
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
File: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json)
Hash identifier: 4iSJXJYlkTlZMIy3Cx3tuThJrpodZUJHiu7LU2Q4dQA=
Subject key identifier: E5:32:BF:40:B1:07:A5:4E:C0:9F:31:FE:3E:68:BD:70:2A:FC:9D:7A
Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
Certificate issuer: /CN=f7b069d33df1225a8b3643a01364f279df40d877
Certificate serial: 0194BCAA04EE69F0DDD71C4B4894D5CDDCFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
Manifest number: 0120
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: +Db4KmSdDNi3GZqjntjTMCZUnvQdfn3K8QAC8DByAJk=)
2: G8WBqm_n-G2Dq7rJrsvaHEWmDxE.roa (hash: IA50muj3Iqkw7YnSvxI1jyledliIC9BsrNcG2Szt4iM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:04:ee:69:f0:dd:d7:1c:4b:48:94:d5:cd:dc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=e532bf40b107a54ec09f31fe3e68bd702afc9d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:70:20:0d:0f:cb:7f:c8:c8:d2:e6:68:57:e4:
a1:e4:23:5a:74:ef:3a:78:25:a8:cb:79:00:0c:72:
eb:1b:ae:f1:05:f0:5e:f1:25:a5:cb:4a:85:ca:98:
02:4f:f7:f3:52:99:35:ff:99:1a:23:c4:4b:79:49:
8b:d9:30:73:94:e0:7e:7c:e8:ce:3c:c2:2c:94:3b:
62:b2:29:54:6c:41:3f:d6:b3:18:d4:79:16:53:22:
88:7e:92:29:5c:12:7a:a2:c6:32:8a:72:53:17:43:
46:b8:00:29:c2:dd:9b:06:4a:94:78:7c:1e:cb:61:
6b:35:58:a1:46:79:89:1b:40:62:96:e1:8b:5a:b3:
1d:52:4e:28:ca:b6:b7:ef:29:fe:5c:bd:29:05:42:
9a:41:0c:80:dc:50:32:bf:60:de:2d:c2:b1:b0:79:
03:06:58:1c:76:6f:23:26:8f:8d:95:12:a4:f5:43:
03:3f:36:8f:17:9a:7b:27:24:ac:07:44:03:d4:41:
a9:44:79:ec:ab:0a:b8:85:e5:d2:21:86:c2:c3:df:
e3:08:74:0c:e9:87:b4:79:1a:82:d2:f2:ac:34:bc:
dd:2d:7c:49:b1:f8:79:32:c8:64:0e:8b:64:ad:ec:
cc:02:fc:99:bf:50:3c:44:af:3d:3d:a5:a0:41:95:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:32:BF:40:B1:07:A5:4E:C0:9F:31:FE:3E:68:BD:70:2A:FC:9D:7A
X509v3 Authority Key Identifier:
keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d3:6b:65:a9:34:c0:3e:d7:34:1e:2d:09:d4:4b:d7:cf:3a:
7e:f3:15:7e:40:9e:90:fa:96:80:5b:8e:ef:11:73:46:68:f3:
0b:80:a0:73:0e:4d:a6:ad:35:44:ae:09:14:5c:c0:04:7c:87:
3f:2c:95:68:30:10:29:c0:0b:4b:a8:c1:58:fb:15:8e:9f:7d:
03:70:06:8a:4f:5b:b7:6e:2a:cd:04:3b:52:10:97:ba:bc:1d:
66:92:c8:c5:d9:5d:1a:55:c0:5a:45:29:06:cf:11:89:b2:fd:
bd:0b:86:e3:93:b6:14:b4:18:c6:57:56:fe:6d:1b:4b:00:66:
fd:c0:4e:eb:58:f6:d4:5b:3b:37:30:ea:96:e3:c3:b2:6c:b9:
d6:bb:60:69:8c:9e:da:a6:89:fe:df:10:db:20:1b:18:e3:bf:
3a:05:97:1b:4d:25:b2:74:66:5d:2a:cd:d0:52:da:fd:be:c7:
70:f4:ee:4c:22:a7:ed:5b:8a:21:d0:05:f8:27:c6:61:73:d2:
93:9f:0c:92:b3:f4:85:48:51:9f:b7:41:cf:b5:8c:a2:08:9d:
3d:4c:fb:e3:23:bb:bf:19:71:a2:d8:15:ac:6a:06:5e:f3:7c:
36:6f:25:37:ab:30:80:74:67:1f:f7:ff:1f:a6:38:79:43:e6:
dd:db:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:57:13 2025 by rpki-client