Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.mft
File: VJWo5etsnoxrNjVBB3DzG5kDSCA.mft (raw, json)
Hash identifier: VsxsTT1FaElndKXipDEZis6PPb5WHv8bcLrrMPkkRoM=
Subject key identifier: 74:B1:6E:6A:EA:06:D5:B7:A1:F0:30:87:9D:E4:A0:F0:50:BB:05:6B
Authority key identifier: 54:95:A8:E5:EB:6C:9E:8C:6B:36:35:41:07:70:F3:1B:99:03:48:20
Certificate issuer: /CN=5495a8e5eb6c9e8c6b3635410770f31b99034820
Certificate serial: 019514A43323EE6AFF7D7F5F9B172E3109A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJWo5etsnoxrNjVBB3DzG5kDSCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.mft
Manifest number: 02EF
Signing time: Mon 17 Feb 2025 16:01:00 +0000
Manifest this update: Mon 17 Feb 2025 16:01:00 +0000
Manifest next update: Tue 18 Feb 2025 16:01:00 +0000
Files and hashes: 1: VJWo5etsnoxrNjVBB3DzG5kDSCA.crl (hash: CO+w7KgeXAbJa44O2WGpVbGWNd1sYC8V31PHz/GQf20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:a4:33:23:ee:6a:ff:7d:7f:5f:9b:17:2e:31:09:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5495a8e5eb6c9e8c6b3635410770f31b99034820
Validity
Not Before: Feb 17 16:01:00 2025 GMT
Not After : Feb 18 16:01:00 2025 GMT
Subject: CN=74b16e6aea06d5b7a1f030879de4a0f050bb056b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:2d:0a:9e:12:c0:59:4a:aa:7d:51:58:88:
0e:af:c1:de:72:11:67:12:1f:27:c6:b8:aa:3f:3d:
3f:25:52:50:9e:43:2b:12:62:ce:24:22:95:d4:e9:
76:58:5e:36:e4:78:f8:07:67:6b:b1:35:c5:56:01:
6f:4e:f3:99:e2:8d:91:df:15:9e:1e:ff:32:2b:9a:
09:46:56:68:ab:26:62:9c:79:4c:0e:4a:0e:5b:1e:
bf:81:7d:47:f0:dc:8c:ba:49:22:f4:4b:fa:10:c3:
63:bb:87:82:38:20:ac:5f:ff:79:ba:4c:2c:07:82:
78:44:d9:2d:c6:82:69:7d:69:d7:ec:94:94:98:04:
1d:e2:a8:76:f3:3a:ec:e6:30:ea:38:56:ed:74:22:
87:87:0a:5e:c5:a8:40:3e:82:b7:b4:5c:a6:44:82:
62:e4:9c:05:79:54:52:24:2f:9a:b3:0d:78:4f:e3:
40:71:6b:7e:26:85:2b:75:39:e2:32:20:8f:1e:30:
7a:2f:ec:32:26:b6:ca:6e:62:79:f0:2a:ab:ee:25:
a1:6c:6d:5a:55:a8:88:28:7d:3f:34:66:75:b5:85:
da:5a:c0:d0:95:8b:ef:9b:5f:03:7a:18:c9:d6:4d:
3c:a0:91:c8:d0:70:25:b4:c6:54:3f:0c:6d:3e:39:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B1:6E:6A:EA:06:D5:B7:A1:F0:30:87:9D:E4:A0:F0:50:BB:05:6B
X509v3 Authority Key Identifier:
keyid:54:95:A8:E5:EB:6C:9E:8C:6B:36:35:41:07:70:F3:1B:99:03:48:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJWo5etsnoxrNjVBB3DzG5kDSCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1c:59:b4:66:1a:ac:2a:3a:84:78:8b:f5:1d:31:97:94:2a:
43:8e:69:b2:7f:d6:21:0c:94:be:9b:0b:98:9b:46:66:0b:cf:
dc:e9:4b:a6:3c:94:be:2d:61:49:bd:cb:8d:73:36:0f:03:4b:
12:74:b8:58:fc:c1:3b:b9:4d:94:43:96:4c:e4:af:42:80:db:
b9:55:ff:65:71:32:96:91:b0:30:e6:1d:91:1b:06:53:c2:19:
b2:15:92:bb:be:a0:77:63:96:be:9e:56:bf:f1:dd:e7:3a:07:
7a:df:ca:17:91:24:2e:84:c4:54:18:b4:7c:fd:b1:15:8f:62:
d5:d4:e7:55:d0:b9:93:da:94:13:3c:64:1b:90:00:d4:03:f5:
23:22:02:6d:f9:08:29:19:fc:d8:42:ef:1c:39:02:f1:5a:16:
9b:8e:09:c2:5d:fa:60:82:15:f1:76:cd:29:32:9b:7c:65:82:
f5:80:69:81:0c:c2:f2:7e:e3:c1:25:ce:22:32:fe:2e:74:05:
f0:70:ce:2b:19:23:c2:5b:85:70:f2:1c:a1:86:b4:e1:a9:f3:
25:d0:ee:cf:03:f7:0c:29:81:86:3b:ab:58:ed:a7:a9:60:e4:
59:bf:be:24:f0:7e:6b:a5:a0:db:a3:5e:a8:09:63:e5:cb:dd:
70:43:e3:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUUpDMj7mr/fX9fmxcuMQmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTVhOGU1ZWI2YzllOGM2YjM2MzU0MTA3NzBmMzFiOTkw
MzQ4MjAwHhcNMjUwMjE3MTYwMTAwWhcNMjUwMjE4MTYwMTAwWjAzMTEwLwYDVQQD
Eyg3NGIxNmU2YWVhMDZkNWI3YTFmMDMwODc5ZGU0YTBmMDUwYmIwNTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoMtCp4SwFlKqn1RWIgOr8HechFn
Eh8nxriqPz0/JVJQnkMrEmLOJCKV1Ol2WF425Hj4B2drsTXFVgFvTvOZ4o2R3xWe
Hv8yK5oJRlZoqyZinHlMDkoOWx6/gX1H8NyMukki9Ev6EMNju4eCOCCsX/95ukws
B4J4RNktxoJpfWnX7JSUmAQd4qh28zrs5jDqOFbtdCKHhwpexahAPoK3tFymRIJi
5JwFeVRSJC+asw14T+NAcWt+JoUrdTniMiCPHjB6L+wyJrbKbmJ58Cqr7iWhbG1a
VaiIKH0/NGZ1tYXaWsDQlYvvm18DehjJ1k08oJHI0HAltMZUPwxtPjlHcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSxbmrqBtW3ofAwh53koPBQuwVrMB8GA1UdIwQY
MBaAFFSVqOXrbJ6MazY1QQdw8xuZA0ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpXbzVldHNub3hyTmpWQkIzRHpHNWtEU0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yYzk0MTktYjFmOC00OGYwLTk0YTMt
MTRjYmJiYTIxNzk4LzEvVkpXbzVldHNub3hyTmpWQkIzRHpHNWtEU0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yYzk0MTktYjFmOC00OGYwLTk0YTMtMTRjYmJiYTIxNzk4
LzEvVkpXbzVldHNub3hyTmpWQkIzRHpHNWtEU0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxxZtGYa
rCo6hHiL9R0xl5QqQ45psn/WIQyUvpsLmJtGZgvP3OlLpjyUvi1hSb3LjXM2DwNL
EnS4WPzBO7lNlEOWTOSvQoDbuVX/ZXEylpGwMOYdkRsGU8IZshWSu76gd2OWvp5W
v/Hd5zoHet/KF5EkLoTEVBi0fP2xFY9i1dTnVdC5k9qUEzxkG5AA1AP1IyICbfkI
KRn82ELvHDkC8VoWm44Jwl36YIIV8XbNKTKbfGWC9YBpgQzC8n7jwSXOIjL+LnQF
8HDOKxkjwluFcPIcoYa04anzJdDuzwP3DCmBhjurWO2nqWDkWb++JPB+a6Wg26Ne
qAlj5cvdcEPjHg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:17:37 2025 by rpki-client