Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
File: Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft (raw, json)
Hash identifier: LYKfPlXrNbFt4CNtLoVIy2gZlMBz7hkA766YoXNaez4=
Subject key identifier: 30:B2:E0:17:D3:DA:2D:2D:74:B9:60:D5:BF:88:BE:CF:00:ED:B8:C0
Authority key identifier: 62:4A:7F:25:07:FC:AD:BE:CD:3D:2B:62:98:E7:0F:5D:4B:FE:04:B4
Certificate issuer: /CN=624a7f2507fcadbecd3d2b6298e70f5d4bfe04b4
Certificate serial: 01987D8A62F845B9694A13BD2959F056A640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
Manifest number: 11F5
Signing time: Wed 06 Aug 2025 04:01:17 +0000
Manifest this update: Wed 06 Aug 2025 04:01:17 +0000
Manifest next update: Thu 07 Aug 2025 04:01:17 +0000
Files and hashes: 1: Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl (hash: iD8PITRLj/ko/vxBl7T8WQG1aJRp/3/jO1/gBsPqJMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:62:f8:45:b9:69:4a:13:bd:29:59:f0:56:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624a7f2507fcadbecd3d2b6298e70f5d4bfe04b4
Validity
Not Before: Aug 6 04:01:17 2025 GMT
Not After : Aug 7 04:01:17 2025 GMT
Subject: CN=30b2e017d3da2d2d74b960d5bf88becf00edb8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:d4:b4:91:9c:2c:db:6c:89:76:d1:91:aa:
0f:77:ed:66:e8:90:41:5a:c1:cc:e7:a4:40:7d:41:
41:ea:d5:fd:95:36:8d:e1:5f:d6:ef:67:fe:39:ac:
f9:7f:a5:39:42:95:dc:89:c0:a8:6e:9f:86:9a:63:
f6:d8:ff:4d:da:78:1c:9f:89:05:1d:59:68:6e:95:
8d:cb:1d:14:c9:3a:03:b8:35:8f:e8:f3:c2:a0:98:
20:b0:1f:dd:8d:b1:64:c2:a9:5b:11:12:87:8f:8a:
18:0f:2a:e0:84:5a:dd:73:33:97:7e:98:37:00:41:
91:5c:38:4e:d2:a5:15:fc:02:0e:a6:3b:18:63:76:
dc:0c:9a:18:7d:90:8f:a6:e6:ea:89:67:e8:71:39:
8d:6f:b2:ab:cb:d9:16:71:40:de:1f:58:ab:02:31:
f8:3b:5b:2e:1b:8f:0d:ba:97:0d:85:0e:0a:fe:d6:
04:c5:8d:29:cc:9e:08:68:26:68:6e:e3:c0:e9:fa:
c7:0d:34:01:fb:de:b5:82:1a:b0:62:61:f9:e2:8e:
ee:a5:f8:31:c2:1a:97:79:e4:e0:fd:e5:c0:44:b2:
bc:41:3a:57:e1:c7:3c:7b:1d:1f:7d:0d:a8:d3:25:
a8:f3:eb:1f:41:0c:9c:e1:f4:7e:2f:70:4b:1c:86:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B2:E0:17:D3:DA:2D:2D:74:B9:60:D5:BF:88:BE:CF:00:ED:B8:C0
X509v3 Authority Key Identifier:
keyid:62:4A:7F:25:07:FC:AD:BE:CD:3D:2B:62:98:E7:0F:5D:4B:FE:04:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3a:90:ce:21:92:4a:ba:ad:c5:4e:9e:ce:f7:0a:a2:57:5b:
20:cf:9e:df:4f:8e:ec:78:12:10:32:de:c1:86:20:4a:8e:a9:
a7:54:c1:cf:3d:64:88:e8:62:bb:b6:02:3e:fa:8c:0a:37:aa:
09:0f:f2:14:65:39:c7:4c:58:fa:7b:ff:66:fe:fd:e7:32:b8:
d0:0d:ad:d6:62:b4:47:16:e0:9e:df:36:57:38:9c:2d:35:0a:
47:e1:dd:b7:fb:05:45:72:a8:5e:ec:5e:95:42:45:f1:67:ad:
96:63:87:03:3c:d4:ca:1c:fc:35:93:d7:49:2a:f7:bc:16:6a:
08:de:52:f2:00:45:fe:2c:dd:2a:0f:bb:e3:0b:39:00:6b:24:
5f:80:47:b5:73:ac:d1:80:b0:cc:4f:4d:0d:db:ba:4f:20:2d:
76:9c:03:51:e9:cf:32:9c:d2:f8:e3:18:f3:a2:96:62:dd:83:
a5:9f:8c:52:ff:78:48:f5:55:9c:26:a9:47:f3:7f:a0:a8:cf:
d2:dc:56:20:33:3c:95:75:7b:6f:81:57:62:47:ed:03:21:f7:
55:05:08:ae:a4:df:3d:11:b4:ff:94:2d:bc:47:80:9b:f3:4e:
85:f2:60:3f:79:9a:21:97:d8:18:19:c1:9c:9d:4a:37:db:0e:
9f:03:64:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:33:40 2025 by rpki-client