Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: kyZqVe5VR05RCNk/v+ORzBIV9YNR0RbGtS/MFCRqsQw=
Subject key identifier: CD:18:AB:61:81:E7:3A:49:FC:6F:26:84:EC:C9:E7:A7:C2:C0:6E:64
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 0194BCE072FB42D8A9FF43047C8B331BEF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 10E1
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: XuX7uT8cb5cVhdOXna_jZRuc6JE.roa (hash: 6nSukjm2iQoWm9SssGRSJpva0KahTxgtp11M/o63UVs=)
2: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: LKIQ1ImskR+BuGHe+z8bw3qLeoKRHY5mrwOEFsn8ywc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:72:fb:42:d8:a9:ff:43:04:7c:8b:33:1b:ef:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=cd18ab6181e73a49fc6f2684ecc9e7a7c2c06e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:07:df:7f:be:75:3f:60:48:1d:23:e4:7e:
f8:98:1a:ea:97:72:78:90:e4:f5:57:a5:db:a0:a0:
13:ef:9b:f0:fc:1b:b5:41:c4:cf:43:d1:8f:b6:82:
15:07:7e:62:63:74:13:cd:c8:ba:44:58:5c:af:15:
9f:d7:1f:ac:ec:7f:78:35:46:83:3b:4a:26:63:5a:
31:b8:84:94:10:6d:45:cc:f2:eb:1b:bf:46:53:72:
d4:f1:1c:ee:76:05:65:44:99:4c:f3:ba:cf:a0:52:
43:ba:cc:4f:87:93:3b:e0:a9:c8:0d:07:60:43:fb:
cd:86:87:dc:73:b2:4a:a3:8f:09:83:99:e0:81:0a:
39:50:fc:6f:db:15:9d:a2:72:f7:15:01:d2:7f:a8:
ed:0c:dc:67:75:a1:c9:e4:7f:2e:15:31:ea:e2:f7:
20:94:0f:54:2a:4e:88:d9:eb:0a:f2:63:f9:24:8b:
15:be:55:d8:bb:4c:6e:1a:6b:37:21:8d:aa:ea:44:
ce:2a:e5:d3:3e:76:f5:4a:e1:4b:9d:7b:d5:8f:bd:
41:4b:2d:45:4e:be:f5:7d:0d:b3:bf:64:0a:71:4a:
b1:07:93:27:9c:07:1c:05:7b:46:76:c1:fc:c9:e5:
42:f6:85:c5:ad:aa:2f:1b:5d:50:63:bc:4f:13:d6:
5f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:18:AB:61:81:E7:3A:49:FC:6F:26:84:EC:C9:E7:A7:C2:C0:6E:64
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7b:d4:42:53:15:56:22:25:ac:21:0d:e9:bd:ac:fa:c0:3b:
f6:5a:19:ce:b7:c2:ca:43:5e:ae:d6:12:3a:68:20:e1:59:9d:
24:6e:fc:20:89:ba:3c:bb:3b:5c:f1:0d:39:e5:54:af:80:36:
37:d4:75:0c:c6:7e:d1:a3:4d:7c:c6:01:a5:4d:46:1a:05:01:
32:f1:51:4e:ac:f3:10:cc:ad:7e:f5:3a:40:07:64:cc:ed:3a:
b8:1a:d0:06:4e:69:a0:1d:6a:64:0f:aa:c6:3e:9e:5f:d5:0b:
11:bb:f0:dc:9d:51:62:74:ed:21:c4:46:48:0a:3f:53:b8:53:
0f:c2:2b:90:07:a7:1e:8d:84:8c:18:7f:55:5e:4b:fb:ab:3c:
9e:89:72:13:02:c3:91:5e:86:4c:04:15:46:5c:6f:5c:09:f1:
89:0d:46:e0:bb:df:51:fa:00:15:f6:2d:a7:dc:fb:6a:2e:14:
30:74:07:dd:55:8f:9f:a5:71:0f:5b:46:59:b1:9b:c2:5c:6e:
ea:6b:01:80:cb:db:3c:0d:1c:e5:ba:88:eb:78:51:cd:79:61:
a3:4c:ce:18:09:8b:1e:60:c3:5b:16:85:1f:7f:26:56:91:36:
02:4e:2e:c7:8e:a2:50:7d:f5:d6:8c:52:92:ed:77:c7:41:d4:
6f:20:94:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:35:07 2025 by rpki-client