Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
File: 1TOS85C0La1wA2dOvC0B3z3tgbw.mft (raw, json)
Hash identifier: sFU6wEujgTcnr5SGb9KiLyMFJyWyot36fNUm0Oqh214=
Subject key identifier: CB:A9:29:2D:BB:6D:EA:0E:7F:AA:75:D9:21:EA:DF:57:4C:B0:F2:49
Authority key identifier: D5:33:92:F3:90:B4:2D:AD:70:03:67:4E:BC:2D:01:DF:3D:ED:81:BC
Certificate issuer: /CN=d53392f390b42dad7003674ebc2d01df3ded81bc
Certificate serial: 01951511772052258537957595C906574FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
Manifest number: 082E
Signing time: Mon 17 Feb 2025 18:00:20 +0000
Manifest this update: Mon 17 Feb 2025 18:00:20 +0000
Manifest next update: Tue 18 Feb 2025 18:00:20 +0000
Files and hashes: 1: 1TOS85C0La1wA2dOvC0B3z3tgbw.crl (hash: LVLQ283FOPXcKaxV0vqFyYJ2ovuh7JUvRSE9nw8gVNU=)
2: BeyMb2qH8UcdJlJvMzIMBQ4mDjs.roa (hash: hQve+rtDZ0jg1uu0Y35IBtJorVyNaKyG6WOdEkpYqKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:11:77:20:52:25:85:37:95:75:95:c9:06:57:4f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53392f390b42dad7003674ebc2d01df3ded81bc
Validity
Not Before: Feb 17 18:00:20 2025 GMT
Not After : Feb 18 18:00:20 2025 GMT
Subject: CN=cba9292dbb6dea0e7faa75d921eadf574cb0f249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:6d:01:71:b7:d3:31:d2:51:ee:0f:de:9c:
a6:bd:1e:19:4a:6a:cb:23:04:9e:0c:64:72:ba:e9:
7a:86:ce:38:a5:14:cf:35:56:f6:67:8a:96:a4:ca:
a4:3d:7c:2b:61:dd:2f:fb:11:aa:4b:6a:94:7a:22:
ff:66:24:23:fe:26:bd:f6:63:9c:f9:04:c2:13:e6:
a0:2f:03:c3:36:95:14:5d:cd:36:e2:65:d2:50:01:
1f:c4:b8:fd:dd:b3:d2:7d:c0:31:c7:49:95:a5:20:
23:38:50:e5:03:87:33:91:26:3a:2d:75:b7:80:5e:
cf:8d:18:40:7e:24:96:e2:e0:dc:d1:d2:4c:1b:44:
71:5b:6d:95:49:37:f5:bd:11:5c:68:be:0f:9c:21:
e8:2a:54:46:dc:1d:27:6c:2d:8c:be:58:29:ca:4e:
03:d1:94:ab:d5:e1:5e:8e:bc:b3:53:aa:7c:d0:ce:
5f:eb:41:87:c2:ac:a5:8c:b9:72:8f:7f:ad:f8:00:
28:24:90:1c:5f:7d:c3:84:1f:d0:18:0c:76:51:90:
cf:b1:03:c2:6c:9e:22:27:cd:4e:9c:d4:b5:f7:46:
29:d6:38:40:f3:c7:8b:23:ab:26:55:78:03:b1:9c:
a4:c5:54:1a:8e:9a:9c:6d:94:da:e7:ca:ce:f3:d5:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A9:29:2D:BB:6D:EA:0E:7F:AA:75:D9:21:EA:DF:57:4C:B0:F2:49
X509v3 Authority Key Identifier:
keyid:D5:33:92:F3:90:B4:2D:AD:70:03:67:4E:BC:2D:01:DF:3D:ED:81:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2f:7d:c8:fc:2a:2b:e5:85:6c:66:6a:c0:81:ad:79:b0:10:
e8:2f:6a:e5:3d:4f:00:d4:87:3e:78:40:66:8a:e3:84:cb:25:
15:82:95:da:7e:de:41:94:f5:75:95:96:69:48:56:cc:89:2e:
a9:f0:f4:b0:6a:5f:ed:5b:ac:bf:58:d6:3c:ab:dd:e8:c6:1f:
f1:04:9c:04:ba:f1:e7:99:c4:8a:f6:14:0b:1d:d8:6f:36:73:
5d:c6:b0:0c:b4:8a:c2:d3:61:f6:c3:4a:d1:30:bf:fe:92:3c:
8c:eb:7e:0c:99:9d:e2:57:30:6a:6f:10:01:7a:00:6b:f0:9c:
75:ab:07:8a:81:69:c0:f1:96:cb:ee:ac:a2:94:02:95:e0:50:
66:8e:fe:aa:34:ae:67:f6:ce:69:9e:cf:d0:51:fc:f3:69:b8:
fd:ce:39:83:f6:50:0f:8b:15:31:49:7e:59:52:f1:d7:3d:6f:
56:8d:1e:66:d1:52:00:97:8a:d2:89:13:eb:16:83:22:5e:27:
a5:a4:6c:eb:66:7f:e2:78:6a:21:28:7c:c8:cd:ad:03:32:52:
6e:0d:da:3e:8d:3f:2c:11:bb:4f:70:63:7f:16:f0:1d:b9:f4:
e4:cf:54:0f:b7:a0:45:14:1b:ec:b3:45:16:ba:f7:73:e8:02:
30:ec:9c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:29 2025 by rpki-client