Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.mft
File: Znbf9hqDBWdZd-hvUu7mdF1kKPQ.mft (raw, json)
Hash identifier: 4l2ZmIoOLSWaDTlMgMStvLbPErTQza8pjcSepewkzac=
Subject key identifier: CE:CE:FC:A1:64:E0:8C:11:F8:18:A1:79:34:3B:36:24:EC:D4:4D:3E
Authority key identifier: 66:76:DF:F6:1A:83:05:67:59:77:E8:6F:52:EE:E6:74:5D:64:28:F4
Certificate issuer: /CN=6676dff61a8305675977e86f52eee6745d6428f4
Certificate serial: 0195AE11051E3EAFD17038A9338354EBE977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.mft
Manifest number: 14AA
Signing time: Wed 19 Mar 2025 11:01:45 +0000
Manifest this update: Wed 19 Mar 2025 11:01:45 +0000
Manifest next update: Thu 20 Mar 2025 11:01:45 +0000
Files and hashes: 1: MQ9I67C6MUwfQzvk4DuSGpDsBdg.roa (hash: nQba/tkookJK+ZQVFWSA10f4GofHIK4b5Nnz9E2aPIc=)
2: Znbf9hqDBWdZd-hvUu7mdF1kKPQ.crl (hash: 31dbCxpmL1M89tmEr5EnqLeSs3EV7HudwA2k/bwTsjw=)
3: w4RtskuHRknczZMIgEOayAnx-bw.roa (hash: Gao/WvW+wIEEG5my4KsRa6yF/N6hpufS64G6NkhyzQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:11:05:1e:3e:af:d1:70:38:a9:33:83:54:eb:e9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6676dff61a8305675977e86f52eee6745d6428f4
Validity
Not Before: Mar 19 11:01:45 2025 GMT
Not After : Mar 20 11:01:45 2025 GMT
Subject: CN=cecefca164e08c11f818a179343b3624ecd44d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:00:70:9b:b7:b7:49:68:26:fd:16:72:7e:
b0:68:1f:a7:ea:ee:12:9f:48:bc:b5:0e:90:d8:dc:
7e:31:e7:5e:aa:44:c9:db:ba:6d:48:26:14:d7:f8:
c0:f3:47:e2:8f:b3:c3:dd:f3:98:dd:3f:d6:98:ab:
15:61:ac:86:b2:e8:e3:34:4c:9f:5d:f4:e6:85:e9:
d3:7d:cb:f4:b5:f2:3a:f0:d9:c5:77:50:9e:3c:f4:
04:0c:dc:3b:0b:a4:5f:07:16:d7:94:e2:ed:0e:19:
d7:56:50:0a:8f:ed:f6:f8:1e:50:46:b8:b5:c5:83:
32:a1:fa:eb:f9:b8:ec:a7:51:ae:c5:93:c6:a2:43:
79:7e:ae:42:71:f1:ea:94:76:69:5d:fe:22:b7:0b:
ac:17:57:77:22:97:a5:53:fd:67:35:53:21:07:cb:
6b:4e:f6:9c:d5:9f:df:c9:4c:3d:2c:48:cf:6a:4b:
85:6a:ed:77:0f:82:44:06:f6:29:a7:2e:a1:29:c8:
c9:f8:99:27:12:cd:f1:3d:8b:9a:79:47:db:22:22:
15:e6:66:07:36:5e:a3:2c:46:c9:0d:bf:98:d5:e6:
05:d5:ee:d1:04:63:b1:49:c5:70:50:e9:71:2f:4e:
a7:a0:ca:43:a1:2a:74:ea:20:52:1e:00:07:08:9b:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CE:FC:A1:64:E0:8C:11:F8:18:A1:79:34:3B:36:24:EC:D4:4D:3E
X509v3 Authority Key Identifier:
keyid:66:76:DF:F6:1A:83:05:67:59:77:E8:6F:52:EE:E6:74:5D:64:28:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e3:1f:cd:1f:48:3b:4b:f6:0b:3a:7e:1b:e6:15:fb:0d:ed:
8b:f4:68:7c:08:17:73:27:82:25:27:2e:43:ae:46:dc:a1:a8:
7e:d9:be:65:40:ad:d1:b8:36:3d:11:90:17:62:79:36:a3:cf:
0e:39:55:ca:9e:d8:01:30:16:39:a6:cd:df:fe:60:94:e7:f2:
7b:dd:6f:dc:e2:94:25:31:5b:d1:e1:b5:f0:d0:4a:97:5a:3a:
f5:2a:2f:9e:a5:cb:73:da:57:92:4b:bc:44:87:01:f5:4d:cd:
e9:01:bf:ca:84:1d:af:3b:25:47:fc:5e:f3:03:8f:fa:b3:cf:
28:0e:53:19:c5:78:f5:7c:c6:67:88:2b:77:f9:b7:d0:98:07:
b3:1d:27:6a:fa:bc:fc:3d:05:b6:08:cb:0a:14:e6:15:0c:cf:
35:d2:6c:d6:37:70:f3:15:fa:56:37:ed:10:c6:62:11:e4:8a:
41:5e:02:a3:72:8a:a3:bb:8e:37:c4:b3:75:10:a4:f1:24:2a:
d8:c1:5a:32:16:da:cf:8c:89:49:47:ea:ab:66:67:07:e9:fa:
9d:50:66:3d:ab:58:05:94:15:89:b3:7b:95:1a:5e:cc:fc:b5:
bb:51:47:f2:c3:d2:d0:ff:65:09:e2:eb:16:50:8e:b3:b1:cf:
54:47:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:46:32 2025 by rpki-client