Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
File: Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json)
Hash identifier: JOEErFvtuHeIrh4ZRyX7jkzpOsN0I/4CNwlD8EJnykM=
Subject key identifier: 85:5B:87:1B:C5:BF:26:94:51:20:02:60:B7:40:4D:26:D9:CB:35:5F
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial: 0194BC3C087F9452D61E4670BA6CCC0D8538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
Manifest number: 1180
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: BJ4HzoKewtJteNAj6A3k/8h5GWgvpz9pBsC5MW9zlIo=)
2: Qgkf9isvn9G1i53cocvwB25dPG0.roa (hash: 7pOvhNxITVVpr4C2N2+h/b2aAgFP8cFKYE5FjzDD/YQ=)
3: XGxdWNZPiFptk-3w7OILGgkhItU.roa (hash: xf5heCAI8Pty8+MuLnNYj13qa72HA9enfkhk9E22KD4=)
4: XQLqdml-mlBf3Z-90xd5Tk9chkc.roa (hash: nSfERnt4sWaMf0P1jQhY7bLFNZayDQ04cDYTAEFX1MA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:08:7f:94:52:d6:1e:46:70:ba:6c:cc:0d:85:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=855b871bc5bf269451200260b7404d26d9cb355f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:17:2e:80:bb:d0:36:e2:e3:3d:48:a6:a9:
85:01:7f:e7:9b:96:21:66:fc:a6:4b:2c:b7:8f:ed:
31:2b:70:f1:81:06:e4:71:c8:66:34:a2:df:55:94:
44:c2:f8:c0:4d:19:c6:62:ab:07:37:92:92:80:c0:
af:53:95:ed:38:1f:23:a7:44:f4:79:e1:de:fd:e8:
68:61:2f:fa:d8:6e:1c:7c:e1:51:7e:9c:a7:8b:a6:
3b:4b:b5:29:62:13:2e:04:c8:26:67:81:4d:b5:7c:
6e:6b:e8:09:05:da:c9:77:7e:b7:6c:f5:7d:65:bb:
a5:03:9a:81:1d:2a:d3:e8:31:7e:38:d5:46:8b:d4:
4a:06:fe:6a:2c:b4:1e:b3:28:4d:8f:20:e4:85:55:
10:07:6d:fd:06:10:61:e3:df:26:ed:52:c9:57:8a:
62:fa:cf:78:98:2e:67:20:04:6e:89:dc:44:95:1c:
06:cb:e9:b6:f7:9e:ee:b1:fd:4e:69:7f:4b:31:f4:
fb:7d:56:fb:bd:68:34:a6:eb:aa:4d:25:6e:ff:16:
de:45:f6:a0:52:df:84:c4:c8:cb:3c:8d:cb:33:a5:
48:72:e0:a0:a8:4a:f4:12:0e:f9:87:6e:d2:05:37:
2f:36:67:26:3a:2a:fe:9a:56:b8:1a:b6:a2:cd:79:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5B:87:1B:C5:BF:26:94:51:20:02:60:B7:40:4D:26:D9:CB:35:5F
X509v3 Authority Key Identifier:
keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:64:d4:9f:0c:1d:c8:90:06:60:fc:d4:5f:16:c9:4f:84:96:
d4:7b:47:ec:fd:2a:ec:d0:c2:2b:00:76:f6:33:6d:2a:2d:6a:
e7:7a:98:eb:00:0b:f3:97:5f:7b:1f:3b:a3:41:d3:97:b9:27:
1b:6d:a5:b7:03:8f:2b:7c:2d:85:2c:bc:46:16:e7:08:88:a4:
5e:d7:1f:cf:4e:05:a4:61:01:2b:0e:32:6a:e4:1d:5a:27:04:
65:64:79:a9:36:28:5b:ee:b4:77:cb:cd:1a:f4:48:6d:ab:34:
de:5c:57:f7:2c:bc:f3:0b:a2:50:64:49:10:10:9e:3d:5d:f3:
96:e9:a7:09:08:cc:6f:a4:db:54:22:62:dd:45:ee:00:1f:6e:
35:85:f5:61:dc:cc:0a:21:40:10:6b:c7:ce:d7:75:db:3b:4f:
02:63:7a:7b:65:71:9b:c4:80:f8:b6:20:db:ca:38:6b:d9:75:
d8:94:ca:3b:a3:dc:a6:23:9f:85:52:be:d2:bd:15:9b:a7:03:
6f:d4:b0:84:99:11:da:2b:d2:03:ab:4a:5e:a0:ec:ca:37:89:
1b:e2:7d:48:8e:07:4a:85:7c:31:6b:ff:7e:d1:f9:b0:94:ce:
e1:d0:be:0b:95:29:32:37:d9:13:15:18:bb:4c:be:de:ab:52:
86:37:4e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:41 2025 by rpki-client