Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: 6A9GBGMgobzNqrJgqstTmvL23jA1jEVSTaRitlI5n/k=
Subject key identifier: C8:83:D1:19:7F:BD:E3:FB:3D:AD:E3:C0:4B:34:18:13:3C:DF:F2:F0
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 0195E0EB3EE58527F446CD46F0911DC9D334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 02E2
Signing time: Sat 29 Mar 2025 08:01:08 +0000
Manifest this update: Sat 29 Mar 2025 08:01:08 +0000
Manifest next update: Sun 30 Mar 2025 08:01:08 +0000
Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=)
2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=)
3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: oVnzNdgP30k0Q7rxImhrJ3VsC+TAoCRxI80ZI7fkJy8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:3e:e5:85:27:f4:46:cd:46:f0:91:1d:c9:d3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Mar 29 08:01:08 2025 GMT
Not After : Mar 30 08:01:08 2025 GMT
Subject: CN=c883d1197fbde3fb3dade3c04b3418133cdff2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:1a:db:ab:4a:14:0b:e7:19:f4:6c:9e:55:
7a:da:0a:a9:1b:9e:45:5d:3b:4b:f8:bd:f2:04:f0:
95:be:0b:81:79:56:db:04:f8:aa:bf:14:62:92:76:
44:b3:5a:68:17:4b:13:8f:80:5b:8d:b6:e5:c3:34:
ec:79:2f:e6:45:12:20:cc:64:e0:2e:1b:76:27:41:
99:93:7e:76:de:ed:90:d5:65:5a:88:eb:d3:58:e7:
fa:ea:cd:07:22:7b:59:35:ef:f0:a0:d7:1d:98:68:
80:ab:46:b5:e4:10:de:f5:b5:2e:dc:35:a2:0e:bb:
04:62:79:eb:fb:4e:ca:ed:f3:22:6f:47:35:98:20:
f9:27:d3:14:6f:ab:2a:b0:a4:13:08:ff:be:78:2a:
ff:ee:da:98:cf:70:ce:15:c2:0d:dd:bd:59:11:8b:
fb:f3:f5:fa:23:08:d7:19:58:9c:b4:04:38:71:c0:
07:a8:9d:5b:a0:a7:2b:e8:36:de:05:56:21:4d:10:
f3:46:8a:ba:63:07:39:ad:4a:20:38:93:16:89:c2:
d7:73:af:b1:99:d4:d8:8d:ad:a8:86:36:7a:fd:db:
14:02:41:d9:af:ff:bd:f2:fd:e0:1d:90:08:41:4c:
e7:32:ac:b2:c8:92:74:80:d1:3a:85:4e:78:d5:03:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:83:D1:19:7F:BD:E3:FB:3D:AD:E3:C0:4B:34:18:13:3C:DF:F2:F0
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:21:32:2a:42:3c:ee:09:ee:fe:4c:3a:d6:ec:5b:bc:7f:8d:
b2:4b:fd:9d:82:50:3b:0f:eb:a9:ca:7a:b1:ac:08:8e:00:12:
00:37:b0:bf:2b:ab:b0:07:6f:8f:a5:21:30:ad:20:3e:5c:85:
a1:6a:c6:04:c8:64:1f:ac:43:7a:61:ed:a2:29:08:2b:86:a6:
f3:74:65:93:4b:17:a7:5f:a3:42:34:50:2e:6b:b9:36:03:1d:
0f:78:ad:47:0d:23:b5:d0:06:21:63:53:cc:a2:35:c3:a8:db:
7a:b6:2c:94:a0:e2:cb:68:42:56:c3:d2:8f:c2:16:12:cf:9c:
8b:ba:f5:fe:f5:d1:f3:20:5d:7d:dc:40:ab:ce:e8:56:fd:59:
72:f9:01:4d:ae:4e:85:7d:e3:33:d6:b1:e6:a8:58:c0:26:60:
4b:0e:98:43:8a:ea:14:6d:1e:ac:9e:87:86:9b:0a:e8:70:d1:
20:15:fe:cd:85:70:0a:9b:89:d2:dc:d7:89:77:23:d2:c0:e1:
61:58:2a:90:25:d7:ab:a5:a2:30:a4:04:42:fe:d0:d9:49:1f:
78:21:9d:b3:4a:5a:a7:91:48:a6:9c:61:cb:28:a6:19:1d:92:
1a:83:a5:c8:af:12:54:ec:19:35:ee:c2:ae:ec:ed:62:71:d7:
3f:bf:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:13 2025 by rpki-client