Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
File: TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft (raw, json)
Hash identifier: LL4bFIiOcMLcfGDnKdrPR46CyryPhPWVRrM9mUmT0Yc=
Subject key identifier: 1A:43:15:0F:2E:DA:04:00:3A:05:50:4F:0D:C8:E2:86:1A:DA:59:9A
Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
Certificate issuer: /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Certificate serial: 0194BD856E5614785EDBEDE3D542FB5521AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl (hash: K0KAojhF8PiAg1Jq72qLGaJPWBJ4LUG/O1O706JGhhI=)
2: ebErOTcxF8x0HRmokQpD8A9P798.roa (hash: hgALEdNUDsS4deffBsaMplhK9QNYL4vbKGcbf+NsbgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6e:56:14:78:5e:db:ed:e3:d5:42:fb:55:21:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=1a43150f2eda04003a05504f0dc8e2861ada599a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:67:a5:e8:55:79:db:49:7f:32:fc:62:0a:
5a:ff:16:06:32:91:34:49:7f:46:81:9e:0b:4e:13:
c5:4c:2a:e9:37:2d:87:69:43:66:30:44:57:11:74:
eb:b8:1a:d8:d4:7f:ff:8f:b8:ac:a8:89:b9:90:1e:
91:12:75:63:d6:59:06:50:e9:e8:f8:01:0a:b3:fe:
03:57:92:9d:59:4a:15:9d:b6:ff:6a:59:9e:3e:78:
ad:4a:5d:aa:c6:c7:40:f1:df:db:00:00:14:1f:72:
05:a3:ea:07:39:c7:f7:ff:27:cb:41:16:31:18:70:
d1:eb:67:e9:7f:e3:bf:c1:20:fb:a0:50:83:ce:cb:
35:d1:ff:a6:2b:bc:9c:23:d8:b0:12:81:e0:73:9b:
48:32:9e:d9:51:80:93:69:d1:74:2b:d9:aa:9d:0d:
b5:63:67:2b:ae:b5:26:ee:09:14:dd:3e:8c:45:ee:
06:ef:bb:f2:07:ad:28:0b:dd:f6:f9:c0:c6:1e:36:
65:09:32:99:2d:27:4c:62:19:d4:68:0e:c5:24:34:
96:93:88:fb:78:e4:5b:57:9e:eb:e2:1f:85:e1:2a:
09:00:7a:9f:57:35:3d:df:0f:13:3f:09:be:59:6f:
8a:dd:4d:82:32:80:92:c5:69:69:0e:b5:05:fc:78:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:43:15:0F:2E:DA:04:00:3A:05:50:4F:0D:C8:E2:86:1A:DA:59:9A
X509v3 Authority Key Identifier:
keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8a:12:41:28:e2:6c:dd:57:21:1f:09:bc:c3:a3:53:27:53:
42:9d:73:8b:2e:1c:93:ee:3a:26:1e:d7:50:03:43:20:9c:29:
de:29:b2:7a:81:7d:26:ca:28:4c:ba:e5:db:0f:0f:7b:4e:45:
4b:6a:29:3f:00:85:77:01:bc:11:68:f2:44:e4:83:b5:a3:a3:
63:3b:23:97:36:27:0d:ea:88:29:ae:66:a4:e9:a9:ce:b1:4f:
12:82:7b:4a:e3:94:c7:df:ee:32:91:ea:7e:e9:ef:0e:9f:4b:
d1:b1:ff:c6:db:46:68:4d:29:fc:cb:77:e0:c3:08:6a:2a:eb:
c3:22:99:b6:6d:6c:35:a1:5c:94:2a:ad:ee:f2:55:73:79:9c:
e9:f5:8a:a1:7e:9c:71:d1:12:10:12:95:1e:18:ef:4d:16:78:
cb:42:6a:0a:43:17:ae:a7:94:29:55:14:c4:b7:aa:93:5c:9f:
bc:7e:9f:73:44:72:9b:3f:c6:72:47:67:83:f8:73:f9:1f:cb:
f5:ab:60:09:42:37:14:16:ac:fd:3a:84:7b:35:b5:d6:06:d1:
14:2b:6b:44:66:f0:84:d5:47:94:78:b0:da:e2:02:f6:af:ee:
fc:20:44:35:cb:37:c4:56:3f:3d:9d:ce:20:68:58:07:97:00:
18:6f:e6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:20 2025 by rpki-client