Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
File: UBEgdwLICEl5tIPPyG3vdUPgXO0.mft (raw, json)
Hash identifier: aMFxIlwAPiVeIXmmCxhhbV3u+VlNafmyxHtVMhlu+1I=
Subject key identifier: C7:D2:C2:58:3B:9B:33:47:37:57:A4:B3:55:DE:FB:D3:27:4F:91:A4
Authority key identifier: 50:11:20:77:02:C8:08:49:79:B4:83:CF:C8:6D:EF:75:43:E0:5C:ED
Certificate issuer: /CN=5011207702c8084979b483cfc86def7543e05ced
Certificate serial: 0197108B7F7601B1CBE8952028C2CA8A4661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBEgdwLICEl5tIPPyG3vdUPgXO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
Manifest number: 0988
Signing time: Tue 27 May 2025 07:01:06 +0000
Manifest this update: Tue 27 May 2025 07:01:06 +0000
Manifest next update: Wed 28 May 2025 07:01:06 +0000
Files and hashes: 1: UBEgdwLICEl5tIPPyG3vdUPgXO0.crl (hash: Riy3lqBnvIJ1cZYsKi+U36lCW332Co1yTr0Km0eZI6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:8b:7f:76:01:b1:cb:e8:95:20:28:c2:ca:8a:46:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5011207702c8084979b483cfc86def7543e05ced
Validity
Not Before: May 27 07:01:06 2025 GMT
Not After : May 28 07:01:06 2025 GMT
Subject: CN=c7d2c2583b9b33473757a4b355defbd3274f91a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:72:3d:1d:f6:63:71:e2:bd:86:6a:87:e2:
14:6d:6d:53:5d:ac:c0:50:11:f4:dc:09:4d:59:ed:
78:07:fc:1a:c7:90:a9:77:3d:4d:92:27:a8:73:6f:
23:a0:c6:e5:44:33:e0:ff:0b:13:0f:b0:f7:35:80:
3a:cf:11:9f:ea:29:29:5b:a9:2e:35:01:30:fc:98:
d8:26:cb:38:79:de:99:49:68:b7:f5:b3:8d:0d:06:
35:ab:7d:01:97:64:2f:79:5d:0b:5a:c4:62:6b:b0:
89:14:eb:e8:33:93:55:be:a3:72:cb:9a:3c:90:f0:
cb:d3:da:a5:dc:9b:bf:ef:eb:96:3c:87:44:12:70:
b1:c3:c7:66:3d:79:23:3d:fc:64:a4:de:de:27:0e:
cd:6d:1b:7d:e6:39:16:46:23:72:cd:41:1e:f0:0f:
7d:c3:ac:47:db:34:79:0e:91:df:cf:07:2b:b3:c6:
7f:a1:6d:7a:85:26:98:74:c2:dd:88:9b:ce:b4:e6:
b0:08:43:a6:4e:f3:ea:2c:17:48:fe:69:07:e3:99:
86:ce:cc:06:6c:fa:0f:5d:29:05:b0:67:a9:86:d9:
d3:3d:cb:54:b3:bd:0a:a6:0d:a1:1e:4f:d0:c4:cf:
cb:dd:59:70:6e:29:7c:89:a5:9a:d1:b9:9e:bf:66:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D2:C2:58:3B:9B:33:47:37:57:A4:B3:55:DE:FB:D3:27:4F:91:A4
X509v3 Authority Key Identifier:
keyid:50:11:20:77:02:C8:08:49:79:B4:83:CF:C8:6D:EF:75:43:E0:5C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBEgdwLICEl5tIPPyG3vdUPgXO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3e:9b:c7:d7:1c:e8:e2:4d:52:5c:17:03:24:63:47:93:fc:
fc:fd:1e:b9:89:8e:7b:1e:50:f9:18:df:c2:c7:c5:2d:26:1f:
c1:04:2e:d0:d6:1a:98:a7:6d:00:8a:e7:7a:71:93:d3:1d:bc:
4c:e6:36:76:20:a5:ff:23:e3:08:ae:b3:7d:1f:57:a8:e6:cd:
0c:74:46:5b:61:95:04:b6:d6:44:17:29:5c:42:44:fa:60:5d:
b1:0a:de:76:7f:d5:46:b0:3a:4a:72:9b:09:1d:1c:f1:1b:03:
72:7f:fc:32:f3:d0:e9:4f:b0:cf:7e:7d:13:54:e8:69:cc:aa:
07:9b:8b:be:f9:99:5f:77:4c:d0:de:1c:e2:d3:9d:85:db:8d:
83:0b:0b:f8:56:13:07:4f:57:8a:79:eb:16:01:f6:af:a8:5f:
80:69:c6:96:3a:9a:54:ab:55:da:94:27:04:09:75:fd:f2:c1:
84:da:56:c8:6a:66:37:07:d1:4a:ec:60:d8:e7:4e:67:18:c6:
70:72:6c:98:38:d3:8f:05:01:d6:02:c1:ad:24:eb:79:b0:62:
66:c9:26:dd:fe:f0:f7:58:42:7c:65:8b:6e:bc:09:76:17:35:
fc:37:69:f3:4b:12:87:14:3f:6c:e2:14:97:ae:e1:57:e7:4a:
86:27:05:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:53:22 2025 by rpki-client