Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File: t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier: /VKA05uOFkewCLubjNTTw9PRxYUiWWBUO17DkieA5pE=
Subject key identifier: 1A:00:2C:31:E9:64:13:A6:62:84:35:68:AD:9A:CB:5B:83:0F:BC:1C
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 0194BC3C482F7BF747E281C2C978E1E996A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number: 088E
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: 7HgZFirs9to5YNlgGjCrLE4fFdw.roa (hash: gvtNC6tdiAxQLr0n4eBnmWFLLNsQSfj98rKVj8SvSuA=)
2: GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa (hash: rZYvabv/j2AaljGdwS148ssayLuXys6DbuYJ6bJxVGw=)
3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: 5AWd7T6a8yRo4XYGoNeADX2LXBzY28rASVw0N8Gqkn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:48:2f:7b:f7:47:e2:81:c2:c9:78:e1:e9:96:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=1a002c31e96413a662843568ad9acb5b830fbc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:6d:11:ec:bb:2f:92:43:c9:88:2b:13:cf:
e1:98:67:5b:19:08:ca:8a:06:86:c6:fc:26:fb:a0:
21:bb:6f:a4:3e:93:70:f5:87:e5:8a:72:28:8c:36:
72:48:72:fb:38:44:06:d6:1c:d5:dd:99:56:99:60:
54:03:94:27:14:38:fe:06:1f:76:b9:bc:86:52:d0:
24:d1:7b:c5:a0:56:13:6a:70:d3:70:fd:c9:26:28:
c2:f8:99:d0:eb:1d:b1:66:7f:58:57:f5:f3:35:be:
72:29:d5:0a:d6:a7:a6:d2:fe:fb:26:b0:be:84:84:
1f:8c:ae:7f:dc:2d:b4:dd:ce:02:95:12:42:bd:02:
7f:ce:58:8e:a2:37:8b:34:3b:83:53:38:a9:90:55:
7a:8b:c7:48:f8:0a:68:8e:70:10:23:26:fb:d9:b5:
9b:1b:1c:a9:62:32:08:a3:dd:f1:1a:24:9b:7e:a0:
55:dd:41:56:8f:74:b6:44:a1:a5:e8:38:76:2b:ab:
73:6b:d9:0a:9c:04:6d:ec:f4:7d:f6:6f:c3:7a:b8:
3c:80:df:2d:92:a7:a2:74:c5:ea:16:5c:71:4f:44:
53:3c:c3:91:a4:2f:1d:a7:ec:43:6f:10:71:8b:85:
51:68:e8:5c:5f:2b:c9:d5:99:1f:6f:c4:5c:cf:3f:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:00:2C:31:E9:64:13:A6:62:84:35:68:AD:9A:CB:5B:83:0F:BC:1C
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:12:8d:3d:37:65:a2:a6:eb:82:a3:9a:1c:66:be:8c:3f:ee:
6e:25:0f:49:18:17:65:a5:93:e0:a0:93:bf:45:11:0d:5a:a7:
6e:fd:83:16:eb:c7:f2:95:04:2f:1e:e0:19:cb:ed:78:7d:bb:
53:1c:12:3c:6a:2b:78:f5:d7:20:b5:76:f1:aa:78:b5:39:bd:
40:c2:77:16:52:23:ee:d2:25:54:9a:be:f2:d1:fe:0e:ac:e0:
9f:83:51:1d:d0:73:71:1b:b9:00:07:45:be:da:e5:07:1e:39:
25:cd:27:64:64:04:44:8b:eb:03:47:4e:9c:4b:f7:6c:b0:f6:
48:b2:62:d7:80:9f:f1:b7:9b:ea:8e:9c:94:48:ac:66:cd:d9:
b8:ef:e1:5c:13:a8:8c:89:a3:65:a7:b8:d0:59:82:94:7f:e7:
2b:36:0c:0b:c8:01:50:8c:9a:63:03:6c:b9:f3:a5:f8:ad:5a:
95:f1:68:ba:d5:2e:07:7e:3f:eb:94:76:db:34:7e:53:57:ab:
d4:eb:73:4f:3d:66:00:12:70:72:56:aa:c8:08:62:ea:50:28:
95:71:f4:75:00:6d:88:43:2f:28:3f:fe:83:6c:5a:58:9e:73:
0a:6e:5f:05:c3:45:7d:0c:5d:d2:4c:d0:f0:34:2d:dd:60:9e:
c3:4c:f8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:34 2025 by rpki-client