Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
File: _J8k6-8Ri5Fl5S9hypk77kMGTsI.mft (raw, json)
Hash identifier: n0mnryd830ZtH7lVGh4+RVXUXLltAZ5zQXo3iPnAI+A=
Subject key identifier: 43:A5:00:D3:FD:63:CC:50:A2:ED:95:78:6A:E5:26:15:9D:6E:59:0B
Authority key identifier: FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
Certificate issuer: /CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Certificate serial: 0194BC3BD7CF99CFE3D5C2E243597FE9FC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: 0Z7zdgD4hEOFjj_4hKMVcy7j-3w.roa (hash: derKa6RxFEVM7g9Xe9HEgRdoNKySPR/cieLuP8cX31E=)
2: _J8k6-8Ri5Fl5S9hypk77kMGTsI.crl (hash: 7eJejlnnGsjgdC+4FDKujYrpQYBdrMtmFtYHl95aKWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d7:cf:99:cf:e3:d5:c2:e2:43:59:7f:e9:fc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=43a500d3fd63cc50a2ed95786ae526159d6e590b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:14:23:f1:0d:2a:40:94:1d:bb:0f:90:09:
9b:9d:ee:db:44:1a:f3:b7:99:50:eb:88:06:7a:4c:
4c:1f:cf:04:26:66:6e:15:3c:70:72:58:33:24:70:
64:8b:61:c5:c6:83:76:5f:f1:9b:4e:88:2f:f1:ce:
48:2b:9b:27:95:4e:c7:3f:b9:46:8b:13:8e:8a:f8:
17:2c:6d:06:2b:d6:e6:88:c8:00:1e:84:26:e4:14:
72:21:83:30:3c:11:57:51:62:f8:82:f5:73:0b:08:
33:05:eb:a6:d8:ca:2a:d9:0e:38:b5:9f:4c:bf:a4:
4d:85:7d:69:26:39:83:02:c5:b7:57:a2:5c:ac:1b:
67:53:0b:d3:07:ad:a0:fe:bd:cb:9f:9c:35:a5:9a:
a7:8a:4b:3d:85:64:d3:72:4f:16:88:ca:cb:b8:29:
e7:65:52:4e:80:80:fc:59:26:f0:d7:c7:b2:4a:91:
75:2b:b1:4c:a5:3e:7d:92:ee:2e:1f:83:bf:d3:7f:
3d:8e:27:83:8d:3b:e5:19:1a:f1:99:ac:2b:5c:21:
09:5f:57:4b:6e:ef:8d:1d:7d:ed:81:83:f8:f8:23:
8b:dd:81:c3:f1:f5:e5:ac:29:37:2c:0b:e4:3a:10:
02:00:41:94:1a:d5:5c:7e:02:4c:9b:35:b2:e8:29:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A5:00:D3:FD:63:CC:50:A2:ED:95:78:6A:E5:26:15:9D:6E:59:0B
X509v3 Authority Key Identifier:
keyid:FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0f:6b:fd:54:2d:69:42:5c:d4:3e:df:5e:30:49:de:cb:dd:
5b:e4:69:76:51:c6:1f:12:29:2d:4a:51:93:dd:c2:01:da:7a:
67:c0:00:56:91:59:f2:7f:ae:af:29:5f:0c:e3:0c:6d:78:f9:
bc:c7:06:a3:97:36:f4:fd:23:60:56:1b:f7:23:8a:7a:09:ef:
6a:8a:b1:49:ba:1e:d6:9d:98:1b:c1:2d:bd:d1:a4:74:41:d2:
0f:c1:f1:b6:dd:95:da:17:6a:3b:d7:9b:ea:e5:93:63:8f:24:
a4:df:71:14:6f:98:c2:7a:10:ab:6e:c4:9e:d6:79:d1:eb:3b:
8a:9c:93:88:17:c7:1c:8c:91:cf:a0:86:22:24:e1:ad:bf:1a:
d9:62:24:53:fe:19:a6:f0:72:95:e6:fb:b8:3a:17:67:1a:29:
d3:d9:47:29:64:cc:21:5e:bf:52:68:3c:16:ff:a3:d4:81:6b:
74:10:44:7f:e4:43:b1:f0:78:68:28:be:26:c2:2c:4f:ef:2e:
a1:96:7f:e1:14:34:4e:11:a0:ac:ef:eb:6d:00:de:2c:23:3b:
4b:9f:c6:67:d5:72:c9:4d:ed:5f:8f:d5:92:cc:65:ad:68:9d:
21:c9:1f:fb:6c:0b:1c:5c:b6:e3:bc:a6:92:e6:20:3c:ff:31:
21:c7:45:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9fPmc/j1cLiQ1l/6fyEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOWYyNGViZWYxMThiOTE2NWU1MmY2MWNhOTkzYmVlNDMw
NjRlYzIwHhcNMjUwMTMxMTIwMDI1WhcNMjUwMjAxMTIwMDI1WjAzMTEwLwYDVQQD
Eyg0M2E1MDBkM2ZkNjNjYzUwYTJlZDk1Nzg2YWU1MjYxNTlkNmU1OTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGQUI/ENKkCUHbsPkAmbne7bRBrz
t5lQ64gGekxMH88EJmZuFTxwclgzJHBki2HFxoN2X/GbTogv8c5IK5snlU7HP7lG
ixOOivgXLG0GK9bmiMgAHoQm5BRyIYMwPBFXUWL4gvVzCwgzBeum2Moq2Q44tZ9M
v6RNhX1pJjmDAsW3V6JcrBtnUwvTB62g/r3Ln5w1pZqniks9hWTTck8WiMrLuCnn
ZVJOgID8WSbw18eySpF1K7FMpT59ku4uH4O/0389jieDjTvlGRrxmawrXCEJX1dL
bu+NHX3tgYP4+COL3YHD8fXlrCk3LAvkOhACAEGUGtVcfgJMmzWy6CnAvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOlANP9Y8xQou2VeGrlJhWdblkLMB8GA1UdIwQY
MBaAFPyfJOvvEYuRZeUvYcqZO+5DBk7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0o4azYtOFJpNUZsNVM5aHlwazc3a01HVHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lNmNiMmItZGYwOS00MDA3LThhZDct
MTUzYmY3ZTdlYzJhLzEvX0o4azYtOFJpNUZsNVM5aHlwazc3a01HVHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lNmNiMmItZGYwOS00MDA3LThhZDctMTUzYmY3ZTdlYzJh
LzEvX0o4azYtOFJpNUZsNVM5aHlwazc3a01HVHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVA9r/VQt
aUJc1D7fXjBJ3svdW+RpdlHGHxIpLUpRk93CAdp6Z8AAVpFZ8n+urylfDOMMbXj5
vMcGo5c29P0jYFYb9yOKegnvaoqxSboe1p2YG8EtvdGkdEHSD8Hxtt2V2hdqO9eb
6uWTY48kpN9xFG+YwnoQq27EntZ50es7ipyTiBfHHIyRz6CGIiThrb8a2WIkU/4Z
pvByleb7uDoXZxop09lHKWTMIV6/Umg8Fv+j1IFrdBBEf+RDsfB4aCi+JsIsT+8u
oZZ/4RQ0ThGgrO/rbQDeLCM7S5/GZ9VyyU3tX4/VksxlrWidIckf+2wLHFy247ym
kuYgPP8xIcdFAg==
-----END CERTIFICATE-----
Generated at Thu May 1 07:19:13 2025 by rpki-client