Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: fB5bofMlVHUstodQykFRfzhdWVXziaaDrKSBujRBMRU=
Subject key identifier: B7:21:EC:B5:B1:4A:77:E8:7D:61:F5:92:C3:BB:05:53:11:05:35:58
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 0194BBCEDEEEA0FFAFE3C4ABAC51F3AD7986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: 847VWHs-caMwvruiasasUJ9i7yk.roa (hash: cGKjnew3so38YN3EBXzPrvxanAQQogJHwvbCrW4djb4=)
2: Cm9tMI3yXmOZgFYnxXLEbKAgtl8.roa (hash: 3SDCzkNnUy1DY9PhPdmuMPgAHQuW7TwXQTd2pQmOgYY=)
3: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: JY0aedcLchgz1wM3aQ12p1R5cPDBDQO2R4EJMAEIERE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:de:ee:a0:ff:af:e3:c4:ab:ac:51:f3:ad:79:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=b721ecb5b14a77e87d61f592c3bb055311053558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:f3:38:29:94:4f:61:cd:b7:db:66:53:ee:
94:d7:87:e0:26:04:a8:6a:12:72:c0:37:45:81:d8:
22:de:04:9f:af:76:f0:97:71:c9:99:00:31:30:51:
2d:17:89:06:0c:29:73:85:62:30:53:39:52:ff:4d:
79:df:7a:8d:74:d5:14:ca:42:d5:25:df:f3:de:43:
12:38:d3:cc:df:9e:28:eb:a2:45:c4:07:d6:8a:d9:
f9:f1:cb:ee:12:c6:38:9e:03:24:2a:08:cf:c6:f5:
5c:9c:d8:7d:c4:49:91:f9:4b:18:93:c9:d1:41:12:
25:76:9d:e3:36:a2:d7:b1:49:bf:04:78:2d:c7:ad:
eb:4b:e0:c5:a9:0c:44:a5:bb:7f:31:ee:31:4f:5e:
f1:10:de:4d:43:aa:07:8c:10:d1:05:80:4e:e5:a7:
04:e5:f9:7f:3e:d9:9e:69:63:f6:ef:bc:1e:f3:3f:
96:08:6d:81:ba:13:15:ce:2d:6f:bf:c0:bf:a1:45:
72:55:01:ba:07:4f:38:7c:c3:7e:0a:b1:63:71:c3:
c3:d9:1c:e6:4c:42:38:9c:d9:35:87:e7:98:72:d1:
e4:d3:fd:8c:4d:96:e4:84:70:a3:01:00:f0:cf:a4:
a9:95:5a:ae:6d:f3:54:a8:5e:20:6a:e5:9b:f0:c0:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:21:EC:B5:B1:4A:77:E8:7D:61:F5:92:C3:BB:05:53:11:05:35:58
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:34:0f:49:4d:80:23:d9:54:92:c8:a1:70:34:fe:67:8e:3b:
63:4b:52:a4:15:c8:4b:c5:9d:be:71:57:46:47:52:a0:25:80:
eb:40:a9:5b:58:a0:ad:11:de:cb:6d:0b:d1:51:c4:d0:58:40:
c3:4d:80:22:44:e3:43:18:15:77:d6:53:b0:fe:43:92:9f:3c:
7f:53:67:e0:7b:a4:14:19:48:8d:87:90:77:7d:db:1f:17:32:
4a:c2:82:d8:3b:70:81:97:c6:d4:7f:e0:c3:50:26:31:d5:01:
b6:f9:2e:26:c2:c6:8a:56:7f:ab:67:25:f4:45:21:04:60:41:
11:3d:4c:12:1c:e5:09:fb:8d:36:72:3f:66:ce:10:94:78:d3:
02:44:54:f5:31:82:c2:98:3a:ce:4c:6c:5b:a1:05:c1:e9:66:
1c:fb:45:28:73:d1:89:c3:4d:22:d8:99:e1:36:0b:06:16:3e:
92:72:cf:a0:39:85:53:0a:8b:c8:1a:da:f5:f2:5b:6d:63:23:
64:00:ed:2c:e8:52:f5:22:47:be:6d:83:46:23:a1:b3:33:38:
32:e0:50:fb:d2:e4:a9:42:5a:0f:85:0b:74:65:1c:31:77:f6:
f7:aa:9c:74:5c:64:08:fd:93:d7:e5:2c:7f:ce:8c:98:33:ec:
1d:05:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:17 2025 by rpki-client