Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: V87TtLfZ+ldzMTmQ1DMY9R23jwcdFaU9vVgX2mUll1A=
Subject key identifier: 05:54:09:7E:4D:8D:DB:E1:4A:AA:F0:9E:FB:E7:7B:BD:84:13:EF:C1
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 0194BD852820CF78308B39EA40FF6ADFA271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 0F82
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: K3q894z2tmqtTm/5BrF/7FvQBtjSfQ/Q3ibfMSd+VRA=)
2: ZowTG3oT7jR7fyuFs8EJsOqQnDk.roa (hash: BeTzHEyDuFcWSVUJFUf815UpcdMSl9Ku2ZGRMNQ+8lo=)
3: oN_HXrNwEKHWNOBeBXWLmMaedS8.roa (hash: EF1LIVK1qYYVxrGAD02d8UOfG8Hm02T8nbZi/iaVNaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:28:20:cf:78:30:8b:39:ea:40:ff:6a:df:a2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=0554097e4d8ddbe14aaaf09efbe77bbd8413efc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:cb:23:35:b0:df:2a:07:8c:59:76:03:8f:
9c:2b:8e:09:d5:14:af:a4:e0:45:4c:a3:a9:0c:55:
5d:e9:22:2d:2c:b2:4a:06:0e:64:63:48:8b:6d:8b:
be:f6:8d:f0:4b:be:75:a2:31:04:6f:61:0e:1b:ff:
a5:26:f7:7d:a9:e1:a5:41:4e:5e:cf:7c:4a:90:2f:
dc:b1:9c:9f:90:a8:82:fb:69:92:16:5d:f7:02:e9:
d8:de:1c:51:e0:9d:03:21:7b:95:56:29:a1:fc:38:
cc:39:4d:6c:3c:82:d3:e0:46:23:ba:15:ef:c1:a1:
62:72:73:15:9e:61:3c:5c:44:dc:f6:df:cd:49:08:
7e:42:be:f1:2c:a5:18:2a:6d:0f:0c:84:16:79:68:
b5:c7:dc:73:4f:bb:50:93:c1:11:f7:78:0a:43:0f:
c0:14:1d:f4:7f:17:9e:0f:d4:dc:29:b7:b4:09:47:
9a:5c:58:4b:23:4f:51:89:5e:22:34:7d:95:5e:1e:
dd:71:35:9c:1c:5e:f6:5d:2f:a8:29:7c:ee:2f:a4:
9a:59:e5:93:39:9b:a5:0b:26:be:af:21:01:4d:f8:
44:7d:a9:84:3b:e7:10:28:2a:f2:c9:5f:12:93:3c:
02:66:f9:c7:e0:d6:b5:3d:2a:d4:03:37:4b:cf:b3:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:54:09:7E:4D:8D:DB:E1:4A:AA:F0:9E:FB:E7:7B:BD:84:13:EF:C1
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5a:42:95:b5:08:5a:bd:55:99:66:98:e8:e5:d2:c2:f6:01:
41:41:61:6e:ef:67:70:77:ba:e9:b6:b9:3b:2d:1a:ee:6e:f7:
07:9e:a1:b4:d1:d3:01:63:93:e8:82:35:f0:0a:f7:db:69:e9:
94:2b:a7:cf:86:b4:8c:7a:9c:2c:da:22:67:4a:a5:c8:ef:4c:
f5:0b:64:2f:9c:71:f7:a2:0e:3a:0f:a1:44:80:74:41:35:0b:
53:4b:3c:8c:67:4a:82:f9:6c:23:f8:24:3d:fe:f9:a2:2d:71:
9e:fd:05:ec:87:37:17:80:1b:21:f8:08:32:e3:f4:87:a0:41:
c2:c4:3b:94:fa:1f:1b:ad:cb:d3:74:27:c2:49:c6:5d:ab:5e:
97:69:6b:ed:7b:f7:bf:62:53:57:dc:22:86:4c:41:fa:a4:61:
23:bb:69:5f:37:26:de:03:20:5f:7e:1e:8e:4e:5f:99:ce:a4:
43:d6:1a:8b:44:ce:de:a3:a9:95:9b:05:86:37:b3:e4:63:d6:
c5:f2:f2:6b:61:d2:86:fa:b3:e0:b8:38:e1:f1:a9:f3:d4:54:
db:85:b5:5d:f4:6b:b6:14:dd:a5:3e:ea:1b:94:ed:f1:e0:46:
99:14:b4:92:ff:fa:28:6d:3a:70:a9:d4:c8:70:fc:82:9b:1d:
6d:5e:c0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:57 2025 by rpki-client