Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft
File: P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft (raw, json)
Hash identifier: nLHRBzb7GEFviSnpNIh/Xhjq2ID/AK/OuNTqyXGXkpo=
Subject key identifier: 3E:00:0B:13:7F:37:9D:0B:FB:70:D0:36:41:33:7A:89:BA:F8:98:D0
Authority key identifier: 3F:4C:02:6A:6E:27:43:09:30:3C:EA:0C:17:E0:94:93:61:3C:1F:2E
Certificate issuer: /CN=3f4c026a6e274309303cea0c17e09493613c1f2e
Certificate serial: 019817666B80D221244E3262350AB2732966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0wCam4nQwkwPOoMF-CUk2E8Hy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft
Manifest number: 0A8C
Signing time: Thu 17 Jul 2025 08:00:44 +0000
Manifest this update: Thu 17 Jul 2025 08:00:44 +0000
Manifest next update: Fri 18 Jul 2025 08:00:44 +0000
Files and hashes: 1: P0wCam4nQwkwPOoMF-CUk2E8Hy4.crl (hash: gnHUsoETr8REx3ughSy/+uRyTxRgZ0fl3n3hvWTNs98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:17:66:6b:80:d2:21:24:4e:32:62:35:0a:b2:73:29:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f4c026a6e274309303cea0c17e09493613c1f2e
Validity
Not Before: Jul 17 08:00:44 2025 GMT
Not After : Jul 18 08:00:44 2025 GMT
Subject: CN=3e000b137f379d0bfb70d03641337a89baf898d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:f1:47:c7:d8:1a:1d:4f:63:31:13:2e:77:
9a:55:0f:52:24:ca:11:b5:2e:2a:83:ee:ba:df:46:
d5:4b:94:ed:a4:a0:a0:fa:80:f0:b9:4b:9f:21:d9:
d2:4e:54:f8:ed:0d:e8:09:f7:5c:fb:45:db:4f:62:
d4:de:2f:99:a7:63:d3:66:d3:dc:c3:30:3a:56:c3:
ee:ec:ef:e7:5d:ef:bd:d5:2e:e2:d0:8f:35:ce:d6:
a0:69:18:7d:fa:a9:c9:8c:f9:eb:22:ea:1e:6e:a0:
ad:f7:93:83:e6:ef:d2:4a:d0:69:54:83:1f:ec:6b:
e0:1b:02:18:08:ba:9a:f6:d6:e8:f0:bb:c0:d1:72:
72:08:99:b7:a4:36:ee:3a:44:e3:22:83:2c:8e:5f:
8d:f0:5a:71:54:9e:e0:f6:b4:ba:e0:e4:e6:d1:a6:
e0:91:21:aa:26:5f:d3:74:7d:80:12:73:96:45:99:
df:e6:7f:1a:58:2c:3a:c3:f6:ef:54:06:ad:e5:5c:
3f:3d:7a:75:a7:3d:29:0a:78:b4:43:86:9e:96:68:
32:32:01:f9:76:16:ca:3f:53:4e:b7:6b:eb:32:27:
a0:7d:ae:f2:75:10:ef:7a:46:0c:c7:ba:3f:57:ac:
69:36:66:90:41:28:7f:64:71:6d:dd:e0:c6:4b:87:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:00:0B:13:7F:37:9D:0B:FB:70:D0:36:41:33:7A:89:BA:F8:98:D0
X509v3 Authority Key Identifier:
keyid:3F:4C:02:6A:6E:27:43:09:30:3C:EA:0C:17:E0:94:93:61:3C:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0wCam4nQwkwPOoMF-CUk2E8Hy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c5:71:4b:de:e9:bc:22:8e:c9:45:ab:af:e9:64:41:b6:77:
e6:1c:32:25:07:00:8e:9b:65:7b:9a:23:98:d7:38:31:d3:ce:
e2:a2:09:fa:ea:96:e0:fb:38:36:84:2a:58:63:52:b3:22:85:
89:7f:f2:cf:f2:7c:fc:02:2a:cf:a9:df:77:8f:93:64:fb:b2:
a3:4e:6b:b0:d9:43:42:4a:11:3b:76:68:ca:2d:3c:c5:69:c7:
e7:37:cf:cd:99:a5:fb:56:cd:64:f6:9f:51:cb:72:37:04:2d:
98:09:1c:35:74:d6:03:3b:61:f6:fd:17:f6:f2:ad:6d:66:60:
95:06:d9:47:bf:7e:41:ca:65:1e:d9:3a:21:35:d2:33:6f:9e:
27:eb:ab:f8:ab:93:52:86:9c:a9:1f:2b:b3:56:d2:cc:44:ab:
43:61:f0:ac:38:e6:dc:18:02:24:8e:4d:66:23:f8:0d:62:2d:
32:22:f9:15:d5:90:78:9d:0f:53:25:bd:0d:08:d9:65:1e:0a:
fa:68:b1:59:63:80:3f:be:23:c2:16:a2:27:3d:fb:bb:e7:70:
39:85:f7:44:c9:9e:71:0b:f3:f6:1d:06:1a:e7:76:4b:8a:5c:
72:54:15:42:4e:95:db:15:c9:81:d3:4c:2d:53:75:08:73:00:
ef:f1:94:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:26:17 2025 by rpki-client