Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
File: Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft (raw, json)
Hash identifier: C190qKdgoB1+Q92hDg88KBn2cr/ma9y5Y1+gjhlc/D0=
Subject key identifier: 04:E6:55:AD:8A:6C:B1:4D:B2:63:89:6E:F3:D8:81:E0:9D:B0:24:8D
Authority key identifier: 2B:0B:77:19:C7:0D:DA:59:F9:33:A6:C6:70:3C:31:B6:85:08:9B:4A
Certificate issuer: /CN=2b0b7719c70dda59f933a6c6703c31b685089b4a
Certificate serial: 019711675CBD257EB618D39B58FCA13B3669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kwt3GccN2ln5M6bGcDwxtoUIm0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
Manifest number: 0583
Signing time: Tue 27 May 2025 11:01:15 +0000
Manifest this update: Tue 27 May 2025 11:01:15 +0000
Manifest next update: Wed 28 May 2025 11:01:15 +0000
Files and hashes: 1: Kwt3GccN2ln5M6bGcDwxtoUIm0o.crl (hash: 9OK4OvIqnDQQehjaPARVjeT36VhWtMS2XJHvDngRrc4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:67:5c:bd:25:7e:b6:18:d3:9b:58:fc:a1:3b:36:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0b7719c70dda59f933a6c6703c31b685089b4a
Validity
Not Before: May 27 11:01:15 2025 GMT
Not After : May 28 11:01:15 2025 GMT
Subject: CN=04e655ad8a6cb14db263896ef3d881e09db0248d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:3a:cc:11:55:29:de:fa:ca:4e:dd:e2:b8:
0a:00:cf:60:57:3a:7b:c7:ac:5b:e0:10:81:26:54:
d0:cc:ce:f7:17:6b:52:34:af:95:a3:1d:84:c0:81:
f7:d3:d7:12:c7:53:dc:18:8b:4d:6c:79:c2:dc:e6:
83:ec:61:79:4a:ae:0a:41:ae:cc:55:b7:0d:af:7f:
63:32:1d:95:68:00:d8:97:83:1b:39:e4:a3:58:67:
8d:71:40:22:8b:e1:1f:76:fb:a5:8c:88:de:f6:23:
c3:bc:3a:bc:50:4c:97:ea:4c:a5:de:c3:c5:29:ad:
6c:35:84:48:44:68:1b:96:c0:30:81:c1:b4:44:4b:
4a:87:72:06:98:e4:72:b6:9b:68:9b:f5:8a:9d:fa:
49:fc:06:7a:24:54:f4:84:aa:50:63:e4:d3:a1:b5:
57:1e:03:cf:58:9e:81:d6:1a:ae:81:26:a2:22:04:
43:5e:dc:04:c7:a5:d0:1e:4f:22:d0:c4:3e:32:b9:
9a:a1:ec:6b:0e:75:d7:30:52:cc:bf:7a:f8:53:02:
b5:5f:40:bd:f3:f8:3a:55:f8:d2:ce:e0:a1:37:c3:
4b:13:38:77:4a:17:32:09:6f:a9:c5:ee:d1:52:e2:
7e:e3:4e:a2:31:d2:80:03:17:ee:7f:a5:20:a3:39:
a9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E6:55:AD:8A:6C:B1:4D:B2:63:89:6E:F3:D8:81:E0:9D:B0:24:8D
X509v3 Authority Key Identifier:
keyid:2B:0B:77:19:C7:0D:DA:59:F9:33:A6:C6:70:3C:31:B6:85:08:9B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kwt3GccN2ln5M6bGcDwxtoUIm0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a1:70:b4:71:ed:42:25:d5:6a:14:e0:5c:92:d3:1a:7b:36:
8b:32:95:14:ed:40:3a:b9:45:6d:5f:36:53:47:f2:f9:d8:a8:
ba:63:cd:b8:41:55:d2:c2:d2:72:a4:eb:cf:3a:4a:36:ea:e2:
a7:8c:02:e0:80:f0:5a:3f:35:d7:c4:c8:a5:b4:66:0b:42:30:
18:32:22:a0:66:a7:32:74:6b:aa:4b:a2:9c:c5:37:70:f9:df:
6f:09:09:fa:1b:af:b8:b4:c8:01:1a:ce:cf:7b:36:51:31:22:
96:4f:aa:e3:f6:91:d9:e8:d9:b5:9f:f5:7a:86:66:ee:2b:78:
6c:2d:f4:a0:97:ed:48:56:c9:d9:3e:3c:f6:2d:ca:7e:85:4e:
58:0a:18:d8:45:6a:7a:7c:be:a8:0a:7d:ff:c2:79:af:54:bc:
39:ba:48:ef:89:13:84:76:b7:18:b2:ab:25:df:dd:b3:87:7a:
ce:a0:4e:b4:a0:d3:75:98:d3:52:ab:4e:88:c9:23:4e:1d:62:
cc:c3:37:65:8d:be:fd:ca:48:b2:17:35:5e:0d:72:1c:64:81:
cc:73:b3:04:c8:a7:9f:3a:b9:08:b8:21:3c:e6:ec:ef:11:0f:
17:56:0e:35:64:eb:aa:72:05:a1:d0:43:6b:1d:6d:f1:c4:11:
ec:5c:07:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:08:31 2025 by rpki-client