Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: r7gYIGRzp4yHuEC+SzWs72kYxr2aZ/K6LMzy+Pu93tI=
Subject key identifier: D6:92:D6:6E:E7:05:A3:C6:15:85:4A:00:08:3F:31:C7:52:EB:A2:3F
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 0194BC3BF303E1FEBA8803CF1687F58FB425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 0FFB
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: 6nn-10KbmPgCc6evrpm-TWzQPN8.roa (hash: o4INP15AI01CmXxJKcY1+iiTvm9rSpAtz6YN4QZ0dG0=)
2: ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa (hash: rQ9TfGtesxjebHDlAk08FQJ/mYhxwGmDbJSu6X6Tu58=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: JCFx/BEfoAsXJo1nurj2gm95VgCClve64uKZiO6p7WM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f3:03:e1:fe:ba:88:03:cf:16:87:f5:8f:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=d692d66ee705a3c615854a00083f31c752eba23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d8:de:43:e7:50:84:7c:32:84:ee:9d:b0:9a:
a8:b7:a7:f6:e1:09:17:bc:ef:a7:10:22:1f:7c:33:
76:c4:f8:a9:f8:1a:a8:ba:0d:08:e8:d4:f4:cb:29:
e3:66:49:71:7b:ce:48:1c:92:14:38:56:f3:b6:ff:
e4:a5:48:d9:00:4e:d3:a3:6f:91:1f:29:79:c5:43:
cf:01:90:a2:99:b6:b3:83:53:df:2c:b9:f6:7c:48:
e7:74:0d:a7:36:27:ec:70:d1:12:ad:31:2e:64:7d:
41:6b:1f:88:58:59:16:16:92:de:a5:44:81:d6:eb:
c1:04:2f:e7:d5:2e:30:0c:19:92:fa:f2:69:a4:70:
d3:09:e4:ff:d1:69:9e:0c:13:61:5b:39:62:5b:52:
3d:fe:e7:4e:c5:df:91:d1:23:85:53:eb:0b:ca:9a:
63:33:88:11:75:20:fc:7e:a9:ec:20:f3:d4:76:91:
bd:67:3c:b9:d3:9a:f0:7a:b0:98:db:ae:4c:b4:7d:
7d:3c:c2:33:d1:5a:ec:56:20:c6:61:2a:e4:50:a1:
f5:a1:61:97:43:0e:a0:35:b9:42:be:b9:db:7d:f2:
fb:4d:71:7f:46:c8:60:3b:ff:e4:50:58:a0:2d:2f:
12:ab:29:d0:ec:6c:be:00:87:2e:e9:8b:92:61:48:
00:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:D6:6E:E7:05:A3:C6:15:85:4A:00:08:3F:31:C7:52:EB:A2:3F
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:aa:9a:75:f1:fb:52:6c:68:51:48:94:a1:18:83:e2:de:49:
54:86:47:e6:80:dc:13:a4:ce:c4:4d:bb:db:71:aa:ad:c5:c0:
ce:77:6e:b5:d9:61:ff:b6:83:ea:ec:a9:80:13:7d:db:70:0f:
a1:ac:14:48:d9:38:49:87:55:b3:e1:a2:d8:5a:86:db:14:d4:
fd:ff:99:43:e4:71:b3:aa:6e:f7:53:8a:f0:d0:dc:b7:e1:82:
6f:3f:bb:53:da:0a:e3:0a:3c:0b:15:18:80:b3:ce:c8:71:1c:
df:97:18:94:5b:5d:1d:ea:21:1c:1e:46:a4:6d:1c:aa:91:4c:
49:94:2a:55:75:f6:cc:90:ff:b9:dd:f0:47:18:fd:38:d2:fb:
9c:5b:6f:90:63:58:61:75:51:7f:0d:4b:ee:c5:4b:52:4d:3c:
24:63:e6:fd:36:0d:3c:a8:e1:92:b8:80:16:85:68:54:a1:2e:
9f:16:f7:05:05:7f:23:e4:c9:1e:3d:e1:71:77:a5:e7:d9:f2:
8a:83:56:23:c8:51:7e:55:fc:9f:23:ab:a6:08:06:a3:a3:af:
0a:c4:62:7e:0f:3b:15:aa:c6:8a:fa:0c:7f:15:2a:80:ef:b1:
db:03:5e:16:4e:ce:44:1f:a8:22:20:5a:02:c4:2f:e6:14:20:
d1:85:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:40:37 2025 by rpki-client