Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4a4a18-5184-4d36-907b-56cf387806f9/1/jm4ZvC60qI1Upb33OyM5GQ4x2gs.mft
File: jm4ZvC60qI1Upb33OyM5GQ4x2gs.mft (raw, json)
Hash identifier: NfMW89vOraW7Texgrldg3sySxOkm1aNF6L2RZADp44A=
Subject key identifier: 6C:EF:48:73:42:55:44:04:81:3B:28:BA:1B:3A:BD:27:81:8E:A2:60
Authority key identifier: 8E:6E:19:BC:2E:B4:A8:8D:54:A5:BD:F7:3B:23:39:19:0E:31:DA:0B
Certificate issuer: /CN=8e6e19bc2eb4a88d54a5bdf73b2339190e31da0b
Certificate serial: 0195EB019FC0E473126BC1602C3671DD8B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm4ZvC60qI1Upb33OyM5GQ4x2gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4a4a18-5184-4d36-907b-56cf387806f9/1/jm4ZvC60qI1Upb33OyM5GQ4x2gs.mft
Manifest number: 085A
Signing time: Mon 31 Mar 2025 07:01:46 +0000
Manifest this update: Mon 31 Mar 2025 07:01:46 +0000
Manifest next update: Tue 01 Apr 2025 07:01:46 +0000
Files and hashes: 1: jm4ZvC60qI1Upb33OyM5GQ4x2gs.crl (hash: 449wQGfOvILrORlsXj/xqvQCtghWDi5RIeQk3YjCM90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:01:9f:c0:e4:73:12:6b:c1:60:2c:36:71:dd:8b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6e19bc2eb4a88d54a5bdf73b2339190e31da0b
Validity
Not Before: Mar 31 07:01:46 2025 GMT
Not After : Apr 1 07:01:46 2025 GMT
Subject: CN=6cef487342554404813b28ba1b3abd27818ea260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:09:47:ac:6c:64:15:44:ce:c7:86:7c:f9:
ba:f5:a9:9e:5e:5e:bb:a2:ba:51:00:68:d5:7d:39:
d3:45:2c:c7:e2:0e:bb:80:61:0f:9b:2d:0d:53:c4:
56:11:04:f4:de:e3:94:e7:d6:f5:bd:da:25:26:99:
27:38:e2:f7:58:b1:b6:c8:36:02:77:69:01:95:c6:
3f:2c:c6:70:e2:fa:28:2d:51:44:75:59:6f:43:03:
dd:68:dc:f2:1a:bf:b3:95:f6:27:6e:f1:49:12:7f:
31:c7:38:a7:3d:1b:c9:0f:a7:f3:b9:26:80:6d:a5:
53:fb:4a:19:8a:ff:db:f7:fe:ef:be:ee:53:66:9c:
3f:9a:22:fe:f2:27:f7:8f:46:c4:9b:5e:90:ea:a0:
83:fc:d5:2d:fe:8c:d7:c7:90:f9:06:50:c1:83:ba:
e6:8f:bb:e4:2a:a0:7e:6b:c3:6d:fe:80:1c:b2:b4:
5c:e1:64:4e:ab:58:5c:b4:7e:62:b7:c7:6a:8b:3c:
5e:e6:fa:8e:b9:3e:80:b6:fa:bf:57:c6:1a:03:fd:
7c:3c:5e:7b:f8:95:8a:11:a3:f4:4d:92:fe:29:01:
55:36:c2:d8:ed:6d:ce:48:39:44:51:c3:d8:fa:3c:
55:7b:84:2c:c7:c9:9a:c1:bf:45:e0:88:21:47:c7:
10:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EF:48:73:42:55:44:04:81:3B:28:BA:1B:3A:BD:27:81:8E:A2:60
X509v3 Authority Key Identifier:
keyid:8E:6E:19:BC:2E:B4:A8:8D:54:A5:BD:F7:3B:23:39:19:0E:31:DA:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm4ZvC60qI1Upb33OyM5GQ4x2gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4a4a18-5184-4d36-907b-56cf387806f9/1/jm4ZvC60qI1Upb33OyM5GQ4x2gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4a4a18-5184-4d36-907b-56cf387806f9/1/jm4ZvC60qI1Upb33OyM5GQ4x2gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:03:58:e3:c2:4c:47:a9:be:82:e4:63:6e:34:0c:1e:21:cb:
8b:18:ee:a0:e4:01:8c:56:53:4d:ee:f4:74:93:dc:50:67:33:
1b:82:11:e0:e5:6d:1e:28:51:5e:80:ab:cf:45:13:1c:22:ba:
3b:76:f4:de:6a:a7:0a:73:5e:cc:f9:d7:23:6c:1e:ab:31:ee:
86:86:18:f1:c4:92:d0:c2:5f:b5:9e:67:c8:d1:60:d0:b3:37:
95:bf:1a:1e:f9:b5:63:f9:a6:35:2d:d8:44:2c:96:d0:2f:83:
10:69:5c:cf:9b:4e:b3:f9:de:c5:30:76:5f:b7:7b:02:b8:98:
4b:47:94:58:29:9c:87:0c:6f:26:9d:f7:7d:ec:6c:b2:92:16:
4e:4c:40:90:18:42:56:49:fb:78:5a:ab:b6:52:b9:63:ed:56:
c3:4d:27:bc:28:08:f4:a9:42:d7:06:ae:cd:e3:bb:4c:66:96:
f8:f4:30:f3:e7:ed:10:a3:6b:ef:1f:fa:7d:8c:5f:b9:20:84:
7a:fa:da:02:1a:0a:0f:d6:56:20:53:f3:ae:13:15:d4:1a:e0:
3e:71:05:76:3b:c9:c0:37:b7:df:ec:ab:09:96:6b:94:70:39:
3e:52:9a:ff:81:68:d1:e1:19:10:b9:1b:c7:ab:42:83:fd:df:
c4:f1:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:44:51 2025 by rpki-client