Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
File: mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft (raw, json)
Hash identifier: Wbij33wBlX2fJEI81yX4/MlMEqRb/D6WehvTuyh0MJM=
Subject key identifier: 2B:84:5F:A9:2E:78:B5:C6:C2:B7:72:EC:30:60:8A:5A:95:FB:AC:21
Authority key identifier: 99:DA:45:25:E8:D3:14:D5:AA:79:A4:0D:2E:22:7E:E5:56:B0:F5:9E
Certificate issuer: /CN=99da4525e8d314d5aa79a40d2e227ee556b0f59e
Certificate serial: 019807BD2AADC0BE31C05CEE76FD06990171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
Manifest number: 15DD
Signing time: Mon 14 Jul 2025 07:01:34 +0000
Manifest this update: Mon 14 Jul 2025 07:01:34 +0000
Manifest next update: Tue 15 Jul 2025 07:01:34 +0000
Files and hashes: 1: mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl (hash: 1zYSPJeQx604hchCXB1xU3+pUpcWyKjLACSoyVy/XqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:07:bd:2a:ad:c0:be:31:c0:5c:ee:76:fd:06:99:01:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99da4525e8d314d5aa79a40d2e227ee556b0f59e
Validity
Not Before: Jul 14 07:01:34 2025 GMT
Not After : Jul 15 07:01:34 2025 GMT
Subject: CN=2b845fa92e78b5c6c2b772ec30608a5a95fbac21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:36:f5:8c:b8:9f:04:21:2b:ec:51:87:a7:
28:f1:d0:72:e8:4a:79:c1:42:9a:92:0f:96:8d:61:
5b:36:88:be:43:3c:b8:31:25:81:0d:46:d4:c6:c7:
1f:b1:d4:45:a5:ba:bd:08:1e:20:fe:10:4a:2b:39:
cc:9b:d6:11:5c:d6:dd:c8:cd:69:af:d4:91:98:e4:
31:d4:b8:ae:e0:fe:1a:dd:10:03:13:e5:19:67:68:
01:39:e5:57:94:7e:62:91:5c:79:46:a9:4b:af:a5:
ce:f5:d9:d4:27:96:38:e4:94:ec:1c:e1:b1:49:33:
cf:0a:e7:f1:cb:3c:5d:fa:8f:b9:ff:95:e9:43:6e:
85:d5:73:41:fd:31:09:28:41:84:fa:96:c0:73:30:
1d:d2:7e:63:70:2f:f1:17:45:56:22:79:9d:5d:f9:
d3:47:cb:9f:ce:f3:f1:bb:8e:9d:03:f7:d4:d0:02:
bb:54:68:16:b7:c6:a1:4d:1c:00:dc:57:44:58:9b:
bf:15:8f:69:a8:e9:d1:c8:a2:39:9f:4b:ad:b2:5e:
44:20:88:c0:81:3e:6b:43:5b:64:18:87:c2:7c:d3:
0e:96:58:2e:bc:b4:22:33:45:a7:9c:7f:d5:66:fa:
d5:59:fa:8b:53:9b:54:22:c9:69:e8:54:0b:e1:06:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:84:5F:A9:2E:78:B5:C6:C2:B7:72:EC:30:60:8A:5A:95:FB:AC:21
X509v3 Authority Key Identifier:
keyid:99:DA:45:25:E8:D3:14:D5:AA:79:A4:0D:2E:22:7E:E5:56:B0:F5:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:41:df:92:5d:10:a1:ee:cf:25:1c:e8:e8:d1:6e:28:e3:0e:
b6:c4:66:97:d2:d7:1a:ed:35:93:2e:70:11:27:42:0d:1c:b5:
27:5e:1f:38:36:65:50:05:c2:25:19:91:9c:fa:0a:4a:98:0f:
f1:8b:bb:9f:3d:22:bb:f2:48:cb:d5:bc:10:77:64:89:80:58:
fa:67:8b:a7:58:79:91:1d:0b:11:05:c5:34:2d:0c:af:4c:5d:
ae:44:5b:f4:51:41:c0:4e:bf:58:39:e5:67:8c:7c:16:73:4f:
f3:cf:3b:af:be:fd:a2:3f:fa:a0:30:2a:bc:32:25:08:a8:41:
f0:77:78:67:71:cf:54:b5:c3:b9:08:30:26:cd:78:28:99:1a:
f5:75:c5:d4:fd:07:c7:c0:5c:72:07:22:8b:b3:25:14:98:36:
69:a7:03:71:94:57:22:71:23:f2:fc:ad:87:29:f3:4e:35:06:
a9:f3:72:b2:d3:b5:ac:dd:c6:5a:1f:a3:03:7a:bc:72:b2:fe:
c7:de:8e:ad:88:57:89:8e:ea:33:22:9a:81:d3:94:f2:fd:4d:
9b:b1:3f:93:57:16:a4:36:ea:dc:af:e2:2f:6a:6f:55:01:89:
ce:fb:8d:0d:d1:08:ac:a5:78:f7:58:7d:aa:27:c5:66:4d:69:
1f:ce:d5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:43:39 2025 by rpki-client