Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/23ecbd-07a1-49e8-bb1c-797496254cd2/1/H3ddmWJZd0LOcOGtY9R7ulWlU0s.mft
File: H3ddmWJZd0LOcOGtY9R7ulWlU0s.mft (raw, json)
Hash identifier: NK17EQcKJGoR3XH6LeRAXY4TrY2+rmdqtLsbAkWt6rs=
Subject key identifier: 77:F6:C9:80:FA:F0:FC:1E:3A:21:94:FD:5E:61:F2:30:EA:27:3B:37
Authority key identifier: 1F:77:5D:99:62:59:77:42:CE:70:E1:AD:63:D4:7B:BA:55:A5:53:4B
Certificate issuer: /CN=1f775d9962597742ce70e1ad63d47bba55a5534b
Certificate serial: 01852DED7B751D16CEC98C1CE9DBFFB9CC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3ddmWJZd0LOcOGtY9R7ulWlU0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/23ecbd-07a1-49e8-bb1c-797496254cd2/1/H3ddmWJZd0LOcOGtY9R7ulWlU0s.mft
Manifest number: 0BD6
Signing time: Tue 20 Dec 2022 05:06:56 +0000
Manifest this update: Tue 20 Dec 2022 05:06:56 +0000
Manifest next update: Wed 21 Dec 2022 05:06:56 +0000
Files and hashes: 1: H3ddmWJZd0LOcOGtY9R7ulWlU0s.crl (hash: LxUgiEf6zJYR/FgP3Uhe7dxgizo6G/lHopcKbjpeN1I=)
2: Otv6y9SomP0l37us7AYwCZ4AFLs.roa (hash: jn6PR4rw+Evf5XvTNyi0F9Za5cOeKrtX+SgRejdjtPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2d:ed:7b:75:1d:16:ce:c9:8c:1c:e9:db:ff:b9:cc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f775d9962597742ce70e1ad63d47bba55a5534b
Validity
Not Before: Dec 20 05:06:56 2022 GMT
Not After : Dec 21 05:06:56 2022 GMT
Subject: CN=77f6c980faf0fc1e3a2194fd5e61f230ea273b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:bd:a0:db:b5:d6:94:bf:5a:b4:da:e6:41:
8f:bb:c8:9e:c5:bb:97:db:6b:bc:60:4a:fb:77:63:
34:bb:40:06:a2:98:9d:ff:7a:dd:75:ca:13:c6:f1:
72:23:01:ba:c4:53:76:ba:3b:ff:4b:c4:8c:2a:d6:
e2:a8:d4:fb:a9:fc:bc:37:c5:12:f9:2c:e2:6d:82:
26:2f:07:31:f2:f1:53:cd:f1:50:50:52:3f:1b:e4:
bc:62:28:fa:2e:77:e8:c0:8e:fd:2b:59:e2:de:17:
88:1b:9f:c7:2e:db:3b:c4:a3:bb:14:4a:81:c5:a8:
ff:dc:e9:b3:52:35:42:34:91:05:de:6e:e0:01:9f:
b5:ac:10:00:ca:76:18:cd:5f:5d:a9:7e:6f:a5:e2:
de:bd:c2:c1:ba:1d:41:f1:c3:6c:52:9d:fe:e4:c5:
a5:dd:38:a2:46:0a:1f:c0:4d:a8:05:57:8a:71:aa:
00:f5:bf:6c:fa:69:16:f5:43:5c:c5:f2:85:d3:94:
44:6c:ff:0f:b0:52:19:df:ca:57:e0:ba:7c:b4:d7:
c5:6f:6f:f8:04:bc:62:d7:29:35:71:9b:2c:6c:e5:
8b:b1:83:7c:87:9c:c0:6d:8a:c1:2d:93:c3:ef:3c:
8e:a3:0c:2f:e4:4a:20:42:5e:5c:c3:8e:05:d6:19:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F6:C9:80:FA:F0:FC:1E:3A:21:94:FD:5E:61:F2:30:EA:27:3B:37
X509v3 Authority Key Identifier:
keyid:1F:77:5D:99:62:59:77:42:CE:70:E1:AD:63:D4:7B:BA:55:A5:53:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3ddmWJZd0LOcOGtY9R7ulWlU0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/23ecbd-07a1-49e8-bb1c-797496254cd2/1/H3ddmWJZd0LOcOGtY9R7ulWlU0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/23ecbd-07a1-49e8-bb1c-797496254cd2/1/H3ddmWJZd0LOcOGtY9R7ulWlU0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:30:10:ce:f4:c1:c7:d5:8b:2b:31:1b:79:b9:5b:26:5f:7d:
9b:6a:46:0d:48:a8:ec:6e:6d:ca:d2:74:9b:dd:66:a8:3e:fb:
25:76:15:4b:bc:ca:1e:02:5f:df:5e:9e:16:bb:b1:c1:98:d0:
6d:3d:b6:c6:64:44:d8:65:a7:21:1c:2c:1d:b8:b0:d8:51:3e:
72:b7:b0:3f:61:aa:00:b5:b1:6b:50:53:bb:87:75:e4:0f:04:
6c:70:b5:0f:0b:2f:f8:e3:04:b0:30:66:ca:3e:ef:a8:54:22:
36:11:c8:72:91:bd:0c:d6:3a:1a:f0:c3:d5:04:43:39:d2:a6:
00:2b:c9:78:5b:33:05:ce:4a:34:b3:cd:ff:41:d6:93:0b:45:
20:eb:1f:bc:77:30:eb:60:b3:1f:8e:9f:2c:4a:69:b5:3b:91:
91:b2:81:88:13:ff:f5:cc:fa:67:a7:82:29:d6:d9:fe:3b:3e:
e2:1b:e8:bf:d0:7b:ad:b0:03:53:5a:8f:d1:76:24:0c:48:59:
bf:3a:d7:be:21:9c:1b:fa:ac:c4:84:59:e6:b2:5d:d0:13:05:
0c:3c:c1:42:db:74:9e:e0:33:b5:14:a0:4e:a0:6c:37:ea:cb:
a8:67:46:ce:fb:6e:a6:68:74:94:2a:89:58:c1:9b:50:b5:7f:
b5:57:4e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:39:23 2025 by rpki-client