Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft
File: pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft (raw, json)
Hash identifier: T4ERYWXunuCCsN40ugAT+D/GktEw1lhsj5h7OekQ1wA=
Subject key identifier: 9A:D3:E5:8B:50:CE:03:3B:1F:1C:CD:CB:67:67:9F:1E:1F:AB:CF:A2
Authority key identifier: A4:2C:6C:1A:F2:8F:3F:85:66:AD:1F:34:20:30:BF:06:0F:76:56:77
Certificate issuer: /CN=a42c6c1af28f3f8566ad1f342030bf060f765677
Certificate serial: 0195EB01275034D106144FE3236835191585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCxsGvKPP4VmrR80IDC_Bg92Vnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft
Manifest number: 0537
Signing time: Mon 31 Mar 2025 07:01:15 +0000
Manifest this update: Mon 31 Mar 2025 07:01:15 +0000
Manifest next update: Tue 01 Apr 2025 07:01:15 +0000
Files and hashes: 1: pCxsGvKPP4VmrR80IDC_Bg92Vnc.crl (hash: km4yeoDZbz1iit6jT0q85mzyyEVzduDsjNPjI4Fl9bs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:01:27:50:34:d1:06:14:4f:e3:23:68:35:19:15:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42c6c1af28f3f8566ad1f342030bf060f765677
Validity
Not Before: Mar 31 07:01:15 2025 GMT
Not After : Apr 1 07:01:15 2025 GMT
Subject: CN=9ad3e58b50ce033b1f1ccdcb67679f1e1fabcfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:69:d4:d5:ce:82:58:ac:1e:c0:f4:b6:9d:
05:f8:5a:77:83:0e:8e:a0:94:10:0a:63:f4:fe:93:
90:2c:b8:d3:44:fd:b1:81:bf:e4:90:1f:b9:bf:0c:
26:7e:aa:3d:d0:e3:f6:cc:29:da:f9:7c:9b:2f:4f:
bc:e6:4b:dd:25:ec:0f:40:9b:83:fd:0f:83:0e:3c:
e3:3b:b7:cb:f6:12:99:84:42:62:6d:1e:85:e3:eb:
9a:1f:d3:81:3c:18:ee:5d:b7:8b:f0:52:ef:3c:a8:
fc:30:13:a9:e4:7b:8d:99:7a:e5:56:b4:89:0f:14:
fb:35:a9:0a:7c:04:3a:64:51:7f:16:5f:c2:4e:1e:
37:3f:d4:48:5f:10:75:ac:d1:d0:47:f6:11:a7:10:
f3:06:ad:7b:81:ae:ae:ab:fb:f2:97:35:fc:65:8f:
29:0d:2a:be:ca:67:7a:da:00:bb:18:97:bb:cf:f4:
1c:77:2f:0d:72:3e:9a:51:0b:52:05:9c:53:b5:0f:
9e:cf:e1:c1:88:25:86:fc:4d:ae:86:c0:0a:70:9e:
36:42:1e:fb:fd:77:32:ae:f0:f2:a6:7b:bc:98:ef:
91:5e:48:31:7d:3f:90:c6:dc:8c:96:62:cd:6a:55:
eb:fd:34:16:82:65:8c:4e:6f:6f:4b:46:c0:45:9a:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D3:E5:8B:50:CE:03:3B:1F:1C:CD:CB:67:67:9F:1E:1F:AB:CF:A2
X509v3 Authority Key Identifier:
keyid:A4:2C:6C:1A:F2:8F:3F:85:66:AD:1F:34:20:30:BF:06:0F:76:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCxsGvKPP4VmrR80IDC_Bg92Vnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:74:41:8b:88:d0:61:86:50:c2:c3:c0:3c:47:42:68:fd:3c:
c1:cc:75:26:d4:7d:5d:17:fc:10:64:f2:39:74:93:8f:48:95:
4b:aa:1f:a7:6a:27:ca:91:3e:27:b4:64:3b:af:4d:51:5d:52:
99:77:e5:b8:a3:43:4b:25:05:e7:1e:18:03:cc:a3:c9:4d:df:
ee:e0:a0:bf:df:19:9a:c2:3e:d0:47:44:38:c9:e1:b8:25:e8:
e0:98:78:c1:9b:d5:0c:10:e9:6d:94:0c:46:62:80:9f:5e:7c:
7e:3a:ac:48:91:02:77:7c:ba:1d:20:62:84:d4:b2:3d:1e:22:
43:e9:29:62:5c:56:07:53:2f:29:c6:db:2a:63:2c:1c:fa:c8:
f9:8a:94:4e:6b:1b:e0:c8:fe:3b:43:70:79:03:b0:1e:60:f7:
ea:c3:45:4f:3c:6d:f4:b5:cb:b0:64:04:0f:3b:86:ab:ca:1c:
1a:99:b5:1e:29:81:18:98:59:09:d6:16:43:d3:17:8a:ee:b0:
1a:3f:ed:b6:15:87:8f:29:55:a2:6c:54:c7:19:01:3a:46:cd:
fd:50:5e:64:a9:15:3a:1f:ef:c9:a3:ff:f3:94:2f:d1:2d:f5:
82:63:a4:4d:bd:2d:f9:78:4d:5c:c5:06:b7:02:40:ac:15:3d:
1a:fb:59:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:22 2025 by rpki-client