Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: 09wurcoedMLxmmqrI3uoDNDr+2e8A93bS4i9ABbewvg=
Subject key identifier: 6A:60:8E:08:2F:85:5F:CB:DE:B6:66:4D:C5:48:F3:AB:15:7E:CB:44
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 0195E12232545C1FBE61B51AFD6D55446223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 0B5B
Signing time: Sat 29 Mar 2025 09:01:09 +0000
Manifest this update: Sat 29 Mar 2025 09:01:09 +0000
Manifest next update: Sun 30 Mar 2025 09:01:09 +0000
Files and hashes: 1: 1-YKY-kDb-ok-O2t52erxOSFI9tY.roa (hash: Puf+xKue+984oQxVfH82nttD3pZrp9rN15gRLEzYPtg=)
2: 9DNpUDfjfX1cw67GoTejssp0I60.roa (hash: waZpM47Y+Uz4d9MPb5IIUjKVJuGJ/1amyn5dhXRlaKQ=)
3: Aesp-0bkacoacCkCpfhQPmoA2Jo.roa (hash: auTmqPfhdn5WgGssEA4un4kBW/LnIC2gzs/3RcvN434=)
4: BuDcPMwCapskKDGJlWsZctPOBc4.roa (hash: 3bBve525vpAtWU3g8/6VOaPU/EQ0F7VvrXGpa6fOHFk=)
5: bO_WvrYP5ttqrPDJq5s463Nszpo.roa (hash: EspaZPCLRAen7G7qKwAXYq7KwKVTki6xdz4+i5S1a6Q=)
6: nVCJmhFMb83gvB2R2U-hSqvqOrY.roa (hash: /YERfaDChwnXHF/qpIBHQyOtHUuBLeX/WEtxA7mKmAY=)
7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: AkfLaA+MClXyTdUzTC61VllBRKaL0lYPwR+2tgJeOh8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:32:54:5c:1f:be:61:b5:1a:fd:6d:55:44:62:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Mar 29 09:01:09 2025 GMT
Not After : Mar 30 09:01:09 2025 GMT
Subject: CN=6a608e082f855fcbdeb6664dc548f3ab157ecb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:eb:31:e6:e3:e5:36:b7:b8:0b:33:de:5a:
42:59:f4:9f:11:c1:25:66:37:4b:fd:7d:3f:6a:97:
44:7b:ca:df:dd:d9:78:c7:bf:f8:14:3e:72:fe:e8:
17:b8:94:54:da:42:6a:87:8f:66:a1:1e:90:59:f0:
d8:c3:01:8b:bc:76:40:1b:1a:c5:16:ae:ff:7b:42:
d8:66:48:47:8b:97:0d:42:d3:4a:f2:36:3b:d6:db:
78:4a:40:09:c4:cc:e6:a0:33:da:8e:d9:04:0f:31:
a7:89:33:d7:bd:a8:e9:2c:32:bf:2c:54:d8:e3:61:
d5:33:24:fb:91:ce:78:d6:50:17:b4:0e:8d:47:b3:
ea:c3:36:3f:1b:16:98:04:15:98:7c:43:30:f3:15:
e9:5a:cd:86:7b:bf:ad:47:34:9b:bb:a6:e5:ae:c9:
4c:e8:93:f9:1e:56:b7:7c:b3:64:3f:71:34:a8:fa:
01:d6:43:67:4e:f9:bf:38:45:75:ae:95:90:29:41:
34:76:be:e0:d2:71:b4:b0:74:5b:b6:b2:5a:65:38:
4e:db:f7:c5:f8:c3:ba:d5:6c:06:65:a4:82:5c:08:
e3:85:1a:29:b5:e4:7d:18:d0:0c:c8:ce:f6:6d:8a:
97:da:f9:41:ff:a8:d2:e7:5f:c3:3b:49:74:29:02:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:60:8E:08:2F:85:5F:CB:DE:B6:66:4D:C5:48:F3:AB:15:7E:CB:44
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:be:ef:a7:1c:85:42:55:0f:24:1c:cb:48:b5:be:85:43:07:
88:0c:0d:1a:7e:1c:d8:45:ec:c9:04:35:0e:f9:69:4b:ef:29:
73:0f:aa:4f:6e:59:c4:55:94:7d:a6:24:7c:99:ff:f4:6c:e2:
0b:74:71:3c:2b:a3:d0:49:eb:ed:5f:64:fc:a0:eb:16:2c:41:
b1:a3:33:05:dc:da:21:a9:47:c6:22:ba:c3:7c:b0:c5:7c:a2:
d1:ac:a0:2a:b5:42:f1:7f:2e:65:7e:f1:b6:75:f9:c7:3c:67:
71:18:7f:9b:bc:23:26:42:23:2e:48:28:5f:e7:03:91:05:e1:
1d:a5:a6:8b:23:4a:ac:0b:f2:71:de:9f:68:f8:b1:6f:ba:6c:
4c:3e:86:12:12:e9:65:0e:0c:99:dc:e1:cb:8f:dd:18:a0:e1:
f3:33:ab:5e:88:1f:bf:46:6b:67:6f:22:8c:f0:3c:d7:d9:ba:
a1:ba:c6:7f:01:5b:88:dc:e3:fa:14:a4:18:c3:22:d0:b4:0d:
4a:c4:55:88:5f:17:e4:a5:b1:ff:9c:40:b9:cd:b2:70:6e:2f:
40:d0:64:f6:3f:29:11:5e:03:63:e5:e1:7d:f4:7a:91:9f:15:
11:ed:73:51:01:73:1f:ad:b0:53:e6:3a:93:69:53:cf:ed:d6:
de:43:4f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:15 2025 by rpki-client