Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
File: bXoBv9NLsT37elNXId7EAc2TEtk.mft (raw, json)
Hash identifier: WYpEBfTdTpzpPj/fSEsei68wuC+YPEYg01kGPMdBdFE=
Subject key identifier: 9E:C1:46:C0:FD:0D:63:F6:75:3F:C4:FB:F8:78:A6:C6:34:FF:4A:53
Authority key identifier: 6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
Certificate issuer: /CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
Certificate serial: 01975E38166EF80683772A461F68B7B7B721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
Manifest number: 0E88
Signing time: Wed 11 Jun 2025 09:00:23 +0000
Manifest this update: Wed 11 Jun 2025 09:00:23 +0000
Manifest next update: Thu 12 Jun 2025 09:00:23 +0000
Files and hashes: 1: J1daZ0b9QqDyeaqVSA6rdJN33m0.roa (hash: m2mGCz+ed0huZCoFC3yQqfv0T01L6xVokVoZSaSYXMo=)
2: bXoBv9NLsT37elNXId7EAc2TEtk.crl (hash: MDIxDA/qjXVnlTRHPUq+Gpi5pGJNnUm3B6xHm0VM7/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:16:6e:f8:06:83:77:2a:46:1f:68:b7:b7:b7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
Validity
Not Before: Jun 11 09:00:23 2025 GMT
Not After : Jun 12 09:00:23 2025 GMT
Subject: CN=9ec146c0fd0d63f6753fc4fbf878a6c634ff4a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:a9:ce:26:64:73:c1:d0:87:f8:67:9b:48:
0a:74:a4:11:ac:dc:03:14:4a:db:b6:7f:b1:5e:7d:
dd:4b:2c:56:c2:94:49:02:35:43:c6:55:64:89:91:
90:ea:ad:14:98:37:78:a0:66:10:1a:68:6c:45:94:
07:a9:ab:c1:0a:0d:e9:03:71:b9:05:5e:63:44:c3:
4a:60:6a:80:ee:8a:17:43:80:05:b5:37:f7:15:aa:
0f:c8:0a:e5:6c:ab:1b:0f:ec:fd:fe:81:27:44:c4:
94:b4:47:69:db:a0:6c:24:f6:e9:d5:09:0c:dd:b8:
54:3d:13:ee:50:c2:3f:3a:ca:6b:90:d5:65:f7:21:
40:e6:07:26:52:b9:5f:f3:39:ee:26:84:c5:0f:0b:
47:26:9d:16:40:08:a4:83:a5:90:03:e0:6e:20:d1:
c0:cf:92:4e:db:74:b3:a8:c0:5c:a3:40:88:86:93:
c4:15:b2:ae:93:38:59:b5:47:85:ee:ea:af:57:6d:
02:64:7d:fe:2a:42:2e:ad:ae:58:fe:02:5c:49:ce:
d6:00:d4:d0:98:9d:70:c1:b4:7b:d2:9a:32:c3:b4:
74:1e:e5:d1:f0:f0:4e:02:94:0e:52:d4:34:e3:a2:
2d:8c:5b:ea:b4:36:34:84:aa:d5:ab:1d:0b:07:3e:
ad:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C1:46:C0:FD:0D:63:F6:75:3F:C4:FB:F8:78:A6:C6:34:FF:4A:53
X509v3 Authority Key Identifier:
keyid:6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:37:82:61:a2:de:0e:0b:5c:07:1f:9c:31:ae:fa:58:3f:78:
03:af:4f:3a:09:6f:71:05:a2:a5:6e:71:ac:f2:9d:a4:e9:82:
d9:35:b5:d9:4a:3e:4e:25:9e:15:0a:e6:b3:e1:fd:53:45:79:
01:f6:3e:41:8d:51:9d:ea:17:48:9f:1e:75:2d:05:37:26:3e:
32:72:ca:eb:bd:55:5a:a3:c1:89:fd:f0:f8:70:fe:05:cc:2f:
f8:4c:e2:52:ff:bf:8c:0b:dc:3e:87:00:cd:2e:dc:4b:a8:f7:
65:e2:b8:74:da:61:66:e7:83:b3:e4:c1:2d:6e:72:e0:d6:74:
25:41:c2:9f:dc:f4:65:7f:47:f3:0a:c6:7f:e6:ad:59:dc:7b:
db:16:7b:91:2b:a7:78:d7:54:e4:76:9f:8e:03:2a:42:2a:76:
7e:02:fc:41:db:25:be:79:70:2e:4a:97:be:3c:38:20:ca:4c:
96:54:1e:c6:07:18:e7:3d:bb:02:d4:16:91:0f:be:78:8d:37:
9d:30:a2:58:17:bb:93:d5:0d:86:00:16:9f:24:f3:ed:84:46:
f6:44:5a:cb:02:ae:43:fd:1a:2e:e1:4f:51:c7:02:15:7b:72:
e2:82:0d:e7:33:50:dc:2f:b5:7c:c8:ba:d2:7b:cd:67:84:b0:
1d:2f:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:11:38 2025 by rpki-client