Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: Aj8oWb0v3CXv0bGTsGU7Rywgu8WehLpZ/DCHFCUfXSo=
Subject key identifier: E6:DD:55:85:A4:FA:43:FE:BA:E4:DE:08:FD:46:69:52:40:BC:82:63
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 0194BCE0DD6EE2BE184F3BBA221724340D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: SE867Co1dWwT9rn_iwUHdqZbJb8.roa (hash: gDn91MwxNsmg9NA7daGFqFT1lPwuLwOn38cGeI8H8VA=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: e3hx5cwIJLx9CEp3lCSICx/3tB7XL68oB+ELVf9OO/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dd:6e:e2:be:18:4f:3b:ba:22:17:24:34:0d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=e6dd5585a4fa43febae4de08fd46695240bc8263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:e4:31:96:e6:4b:43:16:43:1f:a4:3d:a2:
42:67:a5:57:87:32:13:c6:53:f9:44:71:fa:9d:a8:
1e:02:a9:3c:cf:85:53:62:25:f8:04:98:4f:71:db:
7f:7a:51:80:f5:ab:1d:21:26:a1:90:59:cd:d2:fa:
69:18:c8:3f:bb:92:8d:ce:52:69:be:48:95:22:03:
78:c6:ba:cc:14:a2:37:97:9f:1a:2e:0b:c6:96:df:
13:35:91:90:29:b2:24:15:8a:39:67:78:ea:8f:67:
4f:ea:53:9f:e6:4e:55:93:dd:f7:74:b5:a3:9a:2a:
25:e5:65:1e:d0:bc:00:fc:8a:4b:02:0d:69:1c:26:
30:1f:53:ad:13:e4:2a:f6:e4:2f:2e:d2:7d:93:ac:
fe:59:10:35:d4:98:c3:b2:e7:ce:d5:87:cc:8a:02:
94:02:fa:2b:c9:c5:b3:f0:43:8a:83:89:de:9d:4a:
f4:06:21:20:59:b3:fc:d3:b4:9b:71:50:f6:ea:37:
d8:12:2a:a5:4e:f5:4c:13:6e:bd:4a:b8:13:0f:92:
08:1b:1c:76:01:3f:0f:e0:34:ac:5c:45:2c:f2:fb:
77:83:56:57:36:8e:ab:5a:8e:b3:ee:e1:fa:70:45:
27:e0:d2:83:ac:f0:d4:b0:c0:c8:77:78:06:5e:b2:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DD:55:85:A4:FA:43:FE:BA:E4:DE:08:FD:46:69:52:40:BC:82:63
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f5:8b:9d:a7:02:91:eb:fe:6e:79:7a:a7:80:14:7a:16:6d:
80:dd:58:ba:f3:e4:50:ac:5c:f8:e9:a2:fe:a0:db:20:14:77:
89:3d:08:04:b5:12:cf:2e:54:a7:94:d6:ca:28:d8:5a:58:3f:
49:be:9d:ea:1f:7c:0f:c2:9f:c0:52:1e:eb:09:66:02:4a:a7:
12:8e:33:ed:62:88:85:37:ca:e5:66:1a:19:7e:8c:7a:90:8d:
3f:32:16:29:39:2c:3c:c9:e6:6c:87:de:22:e8:29:3b:be:e4:
a3:83:f0:33:c5:fe:e5:87:91:c8:c7:d9:61:af:79:dd:3b:f2:
95:18:7f:ab:3c:be:5e:f7:f3:ff:89:39:d7:37:b3:68:5e:e0:
aa:be:7f:a2:0c:c9:f0:81:e3:b7:18:d4:a2:8c:ac:b2:42:ee:
a1:c5:60:6e:e7:b6:cf:79:0d:94:de:66:35:46:99:79:96:a2:
d4:db:24:da:33:56:bb:9d:55:38:b9:e4:4b:3b:52:09:f5:2e:
bd:c0:2e:f8:b3:d7:8e:18:36:89:8e:ba:d5:41:6f:3d:16:a0:
54:e7:67:81:f1:51:e5:8c:4a:a6:69:77:dc:ed:87:4f:ca:b5:
03:8d:ac:7e:c9:dd:fa:23:43:b5:7e:fb:16:25:c7:d0:b3:3b:
42:48:fe:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:45 2025 by rpki-client