Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier: VX8xSGlmN/h999KNWNckQ7I7iroVH1jzeLPEW15A/WE=
Subject key identifier: CE:42:37:A1:7A:95:A9:DF:BA:92:57:CC:10:51:20:54:81:58:51:46
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial: 0194BD8565DFD600AAB7B39568DFC6E8F924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number: 04EB
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: CmDicAfDfoz93maibb20vLFeJSE.roa (hash: T8rIp3ZOIEv2U6cB/WhgBqnN/oGzchfMmPBfz5rrS5E=)
2: D2t0G5l-no81p6rarPw2-EpQMYw.roa (hash: Ao7GMS7CFmzAFJghE2/XSbtoAU6qWDBHEwHUCZKTHwY=)
3: DGY9DRUJrYLpsverneGppUeA19c.roa (hash: BCikbUDAbYpSarrQzlAQJBis5jeq62TU6gwB+aPdaEk=)
4: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: CJb66RwDhToGmIt0so2d1YM4M6qFXW2u3EvRTZJ6n8s=)
5: wVkI_Szt3pr4XGdNEoWckhxFxCk.roa (hash: g7wpqUCSc32Jx8X0zDboKVFnJQIoCmmZncv7BRTwxHA=)
6: yZi5kswzr7A4DzlGCWa5weE8ZXs.roa (hash: Anf6GmhoZMZWxPMhTL0WiBitC7uHDJE3iNPWcCU2CB0=)
7: yaeBzALTksFutDMDSo14HWi1pcc.roa (hash: TCSIw7g3HWASSSDxcMQYHErKzGbepcCJReN+FTRV2MI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:65:df:d6:00:aa:b7:b3:95:68:df:c6:e8:f9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=ce4237a17a95a9dfba9257cc1051205481585146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:54:2c:8d:fc:c8:98:3d:ca:17:2c:35:7a:54:
84:e7:2a:9a:35:9c:e2:d9:1e:65:bd:80:16:54:b3:
f7:36:a7:3c:fa:4b:6a:93:80:ca:0e:3a:f6:39:eb:
e1:7a:64:0e:43:e9:b2:27:25:4f:16:66:6e:8d:8e:
64:a9:2d:c4:a5:db:1d:2a:44:e4:0b:50:dd:f9:00:
46:9e:aa:47:f5:aa:0e:34:c9:0f:05:af:6b:7c:ff:
56:7f:36:4a:8d:d4:0a:62:e4:eb:31:23:75:87:f0:
a3:42:de:c1:8e:85:59:ec:41:f1:9c:79:fa:18:40:
69:2d:87:07:0e:a6:eb:31:ed:4c:f9:7c:bc:b9:ab:
00:7f:01:22:77:2f:4c:a7:77:48:72:50:7d:7f:32:
89:85:83:41:42:6c:99:03:e6:a5:90:83:35:53:29:
a7:3c:c9:f2:ff:c0:71:0d:80:62:46:f1:c5:10:b0:
e5:f3:78:29:15:c7:fc:d5:a9:5e:f1:f2:f5:41:7f:
bd:e7:ee:be:2b:f0:e1:d2:22:85:f7:ea:aa:fe:41:
8a:79:0a:df:58:13:d8:94:cd:da:fb:1c:27:e3:f7:
d4:63:4f:9e:7b:72:f1:cf:92:f2:ec:b1:15:6d:fd:
f8:0e:34:ec:46:73:db:b3:9b:25:6d:27:22:08:0c:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:42:37:A1:7A:95:A9:DF:BA:92:57:CC:10:51:20:54:81:58:51:46
X509v3 Authority Key Identifier:
keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:16:b9:92:f1:85:e3:12:41:a5:9d:aa:58:d7:ee:aa:b7:19:
81:c8:6f:46:e9:34:a7:c6:31:c7:a9:d9:b8:30:28:88:8b:08:
f3:7c:82:f6:e1:d6:29:46:c4:3e:28:64:4c:3a:e4:b0:8e:09:
0b:7f:65:1c:bd:80:ec:98:8d:01:b0:3e:7e:e5:17:a3:c2:eb:
bc:ff:95:2c:9d:6d:af:48:57:59:ff:09:c8:11:f7:d9:0a:42:
e3:79:0f:1b:98:56:00:b0:83:71:e4:72:fa:00:08:f1:e7:a9:
f8:21:c0:fc:60:54:a1:4c:37:62:5d:e0:0f:37:e6:e7:97:0e:
ce:a0:4c:27:16:29:0a:0d:c7:75:9e:87:57:f9:5a:31:ae:85:
cc:a2:c9:bb:bd:af:47:08:ff:6a:ff:25:0d:9c:5a:b4:c7:ca:
ce:68:98:ec:61:7d:a6:48:d5:f6:ac:7b:1c:78:b6:d0:04:a9:
ae:97:b6:e5:98:e4:25:6a:78:4f:d4:b5:cf:a4:53:2d:5f:d5:
1e:3d:84:c8:47:c8:7d:de:a2:eb:65:44:1f:30:e4:c3:c1:a3:
d4:06:67:c5:ae:55:a9:57:b1:4b:11:d5:1e:0e:5c:ff:bb:33:
d8:78:56:fb:2d:fe:c0:b4:f0:9b:c5:d0:8b:da:19:76:96:db:
35:68:23:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:56:52 2025 by rpki-client