Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
File: tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft (raw, json)
Hash identifier: 8lH0yezECDLCoE/b78lO6rt0fIo1+jFINQa74LFOsZw=
Subject key identifier: F4:AF:CE:9C:BE:30:FE:3D:55:6D:B0:A9:4C:1E:68:42:31:CA:3A:88
Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
Certificate issuer: /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Certificate serial: 0194BC3C5D6272C6D6A9C750662CA2B3BA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
Manifest number: 1240
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: VMjps0TDOc6vg4EVncBcfziPs7o.roa (hash: F5yYItxb8pdHFsuwCVpmcCXEuMNoj5mX3+RkzMDL76c=)
2: tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl (hash: RmX4DxWse5Bt69UoHIa+uWopgyCgbuOhw0RYAarTpM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5d:62:72:c6:d6:a9:c7:50:66:2c:a2:b3:ba:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=f4afce9cbe30fe3d556db0a94c1e684231ca3a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:4a:3d:56:c7:b5:a5:64:0a:ec:92:e3:25:
f1:b0:0a:4a:9a:c4:11:d1:98:89:27:1b:33:3f:16:
29:c6:dd:c4:9c:67:d1:b5:54:71:c2:40:c5:a3:ac:
ef:88:11:79:39:5b:ba:6c:89:08:b5:67:bb:50:3c:
38:3e:b4:4a:ba:30:18:4d:96:ba:32:71:24:3c:03:
85:4a:41:a4:8d:06:2d:a5:5a:01:fc:ff:f8:3c:85:
40:71:e5:2f:78:c6:4b:1c:88:5a:c7:3a:06:80:6a:
b7:78:03:60:13:f2:ee:4f:5e:c9:b6:a5:79:9f:c8:
29:c4:3e:eb:98:16:48:44:11:dc:64:31:ac:e4:f3:
3b:49:6f:81:a5:e6:f6:6f:ed:fa:0e:c7:c7:3e:2a:
49:dc:f3:8c:07:3c:2f:4b:05:b9:ca:db:7e:c3:5f:
7e:4c:b4:ee:7c:f7:86:57:41:bb:bd:31:6c:d1:c0:
96:72:0a:f1:e0:8b:08:38:bb:e2:65:36:82:15:ff:
49:b6:27:bb:f6:7e:35:a7:95:8b:14:cb:3a:04:b6:
8c:82:0f:d6:78:16:d7:0c:a9:05:8b:f0:bc:64:fc:
2f:4d:32:a9:20:bc:c0:14:76:71:b9:8b:ee:8d:c5:
2a:f6:7a:52:9a:18:9a:d1:9e:ec:d9:f4:ee:83:c0:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AF:CE:9C:BE:30:FE:3D:55:6D:B0:A9:4C:1E:68:42:31:CA:3A:88
X509v3 Authority Key Identifier:
keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:77:56:7e:2d:24:c0:1c:2b:e5:60:96:83:44:2b:34:a4:10:
c8:84:d5:06:65:48:28:e1:c9:13:8a:9d:71:ea:51:b6:e6:19:
8b:eb:f4:dd:c8:35:95:18:ac:17:ec:e6:7c:82:0c:cc:b2:a5:
76:3e:e3:3b:4b:57:60:81:31:51:e4:93:c8:12:32:48:18:27:
a1:b6:27:d8:f6:e5:dd:fc:e5:73:41:2a:0d:d2:e1:e3:31:62:
ce:68:50:8d:51:47:ce:00:15:a9:b4:49:97:e1:e1:8d:8a:91:
ad:b2:40:53:1c:c2:de:9b:bc:23:7f:35:5a:7e:b5:aa:fd:cf:
d8:39:17:ed:ee:0b:fd:c8:c8:bb:70:02:0d:c3:55:e5:7e:61:
1f:dc:84:27:ba:f3:34:f8:f1:bc:df:4c:ba:67:51:50:9b:fa:
17:7a:6f:46:d2:97:96:f7:09:79:c5:e1:7d:46:bb:6d:be:c4:
59:1f:88:05:ff:b3:c8:e5:dc:a4:dd:17:10:fd:15:53:9f:f5:
f9:27:88:85:71:ad:f3:64:01:40:d5:b1:f1:72:14:f9:d5:ef:
c8:26:50:cb:d6:8a:64:bd:6c:18:eb:c4:da:1a:13:0d:01:40:
7e:0c:6d:9a:ae:18:8a:a8:f0:82:8c:be:7b:0d:dc:e0:40:03:
b6:50:65:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:24 2025 by rpki-client