Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3ace88-7021-4c39-9dd9-b893bb07fe50/1/mhU_Od12IydNhl3LiFChYTKkIgY.mft
File: mhU_Od12IydNhl3LiFChYTKkIgY.mft (raw, json)
Hash identifier: Rumglf36GaMhOQy3KAPsB84FdaFC6wHXE3wlWrnTKuI=
Subject key identifier: B1:E6:3A:12:9E:02:2A:7E:9B:E8:66:34:AA:D8:33:12:8C:83:D1:D4
Authority key identifier: 9A:15:3F:39:DD:76:23:27:4D:86:5D:CB:88:50:A1:61:32:A4:22:06
Certificate issuer: /CN=9a153f39dd7623274d865dcb8850a16132a42206
Certificate serial: 01979B28B3D0E50991B5B79073D294EF73EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhU_Od12IydNhl3LiFChYTKkIgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3ace88-7021-4c39-9dd9-b893bb07fe50/1/mhU_Od12IydNhl3LiFChYTKkIgY.mft
Manifest number: 0331
Signing time: Mon 23 Jun 2025 05:00:25 +0000
Manifest this update: Mon 23 Jun 2025 05:00:25 +0000
Manifest next update: Tue 24 Jun 2025 05:00:25 +0000
Files and hashes: 1: mhU_Od12IydNhl3LiFChYTKkIgY.crl (hash: RHnlKSQPYabt0a9WIam63zULJ0qdPZCh+rJBCigzg5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:28:b3:d0:e5:09:91:b5:b7:90:73:d2:94:ef:73:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a153f39dd7623274d865dcb8850a16132a42206
Validity
Not Before: Jun 23 05:00:25 2025 GMT
Not After : Jun 24 05:00:25 2025 GMT
Subject: CN=b1e63a129e022a7e9be86634aad833128c83d1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:7c:54:d5:9f:e7:40:7d:1b:c9:e2:91:11:
77:5f:33:a4:87:ca:42:3f:9a:6e:99:d2:39:97:76:
c9:56:5b:f7:5f:8b:d5:ef:f8:88:b4:73:0a:7e:11:
20:69:e8:b7:58:e8:16:9d:07:6c:48:b6:80:01:61:
f2:80:76:17:f5:72:10:d6:a9:71:1d:d5:b9:75:bf:
ca:56:c3:e1:1c:88:b3:17:c1:71:58:ff:01:d8:0d:
90:99:cb:a3:af:22:37:5a:f3:2e:0b:ec:18:e0:1a:
e5:6a:02:4b:4e:53:fc:42:8d:99:ec:9e:2d:66:9c:
e0:49:f4:84:3a:f7:b9:9f:58:16:9b:a4:bf:d8:61:
e7:75:55:0b:a0:8d:6c:88:5b:12:ca:ae:be:c8:21:
36:49:26:b1:94:6b:6b:7e:75:03:2a:3b:e8:df:29:
f4:20:25:f7:39:db:d6:e4:32:ce:08:c4:9a:d8:f3:
59:7a:2e:25:f0:9a:58:20:5a:8c:7a:d3:0f:ce:d5:
ae:ab:83:2e:3f:2d:53:d2:19:15:ac:7f:1e:28:3d:
9f:43:61:78:1c:62:77:44:f2:ab:f9:44:f9:25:e0:
e4:58:6a:2e:a2:54:f0:3a:ec:d0:12:d5:1c:da:e8:
07:0b:d6:02:99:d3:dd:26:06:7b:8b:de:73:3c:76:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E6:3A:12:9E:02:2A:7E:9B:E8:66:34:AA:D8:33:12:8C:83:D1:D4
X509v3 Authority Key Identifier:
keyid:9A:15:3F:39:DD:76:23:27:4D:86:5D:CB:88:50:A1:61:32:A4:22:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhU_Od12IydNhl3LiFChYTKkIgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3ace88-7021-4c39-9dd9-b893bb07fe50/1/mhU_Od12IydNhl3LiFChYTKkIgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3ace88-7021-4c39-9dd9-b893bb07fe50/1/mhU_Od12IydNhl3LiFChYTKkIgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f7:48:8a:b8:22:f9:f9:d6:06:4f:92:6e:a6:8e:44:8e:96:
36:29:c0:9a:a6:4f:56:c6:f1:07:90:d6:a4:f5:ca:36:62:c7:
de:39:e5:08:1b:f5:87:b2:48:57:9c:d8:d0:d4:63:0e:f2:dc:
a3:fd:37:f2:82:88:b7:cb:11:e0:c9:b3:bd:5a:ac:a1:7c:f9:
cf:8a:71:17:f5:f9:73:fe:73:7e:1b:89:31:27:18:70:89:76:
c7:be:60:40:63:9c:b1:69:50:bf:57:08:e5:4e:60:b8:7f:56:
3b:a7:1d:62:9a:17:88:f8:ad:fd:4f:1b:93:4e:e9:f8:ef:85:
8e:ca:e0:be:ff:0e:a4:7e:06:f1:c1:d2:e5:17:27:13:8d:37:
06:24:ed:13:73:b7:30:1f:31:5d:91:df:2b:c2:53:dd:65:a3:
f1:22:0a:0b:a3:fe:fa:19:88:c9:ff:24:69:c5:ec:af:e9:fb:
a2:1b:84:6d:19:cb:96:3e:7c:be:36:2f:b3:18:95:a0:11:21:
07:90:55:a0:b9:6d:dc:ee:74:e4:04:ad:4c:f3:3d:ed:7b:ec:
40:c7:da:8d:57:a4:c3:09:b1:e7:10:b0:65:d3:28:05:6a:b8:
e5:a2:e8:88:65:38:64:9a:76:08:71:e4:f9:28:3e:80:d1:55:
66:88:c5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:32 2025 by rpki-client