Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
File: ngN01xvFfbltw5PpH-u56dWf75o.mft (raw, json)
Hash identifier: DtqSr4EhGfVq6uLswEqU5hdlm9WInxOtXsqLtaNU3jg=
Subject key identifier: E3:13:3D:06:9A:A9:19:33:73:10:9A:8E:4E:60:BB:A2:56:DA:94:0E
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial: 0194BC04E0450C96E4608232EBB64180FB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: 90vahj-_hJ5i1HoZpq9u0D0BXno.roa (hash: hNcbTROFVc3qb49hFAj0UmBrANu4X9fdOG7KqwGkrWI=)
2: aiayIUHfqJqjLTqVFWc4nu-4G4A.roa (hash: pzPbeMaNHz+Qf8EsosFYtAc0dvzeTKY+f3jQ8e+tojI=)
3: ngN01xvFfbltw5PpH-u56dWf75o.crl (hash: kJTNZXOqOof8a6vr4a6iJ3fOmDdrC1Ph5MT/GGgSROI=)
4: pchvFEtf54PSSiTi01p5PApQHUQ.roa (hash: LNaFLGgXExgOKyuOXBO2LPMxZGv4i1837UIKdLVtZOA=)
5: q3loLepsq8UUkjol44_uG7-Dp-g.roa (hash: HiKWGBwaGg7MLWq1sRr7H+Pilt+M4gjbpsaE+yrM590=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e0:45:0c:96:e4:60:82:32:eb:b6:41:80:fb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=e3133d069aa9193373109a8e4e60bba256da940e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:05:08:78:a1:8a:47:7e:6a:0c:1e:ed:99:
da:92:a6:66:23:1d:8b:60:0e:51:13:ff:e7:d8:34:
7c:0e:23:9c:bb:55:46:bb:48:18:21:e8:a9:7d:e2:
8b:24:39:2b:1b:c1:da:07:e4:9a:e4:cc:77:08:39:
49:e2:61:f3:d4:e0:2b:c0:71:ff:3d:ff:49:2c:7b:
54:31:cb:8b:ed:7d:2b:e6:e0:e1:7e:dd:12:43:ea:
f0:15:ca:63:d2:69:93:06:4c:f9:d1:9c:be:1a:ad:
ad:26:77:a8:e4:23:1e:36:2c:0a:e4:26:c4:c0:4f:
6b:79:db:3c:73:d8:7a:c4:4f:b2:fd:25:09:04:a5:
e2:03:0e:ab:77:51:d2:ea:98:74:03:5f:49:c2:55:
c8:de:2c:85:de:ca:32:48:4d:e7:b9:aa:82:14:96:
da:a8:21:d3:2f:25:5c:b2:89:ec:2a:29:34:97:a7:
85:25:eb:6b:af:06:88:dc:df:ba:9e:d1:ee:c5:42:
cb:e7:26:4f:c3:8b:93:15:69:5d:c7:df:f7:48:a9:
cc:68:a9:1e:7e:9a:94:6f:2d:d1:13:e1:cc:97:d7:
6f:70:11:40:dd:d9:88:b9:0e:fa:69:09:5e:4c:d3:
3f:4e:f8:fd:cf:bd:18:cd:ec:da:1f:49:6d:78:a7:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:13:3D:06:9A:A9:19:33:73:10:9A:8E:4E:60:BB:A2:56:DA:94:0E
X509v3 Authority Key Identifier:
keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fc:49:aa:87:e6:5d:c9:cc:6e:36:ad:72:64:de:ee:f2:b1:
50:a1:2c:a8:7d:d4:7c:cc:9f:72:80:c0:b8:c1:a9:22:08:0f:
e5:90:f1:99:d0:93:b1:37:96:2e:48:26:e0:86:8b:5e:47:f5:
3c:15:f0:ec:35:4d:0f:0c:52:bb:9a:bb:a6:50:8a:ef:f2:ff:
83:4a:29:29:48:9a:56:e6:b2:e8:21:c7:05:ec:a1:c9:28:f8:
33:ac:d3:b3:1d:d1:f8:e3:20:a8:13:8d:0e:d4:15:e4:90:0e:
46:b3:74:a6:bf:be:e8:ff:10:94:aa:4b:f4:f8:1e:8f:a6:bc:
c6:db:d6:61:3f:4f:54:78:a8:b6:27:5b:6c:88:96:5c:c5:80:
bd:bf:20:61:d6:5e:37:23:32:11:ba:13:81:43:50:86:9d:f1:
a1:59:ea:ec:99:bd:51:83:ea:6e:ae:7b:20:b3:08:6e:dc:2a:
e5:79:4f:a4:db:c9:e7:9e:70:2c:7d:0c:99:09:48:ae:6a:7d:
33:66:ae:ea:31:5a:ab:9b:66:06:3f:9c:28:04:e5:ff:4f:46:
d5:4d:0e:68:54:3f:af:05:91:b4:6c:83:bf:93:d4:e0:1d:39:
00:5f:dc:20:c1:c7:08:cc:b3:62:7e:59:f1:17:c1:05:67:aa:
d1:f8:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:14 2025 by rpki-client