Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: t0k5ku0XLsBWyrhbR6sdeWh4EcgaU7TFjAdN3PCzHRw=
Subject key identifier: DD:B0:5B:DE:F2:69:E9:0F:F4:C3:05:7E:E1:16:5A:63:FF:19:48:63
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 0194BD4E500F8A784CA168244FA1DC221AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 12F0
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: U-9gs6-HPp-63tFVTgK5YJ7Vtx0.roa (hash: is1qZnviSeshx9o2Nm8hFCS4enc7GdrzL/0sgsJwTiY=)
2: WeH1WlhYDBMKUix1j52cA9uy8vg.roa (hash: LDMrba3gzwSdDXVT+UZ/jMO8QMSCHSdMpFhiaPS/CDk=)
3: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: UzByeRk0Y93/x7llm+tcESWWBhBNIIg+mkUoHPN8eJk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:50:0f:8a:78:4c:a1:68:24:4f:a1:dc:22:1a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=ddb05bdef269e90ff4c3057ee1165a63ff194863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:42:70:64:e5:ba:29:23:f6:49:fd:4f:ba:b8:
76:20:e6:4b:1c:b7:f5:7d:ad:26:b6:c6:bc:44:80:
5f:85:56:98:6b:15:60:34:a1:df:30:47:b2:aa:1d:
07:d0:c2:a0:84:24:03:31:db:e3:9f:6c:22:95:0c:
8c:36:c7:61:f9:50:b2:89:b3:57:d0:6b:71:18:bc:
99:e9:d9:3e:1a:89:e0:86:f0:d9:c6:ce:e5:45:d5:
85:5a:f2:02:c9:88:fa:a8:4c:4e:b7:fe:df:e4:4b:
ca:e3:8b:6d:82:7e:dc:c1:08:84:8d:3e:2e:7b:eb:
87:33:73:58:ad:d7:c3:36:3f:0d:ea:5a:83:c0:68:
12:61:8a:d2:e7:66:7a:dd:45:f2:9f:d4:b7:92:ca:
82:38:d7:3b:4e:94:03:af:b8:ac:56:52:2a:b2:8c:
e9:29:2c:63:a6:f2:86:e7:e4:cc:2b:b4:6c:b1:4e:
d2:21:02:c0:53:46:73:b4:be:96:3d:ee:67:dc:be:
8e:1a:c1:3f:8f:dc:f5:c4:24:89:c6:fe:f6:dd:ad:
54:3f:55:90:d7:c4:35:b1:fc:93:c8:9b:6e:39:64:
dd:87:ba:ec:85:d8:33:f7:bd:99:4e:de:73:c8:42:
0d:f4:28:79:83:e9:69:3b:68:90:aa:39:03:5a:24:
c5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B0:5B:DE:F2:69:E9:0F:F4:C3:05:7E:E1:16:5A:63:FF:19:48:63
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2e:79:d4:db:44:77:5e:18:aa:54:6e:cf:3b:51:c6:ea:c8:
db:d5:54:b1:56:a9:d0:55:6e:b7:11:73:7f:cb:0e:ed:21:00:
82:ad:48:16:be:e0:0a:53:e2:4f:e8:cc:db:3b:04:18:48:45:
8a:c0:d7:a7:ca:3e:5a:09:c9:33:87:9d:2f:99:e8:45:11:be:
45:f3:52:aa:b7:ed:51:3f:40:a8:41:cb:26:84:b5:2e:f9:dc:
8e:fd:c5:15:c3:49:93:14:62:74:e4:b7:75:f1:81:a1:2f:fb:
ed:87:d9:a6:66:ba:75:60:05:e0:34:7f:a0:56:0b:e2:e1:07:
ee:a4:13:a9:63:39:7f:0b:c0:6b:2d:75:35:c4:b2:7a:34:2a:
30:d0:c3:6c:8a:7c:40:1a:e1:4c:ed:42:b5:2e:33:23:90:e9:
c4:4d:e7:8d:98:bf:cf:fb:c6:37:54:cc:cf:15:68:05:b6:55:
d9:94:ff:62:1a:fd:a3:2a:f8:47:fa:75:dc:fe:28:ad:2e:a9:
14:39:aa:77:a5:bf:6f:6c:70:76:70:36:f7:30:8e:c0:56:ee:
56:a8:be:df:d8:80:a8:cd:4a:e2:8c:19:da:d4:4d:5f:ea:a5:
92:09:0b:da:9b:e7:98:eb:24:2d:cd:fd:98:cf:16:57:e0:f6:
ec:1e:65:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:12:27 2025 by rpki-client