Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
File: MQsFJRN4mUz6gIjSO27u1Onmqwg.mft (raw, json)
Hash identifier: PoV7+yTL8e9Yg2EWomONbw3BBi4H7TtNgcpObfBG+C0=
Subject key identifier: 3B:89:3A:3B:D3:54:C8:25:5B:F0:CF:D1:FA:9C:24:F7:54:42:58:0B
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 0196EDC821701583B33DC540E8F6977B3E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
Manifest number: 0C99
Signing time: Tue 20 May 2025 13:00:38 +0000
Manifest this update: Tue 20 May 2025 13:00:38 +0000
Manifest next update: Wed 21 May 2025 13:00:38 +0000
Files and hashes: 1: 4i6nLpfX6JvU8NqRGqusOI4IfG8.roa (hash: uMg+nlYi+oxajABSJ6L6Wv5ePTF8g/2fXERYsmeytEg=)
2: 59d3PdJCULjs4_4j0Pq3kDdHdgk.roa (hash: WpHyMpfUDziVYZlQft4BRU7sTsf5P29/Ozm59gpC8kc=)
3: 6LDl214tdgRqDXeipMWDYC6MczE.roa (hash: 6iTRq4SWdTYbbcVZs0aR+/CjpsQmsoJjLSF+hCyuqqc=)
4: 9lN7dlDX3E71wSCMtnCUL3i762k.roa (hash: PK7Bs+uxjjNwmQbjd0qP17GmCFFEEyTI74qIrN4mbzY=)
5: MQsFJRN4mUz6gIjSO27u1Onmqwg.crl (hash: srpfVikkoXVc2yZXl1d62u/P0rM1di1waFlFmEhp3T4=)
6: V1aKAeRzKiAfxQwmZqLiwau1Afc.roa (hash: uOqJXqZXJEKHIgf9RgAP09YH0XSJp9FEPHY/lnYPqVM=)
7: ZtnPw-EPjmLa7W3OxLxg_t78pV8.roa (hash: K8KkRR/ZtZWge14n8EmXEE6Af3Y8EjAQWwa++O6bTvA=)
8: hu7MJhEZrLZG2uvf4NCVIV-yl5M.roa (hash: ovn33pyWO8koJqYvbUmNt0rUbJW529ZQ7bj5GMH+vmo=)
9: q8eST-ZG7B6M24bZ2pICQ4JG98g.roa (hash: OMOlcYNJZvEJSKKchshH1klaNxKOsSjpbrYgqgPNRlM=)
10: x02wwRJLWXkhho02hs7In5F9tAw.roa (hash: tCAs80Mhnn5ZbsqK3yFV+a3nsSOqYzSlvn1Cj5qDFLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:c8:21:70:15:83:b3:3d:c5:40:e8:f6:97:7b:3e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: May 20 13:00:38 2025 GMT
Not After : May 21 13:00:38 2025 GMT
Subject: CN=3b893a3bd354c8255bf0cfd1fa9c24f75442580b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:93:79:ec:8d:de:0f:d7:6e:a0:e6:f0:12:
c6:ab:b1:a2:a5:f6:9a:ad:98:42:33:c5:ad:56:cf:
6e:02:e9:b5:4f:91:b8:c1:55:73:b8:9e:ed:a1:34:
2f:ac:dc:03:03:f1:d5:62:da:59:f1:80:12:5b:b7:
25:31:4f:8b:60:68:d0:18:5c:48:3e:71:7c:db:d2:
0b:a3:1e:c1:4e:51:ef:59:1d:fe:b9:46:ec:75:bb:
26:4d:43:6e:33:e1:17:c0:5c:a9:ee:e3:04:28:d2:
31:72:b1:9a:4e:ac:b2:23:11:54:03:15:93:41:c3:
14:71:94:7e:5e:f5:6f:2f:ad:0c:74:20:8e:d5:0d:
33:1d:88:ea:e8:fb:2d:f6:c0:a0:84:3d:71:ad:d8:
97:a8:2e:19:22:a2:16:8a:1e:1a:25:75:28:7d:fb:
ad:77:09:8d:d4:07:e4:e1:d0:62:3c:d8:5a:90:79:
e6:43:57:ce:6e:c3:9b:aa:9b:70:73:72:cd:6b:b0:
ff:8f:83:ea:3a:d5:d2:fe:07:97:6c:20:eb:a5:1a:
3f:ac:35:18:08:44:0e:59:14:43:fb:90:05:bf:50:
a0:e3:30:9a:a1:92:93:b1:24:21:5b:02:90:15:cb:
e7:a6:46:5f:81:a5:d4:f7:e8:fe:2e:fd:40:2f:88:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:89:3A:3B:D3:54:C8:25:5B:F0:CF:D1:FA:9C:24:F7:54:42:58:0B
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ec:88:17:00:f5:6f:9e:87:22:6b:61:e9:c3:04:b1:9a:a8:
9c:89:01:f0:51:13:25:cd:5d:be:5b:56:c4:f5:54:b5:6b:a4:
f2:fb:10:10:0c:74:bf:7a:fd:6e:12:50:3b:b2:5e:7e:ab:7d:
4e:27:ab:01:6d:eb:c4:cf:3e:64:5d:0a:02:66:53:05:ec:ba:
ac:53:a7:8f:a3:ed:6d:9e:15:c4:be:82:9d:f3:b7:4d:1e:9d:
08:13:a2:fc:c9:7e:da:08:19:2e:ee:58:c1:c4:41:e8:a7:fc:
ea:75:1b:a8:54:6a:07:fe:0d:4b:cd:09:4b:01:85:7d:bb:53:
db:7a:00:41:55:b6:86:f0:52:a6:7e:0a:d4:32:7c:f5:6d:16:
22:4b:7d:e2:0a:3d:01:57:f5:a2:52:fe:02:90:48:ab:39:08:
44:d9:ac:56:31:8c:19:2d:05:ac:d8:51:1b:f0:04:ea:05:38:
e1:97:7d:c7:59:17:3b:ab:0b:38:88:05:96:7c:d6:2b:6b:dc:
88:27:1d:88:d7:9e:08:46:2c:68:88:8b:16:09:9d:b9:b8:82:
69:ae:db:ba:f3:1c:6f:e5:fe:df:55:8e:3b:f7:66:50:ea:a5:
89:bb:64:e5:e1:4b:ac:48:a1:06:4f:e0:18:76:87:65:df:e4:
9b:9b:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:17:42 2025 by rpki-client