Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
File: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft (raw, json)
Hash identifier: YCjjRNUAcfThS39mO7SkMjebh4UIkfxHqeyXJ48aums=
Subject key identifier: 41:B2:85:8A:BC:00:F7:BB:D1:79:6A:C4:23:DC:D9:05:56:5E:A7:DE
Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
Certificate issuer: /CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Certificate serial: 0194BC3C3B4DC58DFFE941BF78E5A1F96DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
Manifest number: 025F
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa (hash: cxXlIHKPRbElTrIxapfIyNaAYnC9ppfTzQIGpRQ/AhY=)
2: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl (hash: pZt02wgAj2aBw6Loujcbeuxl2DBvjAb/n25eHOtcKUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3b:4d:c5:8d:ff:e9:41:bf:78:e5:a1:f9:6d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=41b2858abc00f7bbd1796ac423dcd905565ea7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:70:99:88:b0:d2:aa:99:c1:1f:e4:b1:45:59:
fd:a1:93:ff:69:7e:1a:17:f0:4e:2f:93:fc:2c:54:
20:28:9c:52:46:c2:07:2e:7b:49:1b:19:10:84:4d:
bc:43:0e:c2:ad:d2:3f:82:12:88:c0:89:ad:b1:d7:
6f:7d:9d:56:c6:5e:2d:df:2a:15:f2:94:22:e0:c7:
48:fe:e3:ee:ef:f0:b7:a7:19:31:0c:c0:cd:60:fb:
51:c9:71:03:9e:ec:25:af:b1:3a:fe:d5:d0:03:91:
42:88:a1:e9:99:9a:65:c2:f7:2a:8c:4b:26:e2:e6:
4e:21:ad:7b:a1:6f:f4:50:94:84:bb:3f:89:79:0d:
41:fc:73:22:c2:94:25:b4:23:5c:cd:05:57:8e:1d:
dd:4b:d6:7f:d7:19:f4:db:75:8e:8c:12:74:0e:3c:
5e:e9:bc:ca:b5:c1:b2:63:2b:90:b6:fb:73:42:ec:
b1:6b:28:06:22:c3:ec:01:57:aa:fe:81:c2:c7:4e:
83:b8:00:96:e9:12:24:7f:f5:0a:0d:7d:99:2f:01:
d3:7d:50:ad:88:66:2e:93:8d:26:e9:a5:ac:6a:22:
05:aa:5f:54:a4:81:ce:85:8b:cf:e3:10:f3:ae:01:
64:e9:0d:c6:51:74:d8:04:ee:fa:da:0d:ed:6b:bf:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B2:85:8A:BC:00:F7:BB:D1:79:6A:C4:23:DC:D9:05:56:5E:A7:DE
X509v3 Authority Key Identifier:
keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:df:b9:f2:89:c4:af:d7:6a:d1:dd:6e:30:85:f2:d0:10:e6:
7d:22:16:50:9d:07:2d:7b:fb:2a:7c:ca:53:4d:ec:9d:fb:28:
8b:a5:c3:88:23:eb:8b:43:88:2d:93:4d:5b:62:ad:c1:f0:3d:
0e:c4:ea:50:dd:2f:4d:8b:c6:3d:15:7a:d2:83:f4:42:7d:51:
aa:d5:15:18:cb:79:dd:c1:c8:e2:8f:a0:de:61:aa:61:ef:5c:
1c:31:a0:8f:3d:08:11:d5:f1:7f:33:f7:91:d1:e3:3e:00:01:
26:61:ca:b0:fc:58:e8:88:63:57:48:25:3a:02:9d:7f:b9:37:
06:a2:e5:ba:73:31:a9:0f:c5:f7:08:cf:2b:49:c9:4b:a2:d0:
26:c2:d1:85:b6:6d:87:c8:66:c1:3f:7e:41:d8:43:72:ed:01:
b9:fc:c9:c9:c7:51:54:97:e4:41:15:21:b3:a5:94:7e:27:04:
50:bb:de:03:e8:da:94:99:10:02:14:56:69:0d:70:af:01:29:
9d:dd:54:06:b1:08:e0:af:a4:13:fe:ff:0b:fd:87:6e:72:79:
63:7c:80:8f:ad:d4:ae:70:9e:87:4e:43:60:1c:99:e4:2f:93:
c5:25:5a:e6:b0:46:8d:4f:fd:b5:d0:1b:bd:b7:09:8a:ed:41:
c8:4c:51:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDtNxY3/6UG/eOWh+W3IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZWVjN2ViYjVjYzg3M2NjNzE3OTY2MGFjZmNhODA0ZDkx
MWFiNjYwHhcNMjUwMTMxMTIwMDUxWhcNMjUwMjAxMTIwMDUxWjAzMTEwLwYDVQQD
Eyg0MWIyODU4YWJjMDBmN2JiZDE3OTZhYzQyM2RjZDkwNTU2NWVhN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HCZiLDSqpnBH+SxRVn9oZP/aX4a
F/BOL5P8LFQgKJxSRsIHLntJGxkQhE28Qw7CrdI/ghKIwImtsddvfZ1Wxl4t3yoV
8pQi4MdI/uPu7/C3pxkxDMDNYPtRyXEDnuwlr7E6/tXQA5FCiKHpmZplwvcqjEsm
4uZOIa17oW/0UJSEuz+JeQ1B/HMiwpQltCNczQVXjh3dS9Z/1xn023WOjBJ0Djxe
6bzKtcGyYyuQtvtzQuyxaygGIsPsAVeq/oHCx06DuACW6RIkf/UKDX2ZLwHTfVCt
iGYuk40m6aWsaiIFql9UpIHOhYvP4xDzrgFk6Q3GUXTYBO762g3ta7+jGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGyhYq8APe70XlqxCPc2QVWXqfeMB8GA1UdIwQY
MBaAFH3ux+u1zIc8xxeWYKz8qATZEatmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mM2ZmZDMtMzFiOC00NzJjLWFiZmIt
N2EyYTIxNzJlYzRmLzEvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mM2ZmZDMtMzFiOC00NzJjLWFiZmItN2EyYTIxNzJlYzRm
LzEvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACd+58onE
r9dq0d1uMIXy0BDmfSIWUJ0HLXv7KnzKU03snfsoi6XDiCPri0OILZNNW2KtwfA9
DsTqUN0vTYvGPRV60oP0Qn1RqtUVGMt53cHI4o+g3mGqYe9cHDGgjz0IEdXxfzP3
kdHjPgABJmHKsPxY6IhjV0glOgKdf7k3BqLlunMxqQ/F9wjPK0nJS6LQJsLRhbZt
h8hmwT9+QdhDcu0BufzJycdRVJfkQRUhs6WUficEULveA+jalJkQAhRWaQ1wrwEp
nd1UBrEI4K+kE/7/C/2HbnJ5Y3yAj63UrnCeh05DYByZ5C+TxSVa5rBGjU/9tdAb
vbcJiu1ByExRqg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:49 2025 by rpki-client