Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ed4470-0ea3-4e3e-ba85-316ef1e253c0/1/1hmQE4Ia2Z60WxOK9QeYTvdG0as.mft
File: 1hmQE4Ia2Z60WxOK9QeYTvdG0as.mft (raw, json)
Hash identifier: wogkOn38NC1YFCVipRnIpGXKQIpSHHpvWsOmeGR/aeM=
Subject key identifier: EA:36:B4:53:C5:09:45:15:94:E5:1D:37:D4:A7:17:FD:65:A3:53:DF
Authority key identifier: D6:19:90:13:82:1A:D9:9E:B4:5B:13:8A:F5:07:98:4E:F7:46:D1:AB
Certificate issuer: /CN=d6199013821ad99eb45b138af507984ef746d1ab
Certificate serial: 0195EE39327663AFBF6F0E1F5FB6D06D5854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hmQE4Ia2Z60WxOK9QeYTvdG0as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ed4470-0ea3-4e3e-ba85-316ef1e253c0/1/1hmQE4Ia2Z60WxOK9QeYTvdG0as.mft
Manifest number: 059D
Signing time: Mon 31 Mar 2025 22:01:20 +0000
Manifest this update: Mon 31 Mar 2025 22:01:20 +0000
Manifest next update: Tue 01 Apr 2025 22:01:20 +0000
Files and hashes: 1: 1hmQE4Ia2Z60WxOK9QeYTvdG0as.crl (hash: AMnURvy1r1bKPJuRGLoUzvf0lkB0TwSNmMX/FlUUHlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ee:39:32:76:63:af:bf:6f:0e:1f:5f:b6:d0:6d:58:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6199013821ad99eb45b138af507984ef746d1ab
Validity
Not Before: Mar 31 22:01:20 2025 GMT
Not After : Apr 1 22:01:20 2025 GMT
Subject: CN=ea36b453c509451594e51d37d4a717fd65a353df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7c:c3:89:93:15:80:7f:3c:22:c3:55:a1:f9:
cc:8f:19:d2:37:a8:f4:27:e2:50:7a:e8:f9:4e:68:
9b:f4:02:f9:03:48:13:05:65:66:d6:3c:b9:8a:2e:
fa:23:f9:8c:1f:c1:71:43:bb:5f:9d:34:eb:c1:a3:
3b:cb:74:96:3e:f3:16:ac:3e:c1:64:93:57:44:7b:
52:5d:15:fe:cd:42:2e:f5:36:ac:43:e7:37:3c:9d:
30:e6:f7:36:da:d7:53:ec:0d:79:d5:54:79:64:e2:
42:d0:25:ed:9f:b1:e3:27:91:6e:9a:93:79:b3:6f:
9b:ed:a7:a8:1f:cb:0d:34:ef:56:3e:35:73:4d:4f:
96:f6:49:e0:2e:4a:53:c0:e5:ab:a5:5d:fd:22:dd:
e4:70:e9:e8:0b:45:6e:36:b4:ce:a3:3a:50:67:df:
67:27:c0:03:25:2f:99:c5:58:30:43:af:dc:3d:0f:
7b:ce:c6:83:3b:55:47:95:06:24:cd:4e:87:c4:50:
90:25:e8:5e:74:ad:a4:d5:aa:41:2e:f2:01:37:ab:
41:ed:7f:50:e6:7e:fb:e1:e2:bf:46:7f:69:a6:9c:
4b:57:97:e2:ef:e0:aa:df:f3:6b:dd:ba:6c:08:cd:
d7:d5:65:61:9e:59:a3:11:b3:e1:2c:34:d7:74:93:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:36:B4:53:C5:09:45:15:94:E5:1D:37:D4:A7:17:FD:65:A3:53:DF
X509v3 Authority Key Identifier:
keyid:D6:19:90:13:82:1A:D9:9E:B4:5B:13:8A:F5:07:98:4E:F7:46:D1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hmQE4Ia2Z60WxOK9QeYTvdG0as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ed4470-0ea3-4e3e-ba85-316ef1e253c0/1/1hmQE4Ia2Z60WxOK9QeYTvdG0as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ed4470-0ea3-4e3e-ba85-316ef1e253c0/1/1hmQE4Ia2Z60WxOK9QeYTvdG0as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:73:e8:a3:f5:de:c8:b0:38:52:51:41:8f:67:5b:4c:b0:7a:
dd:cd:e9:42:8c:97:c1:12:90:93:db:cb:cb:60:87:1b:05:01:
56:12:88:b8:8e:51:aa:ae:fa:2b:da:9f:6c:83:fd:a8:28:43:
39:be:8d:77:83:c8:e9:06:fa:39:9f:cf:a6:7a:a3:85:d0:8a:
fc:03:91:56:84:ed:88:9c:71:62:2b:d8:23:44:35:99:70:86:
00:6f:38:18:4c:f4:bb:21:b8:a5:f8:82:0e:df:70:07:f4:66:
47:2c:f2:d9:9c:4a:59:70:f6:7a:85:09:f2:2b:8d:85:e6:bf:
36:d1:fa:b1:3d:b9:d2:53:61:98:1e:01:77:61:cf:d1:ae:00:
59:09:df:4f:16:93:f9:fc:56:75:15:ac:d6:e0:82:67:9d:56:
47:65:e7:28:86:80:3b:63:f4:7a:a2:f6:0f:4d:50:fa:5f:98:
85:e4:7d:ea:90:56:7c:5b:a5:b2:5f:97:8c:92:ff:2b:6d:b3:
08:7c:72:3d:97:38:cb:d6:06:4c:c1:25:07:7e:be:0c:c1:fa:
53:8d:67:e9:f7:80:b8:88:5a:5b:3f:03:9e:59:1b:46:9e:66:
1b:c1:45:f9:b5:6c:1c:08:a9:b5:ee:1c:3b:91:a5:f2:08:70:
ea:b2:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:03:55 2025 by rpki-client