Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: khCoEjZEqM4k0QnsuvlhmjelbJLO0re8y2yPNHLJgOg=
Subject key identifier: C3:BC:75:6D:17:6B:55:58:7E:EB:26:88:56:D7:CF:C2:36:12:5C:3F
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 0194BCE096071C7E95946350929A42E762D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 10BE
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=)
2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=)
3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: OhpODmO6QLwLPrmff3hadRKTDJyRLt3fPvCOMyT8WdM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:96:07:1c:7e:95:94:63:50:92:9a:42:e7:62:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=c3bc756d176b55587eeb268856d7cfc236125c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:2a:d7:64:48:57:e2:17:a3:b2:e7:5d:79:
d9:e8:ce:3f:e1:dc:f3:d0:ba:35:5f:bd:10:3e:23:
76:88:eb:3b:fb:f9:3d:31:c3:fc:e4:a7:e3:da:f1:
7f:24:65:1f:72:a8:1d:57:b5:a6:1b:6c:21:08:1c:
12:ca:5d:de:ea:7d:c5:67:42:b2:2e:50:45:59:8b:
20:2f:ea:d0:ef:c1:5d:09:98:11:02:53:81:e6:de:
d8:55:63:2c:cc:14:26:f2:8c:f9:19:88:9b:da:1f:
ba:63:30:29:20:a1:3c:cb:1c:14:98:b0:50:27:5c:
fe:1b:57:8d:49:e8:65:c2:ee:6f:86:55:68:6d:f1:
bd:96:41:0a:6b:21:98:aa:89:5e:21:62:4f:db:7d:
50:3f:72:53:8d:cc:69:dc:ea:0d:ff:65:fa:b6:f1:
38:e5:80:f8:38:93:4f:71:e5:51:69:7e:eb:04:f0:
76:21:a9:e3:17:58:c6:b5:8c:bd:da:b0:db:60:fc:
ee:24:f2:c6:41:39:f5:2f:7e:cf:3f:ca:b9:91:5c:
aa:85:fd:8e:0a:e9:c8:ed:8e:0c:7c:e8:11:e8:23:
9d:d3:3e:6c:ba:2e:74:c4:39:1d:7e:61:75:20:48:
d8:08:9c:66:eb:94:aa:f8:1a:75:a0:5f:df:be:f1:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BC:75:6D:17:6B:55:58:7E:EB:26:88:56:D7:CF:C2:36:12:5C:3F
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:06:b8:ab:5a:7b:06:b9:19:a9:6b:31:9c:28:85:bb:2c:f6:
99:d1:c0:74:18:c3:e4:20:20:d2:38:16:7f:bc:05:d3:fa:cb:
30:da:33:6d:5e:83:b6:78:24:86:26:63:72:4c:f8:7a:51:a2:
dc:a3:fa:b3:1c:80:f3:ca:5b:d5:96:31:a3:a7:bd:a6:dc:eb:
3e:7a:f2:aa:bb:78:d8:53:08:f9:00:cd:ee:58:1c:01:ee:a7:
41:95:0b:97:35:6e:2d:e0:34:0f:cc:f7:4d:34:7a:c9:47:16:
8e:29:e7:ba:7a:27:10:62:9e:8c:ad:0c:f6:71:ef:eb:5f:13:
9b:8c:44:8b:62:31:95:07:5f:7f:2e:a2:8e:da:4f:28:6f:b8:
7a:f1:b1:67:81:51:82:09:8d:d9:86:b7:cd:67:ca:74:87:7b:
9f:2b:c7:ee:c7:38:24:3f:d8:6e:c8:69:88:8a:18:cc:c4:40:
02:c0:0e:97:01:9f:c5:f8:f9:aa:6d:10:64:db:bb:ba:31:60:
19:3a:cf:5a:98:d5:5a:01:c1:89:6a:5f:8d:2d:02:b6:a6:c0:
65:2f:48:22:57:51:fa:07:6a:0e:20:07:08:1c:00:98:60:59:
ac:6a:1d:d9:d6:67:ba:b6:04:1a:72:0a:7d:dc:db:6d:3d:53:
60:21:4a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JYHHH6VlGNQkppC52LZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MTI3MmU0ZTgxODZiOWNmM2QxZWI0MjY2NWM1M2NlNzE0
ZjRkNGIwHhcNMjUwMTMxMTUwMDIyWhcNMjUwMjAxMTUwMDIyWjAzMTEwLwYDVQQD
EyhjM2JjNzU2ZDE3NmI1NTU4N2VlYjI2ODg1NmQ3Y2ZjMjM2MTI1YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt84q12RIV+IXo7LnXXnZ6M4/4dzz
0Lo1X70QPiN2iOs7+/k9McP85Kfj2vF/JGUfcqgdV7WmG2whCBwSyl3e6n3FZ0Ky
LlBFWYsgL+rQ78FdCZgRAlOB5t7YVWMszBQm8oz5GYib2h+6YzApIKE8yxwUmLBQ
J1z+G1eNSehlwu5vhlVobfG9lkEKayGYqoleIWJP231QP3JTjcxp3OoN/2X6tvE4
5YD4OJNPceVRaX7rBPB2IanjF1jGtYy92rDbYPzuJPLGQTn1L37PP8q5kVyqhf2O
CunI7Y4MfOgR6COd0z5sui50xDkdfmF1IEjYCJxm65Sq+Bp1oF/fvvHShwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMO8dW0Xa1VYfusmiFbXz8I2Elw/MB8GA1UdIwQY
MBaAFIUScuToGGuc89HrQmZcU85xT01LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEt
M2Y0MmM3MTc4MGJjLzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEtM2Y0MmM3MTc4MGJj
LzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQa4q1p7
BrkZqWsxnCiFuyz2mdHAdBjD5CAg0jgWf7wF0/rLMNozbV6DtngkhiZjckz4elGi
3KP6sxyA88pb1ZYxo6e9ptzrPnryqrt42FMI+QDN7lgcAe6nQZULlzVuLeA0D8z3
TTR6yUcWjinnunonEGKejK0M9nHv618Tm4xEi2IxlQdffy6ijtpPKG+4evGxZ4FR
ggmN2Ya3zWfKdId7nyvH7sc4JD/YbshpiIoYzMRAAsAOlwGfxfj5qm0QZNu7ujFg
GTrPWpjVWgHBiWpfjS0CtqbAZS9IIldR+gdqDiAHCBwAmGBZrGod2dZnurYEGnIK
fdzbbT1TYCFKmA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:28 2025 by rpki-client