
ec:93:7b:f4:e7:ee:76:55:ee:19:6d:eb:6f:c6:81:
7e:d5:7f:61:4e:c0:ee:eb:29:38:0d:ae:a1:4f:78:
62:a8:cc:88:05:df:b7:9b:cb:98:cb:4d:8e:a1:9e:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0B:20:DF:54:4F:8A:E1:A5:D8:7E:2D:37:BE:CD:45:6C:38:E4:52
X509v3 Authority Key Identifier:
keyid:30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d1:c7:47:9e:d8:91:a2:4f:f6:2f:a0:bd:2b:42:be:93:59:
7a:cc:88:15:89:fb:a9:34:28:e6:27:a7:8c:ef:71:ef:e5:49:
79:f0:c2:86:c8:94:00:56:92:8d:57:24:5e:dd:bf:7b:c9:25:
1c:df:98:68:92:a9:16:2e:f7:8f:51:23:15:8f:63:6a:21:0a:
07:fd:17:3f:fd:e9:58:b2:0c:a9:32:d0:a4:0f:8e:eb:8d:f5:
cc:9b:43:64:da:d8:b6:7b:fa:a2:79:f7:6d:a4:fb:03:5e:19:
cb:ec:91:a1:86:a2:61:da:fb:b9:cd:54:64:91:1c:25:3d:29:
4f:c3:45:1f:3d:d7:51:33:20:a6:b1:80:ad:94:42:8a:3b:72:
78:ef:85:4f:1e:03:28:9d:c7:43:c7:bf:82:a0:91:37:df:5d:
65:07:26:fd:af:e7:e9:f1:96:96:44:01:68:1c:66:d9:7c:57:
1d:17:1b:ed:24:a9:dc:03:5c:90:e2:41:b8:87:fd:33:ef:c6:
6a:a0:de:0f:42:08:df:15:51:41:6e:a8:49:18:f8:42:f4:79:
d2:4d:ea:50:04:c2:15:ce:52:76:3d:ea:6d:a9:c1:59:97:23:
41:4c:65:59:a4:38:bb:e4:39:46:0e:8b:2d:d0:ae:c3:83:f4:
9f:c0:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:37 2025 by rpki-client