Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: 3V2TB7jRIuEwTVsUUXdk67OWV51dPQEhWIF3kxY9Npg=
Subject key identifier: 36:D7:AE:39:E8:81:47:FB:EE:1B:00:EE:5C:E4:BC:E6:A5:29:ED:77
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 0194BC3C1D8B2CC50F27BA3834DB2A9238DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 04D6
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: AJ_AO_dUFGtaNOJf-R2jT-KypPc.roa (hash: CTLC7BEk13fH9Lb2483EWwJXR9UMoaKhXmzsu2g/OAc=)
2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: 75C96R4dXQt0nawixigTelLttDOgyVgJObnz0/PL3E8=)
3: jbpo7UEJqge335LMUeNSgvCaNTI.roa (hash: MZqdVSw/apK3pc3ZeATkJS+ETEBWZhP6yk5oDbnCI8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1d:8b:2c:c5:0f:27:ba:38:34:db:2a:92:38:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=36d7ae39e88147fbee1b00ee5ce4bce6a529ed77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8e:65:70:ed:a6:01:66:99:24:3c:85:4f:38:
dc:b7:cc:02:69:4b:58:15:26:46:d8:66:7c:66:59:
03:45:8e:4f:21:3c:7a:9d:ea:55:ab:1d:40:61:be:
6d:b2:47:f4:0e:c1:14:a4:7d:8b:64:13:05:23:b3:
dc:a5:41:57:63:3c:aa:6c:c7:60:73:e6:c0:b5:8e:
37:e3:87:79:db:79:28:c2:23:e2:b8:0e:f6:cf:9b:
2e:81:64:fd:d9:50:8c:e3:e9:92:ad:c0:4b:8f:23:
81:78:5c:f5:7d:17:82:ea:ba:ab:1c:74:4e:3e:e3:
4f:42:bc:d7:82:b5:bc:5e:78:aa:34:64:57:57:3d:
13:aa:3a:c6:22:2c:eb:50:a9:37:25:84:cd:7d:ae:
67:d6:bc:d8:50:b1:52:6c:42:03:a1:2a:cf:e6:38:
7b:84:0e:1b:b4:31:73:34:9f:8c:fc:9c:92:eb:a7:
72:ed:f2:38:ff:d4:3c:35:46:6d:fe:72:f8:f6:2e:
39:21:b7:47:12:c9:68:fe:15:87:f5:98:c6:c6:fd:
b2:c2:67:e1:53:0a:4e:68:e6:10:1d:aa:43:cb:3b:
81:f3:8a:a3:6f:5e:3c:ce:1e:bd:5b:df:0f:d5:84:
ca:14:91:e6:c9:0f:52:fd:43:57:6b:5c:3d:48:df:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D7:AE:39:E8:81:47:FB:EE:1B:00:EE:5C:E4:BC:E6:A5:29:ED:77
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f9:0c:13:44:b3:33:a0:40:18:91:9c:61:2e:40:d6:d9:e6:
0e:85:73:06:87:95:5d:18:99:9b:f9:32:d9:ad:a5:08:71:96:
90:34:8b:a8:96:60:2f:ec:5e:a0:a0:51:66:96:21:5f:8c:4c:
e1:c8:17:a8:e9:17:f8:da:79:b3:9e:4f:bc:9c:ce:33:d1:e1:
49:91:0f:8c:2d:e3:dc:8c:4a:2c:27:76:24:ed:ee:a8:8d:b2:
fc:71:e8:37:03:aa:be:cf:50:9c:59:70:7c:dc:ef:d4:ff:74:
20:67:c9:a3:7d:44:81:9d:22:08:4e:93:3e:85:96:76:f2:ee:
7f:4f:ac:b3:9d:8c:96:11:67:ef:37:b4:f1:0f:06:e1:16:d4:
04:28:4b:a9:4e:d1:4f:8d:8d:2e:4c:8f:ec:de:59:50:dd:2c:
ca:ab:cf:3b:7a:3e:46:c2:d0:a4:c4:3a:1c:b0:e0:2f:57:a8:
85:78:fa:68:d7:8e:b3:d0:7f:80:10:11:0e:32:9e:a6:d9:46:
ac:d4:ad:2f:76:84:6e:c8:94:5f:bd:d2:8f:10:ff:49:8b:06:
81:b5:1f:00:99:eb:ba:a4:2d:a5:0f:10:28:0e:5c:36:e4:b8:
a4:3f:3a:bc:eb:0c:ea:32:6d:ac:c8:7d:c8:0c:b0:e4:55:9f:
48:1e:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:05:08 2025 by rpki-client