Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: 2Rur2uS/JKkuJ5gftNwiU5VRHx1p+TKvXRIF6y5+J5Y=
Subject key identifier: C6:C0:63:1B:E3:6F:D3:47:0D:0D:7D:B1:6E:8D:CB:D0:F6:BF:4F:DE
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 0194BC72A2F084F0288C75330523947CD41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 111F
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=)
2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: USlPQDj1vr5wwjsmYRhYzmpyHD/0QU1b8n9pcrrB01U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a2:f0:84:f0:28:8c:75:33:05:23:94:7c:d4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=c6c0631be36fd3470d0d7db16e8dcbd0f6bf4fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:07:87:df:98:08:34:fb:85:40:9d:73:e1:
17:dd:08:97:ac:bd:b8:ff:69:74:28:06:f0:8b:99:
b9:8a:5c:2d:3c:21:d5:1c:cd:1c:53:a4:60:b6:89:
b7:b1:c3:32:0b:a1:07:28:f0:49:1c:16:aa:e4:ba:
70:9e:b6:2e:f8:ad:38:02:a3:40:6f:5f:6b:a8:79:
be:6f:2a:11:50:11:a3:6c:5e:60:9c:12:f8:d2:31:
cb:74:21:7a:bd:57:03:79:d4:8b:1b:5b:f4:54:e3:
d2:f1:6e:f2:cd:12:95:91:46:f6:73:73:3b:90:71:
ed:dd:c4:1a:ac:81:45:7e:a7:ab:c6:76:79:f0:b9:
70:c4:f6:d6:ca:aa:8a:42:6b:cb:56:18:30:5b:db:
7d:b6:38:64:f7:80:7c:e0:5c:5b:03:fe:b0:59:b5:
9b:bb:39:a5:cf:76:1e:c1:06:c1:78:1c:3e:17:9e:
2f:cd:cc:33:82:77:22:db:69:35:66:56:d3:33:8a:
c4:2c:71:d1:0c:39:70:94:ba:cc:64:71:52:3f:30:
8a:87:0d:c2:b4:90:6d:99:f6:37:0c:12:a9:03:e7:
f8:dd:09:a2:3e:b9:15:12:e2:be:dd:a6:e3:6c:a5:
f7:64:bf:d6:60:29:c7:23:9a:11:3e:be:51:98:a6:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C0:63:1B:E3:6F:D3:47:0D:0D:7D:B1:6E:8D:CB:D0:F6:BF:4F:DE
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:27:bb:0c:4b:87:ec:6c:a0:a1:09:66:ca:61:c9:03:18:09:
58:2d:13:b0:bf:75:ae:8e:0f:6a:aa:03:aa:09:f9:8d:7c:70:
70:a6:b2:de:ab:2e:7b:e2:2d:19:45:ea:74:c2:6e:f8:68:14:
8b:e8:d5:1b:1d:aa:75:49:e6:2a:bf:52:b7:a2:d1:12:09:33:
9a:42:03:b5:47:e4:33:25:a0:c4:cc:4a:1c:67:7d:b8:4b:99:
0e:fc:f5:b7:a8:36:ef:ff:ce:d2:23:e1:05:09:1d:15:2c:19:
76:c0:df:2b:6f:22:29:75:9e:20:f4:11:ec:8a:96:ca:5f:fa:
14:60:1d:3c:b4:45:30:a7:f0:3a:74:40:24:d3:96:53:77:d4:
88:92:64:7b:c5:ab:77:7d:a7:ba:94:a9:37:0f:0b:00:9e:8f:
bc:01:48:39:eb:5a:60:3e:fe:4f:b1:d0:6b:c6:b7:82:31:8c:
61:21:01:df:34:ed:a9:c9:9e:8a:fc:91:d2:b2:7a:2d:dc:2a:
50:25:d9:06:dd:ee:d7:0b:16:79:0a:83:ba:6e:2b:b4:e6:75:
ad:6d:76:95:00:59:66:82:06:64:ee:52:f0:9d:bf:d1:d7:de:
47:1f:b2:58:57:6e:ed:58:18:22:b9:91:3d:e5:26:53:81:00:
46:3a:58:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqLwhPAojHUzBSOUfNQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjQyNDJjMTBlNDM4NTM3ZTE2OWFiMDAyYmY2YmU4MWZh
MmE1ZWQwHhcNMjUwMTMxMTMwMDE2WhcNMjUwMjAxMTMwMDE2WjAzMTEwLwYDVQQD
EyhjNmMwNjMxYmUzNmZkMzQ3MGQwZDdkYjE2ZThkY2JkMGY2YmY0ZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBcHh9+YCDT7hUCdc+EX3QiXrL24
/2l0KAbwi5m5ilwtPCHVHM0cU6Rgtom3scMyC6EHKPBJHBaq5LpwnrYu+K04AqNA
b19rqHm+byoRUBGjbF5gnBL40jHLdCF6vVcDedSLG1v0VOPS8W7yzRKVkUb2c3M7
kHHt3cQarIFFfqerxnZ58LlwxPbWyqqKQmvLVhgwW9t9tjhk94B84FxbA/6wWbWb
uzmlz3YewQbBeBw+F54vzcwzgnci22k1ZlbTM4rELHHRDDlwlLrMZHFSPzCKhw3C
tJBtmfY3DBKpA+f43QmiPrkVEuK+3abjbKX3ZL/WYCnHI5oRPr5RmKY3pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbAYxvjb9NHDQ19sW6Ny9D2v0/eMB8GA1UdIwQY
MBaAFK/0JCwQ5DhTfhaasAK/a+gfoqXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMt
ZWU3YmEwZTlmN2NhLzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMtZWU3YmEwZTlmN2Nh
LzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMie7DEuH
7GygoQlmymHJAxgJWC0TsL91ro4PaqoDqgn5jXxwcKay3qsue+ItGUXqdMJu+GgU
i+jVGx2qdUnmKr9St6LREgkzmkIDtUfkMyWgxMxKHGd9uEuZDvz1t6g27//O0iPh
BQkdFSwZdsDfK28iKXWeIPQR7IqWyl/6FGAdPLRFMKfwOnRAJNOWU3fUiJJke8Wr
d32nupSpNw8LAJ6PvAFIOetaYD7+T7HQa8a3gjGMYSEB3zTtqcmeivyR0rJ6Ldwq
UCXZBt3u1wsWeQqDum4rtOZ1rW12lQBZZoIGZO5S8J2/0dfeRx+yWFdu7VgYIrmR
PeUmU4EARjpYzQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:25 2025 by rpki-client