Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.mft
File: ll4IgLPHvQuQpkwkTi-hzw030HI.mft (raw, json)
Hash identifier: l+tfo96urC4XPoBdV/nqiRJ6IhVN+C36P1iQyVIo3cI=
Subject key identifier: 04:40:B4:7C:57:31:B3:4F:FD:38:86:6A:DA:81:14:42:C0:4F:EF:55
Authority key identifier: 96:5E:08:80:B3:C7:BD:0B:90:A6:4C:24:4E:2F:A1:CF:0D:37:D0:72
Certificate issuer: /CN=965e0880b3c7bd0b90a64c244e2fa1cf0d37d072
Certificate serial: 0195B2247D37F2A6AB96990D2F56F10317DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ll4IgLPHvQuQpkwkTi-hzw030HI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.mft
Manifest number: 0200
Signing time: Thu 20 Mar 2025 06:01:30 +0000
Manifest this update: Thu 20 Mar 2025 06:01:30 +0000
Manifest next update: Fri 21 Mar 2025 06:01:30 +0000
Files and hashes: 1: JksTwBqMu6mir3iXItYAcZTkiBg.roa (hash: RpdxCkhqaoSpmsMLdu6NPf18xyekalTabGY7q5mIpGE=)
2: XR5EtNSJMICq3YbRtKFluRtEWv4.roa (hash: zdpy5fa6FzFGRXkI56ldRGEVpTT7+e5p/QUx0x6zPj4=)
3: ll4IgLPHvQuQpkwkTi-hzw030HI.crl (hash: 1Im+2mJPOF4p81p+KKPvlj8mdXqJP0P7P8zo0lZQNDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:24:7d:37:f2:a6:ab:96:99:0d:2f:56:f1:03:17:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965e0880b3c7bd0b90a64c244e2fa1cf0d37d072
Validity
Not Before: Mar 20 06:01:30 2025 GMT
Not After : Mar 21 06:01:30 2025 GMT
Subject: CN=0440b47c5731b34ffd38866ada811442c04fef55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:e5:10:87:8e:ee:32:24:32:f8:5b:d4:15:
30:00:81:5f:25:59:f2:ee:fe:41:69:5e:be:b7:22:
20:40:18:38:9f:e2:94:96:5c:2d:e7:77:28:a4:a5:
50:fb:5f:51:54:4f:21:87:c5:33:23:7f:99:7c:36:
a5:0b:cd:8a:95:1c:6c:9f:d7:6e:79:35:c1:05:33:
ae:04:66:7e:4f:cc:95:18:aa:71:21:28:78:c8:b2:
23:8e:5d:c2:f5:8d:ca:1d:a8:af:32:d4:33:9a:f4:
a2:ca:97:a4:08:8b:46:69:83:41:dc:4e:f5:d3:11:
3f:13:0d:7d:bc:49:3e:0a:0c:38:f7:06:55:b3:72:
82:59:bc:66:17:54:b2:7e:42:e9:78:88:12:63:56:
55:b5:bb:01:6e:65:c5:38:03:19:fb:1a:60:5a:2f:
63:64:0a:76:15:6d:89:34:46:a2:06:a7:4b:a5:44:
ab:cb:25:7c:2d:75:ae:9a:4a:45:4c:4d:be:cd:b6:
67:f4:09:57:ad:9e:a8:9f:e3:de:73:01:94:4b:89:
0a:65:95:34:c6:cb:13:f2:d4:83:cd:55:e7:aa:3e:
a6:67:2d:80:fb:ac:ba:6f:76:3d:a4:d6:86:34:99:
10:3c:0a:21:a4:d7:0d:75:b6:2a:a1:5f:81:82:36:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:40:B4:7C:57:31:B3:4F:FD:38:86:6A:DA:81:14:42:C0:4F:EF:55
X509v3 Authority Key Identifier:
keyid:96:5E:08:80:B3:C7:BD:0B:90:A6:4C:24:4E:2F:A1:CF:0D:37:D0:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ll4IgLPHvQuQpkwkTi-hzw030HI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1d:5b:cf:46:cd:36:d8:ff:2d:88:0b:24:85:d5:af:54:db:
12:5a:19:37:be:b4:f6:5e:0e:79:81:70:95:dd:25:5d:50:5a:
1b:96:a2:a9:5d:e2:66:fb:ab:6c:aa:67:65:13:0d:5c:d7:7a:
7e:80:c2:9f:a6:3c:33:25:ea:66:94:a5:de:22:6c:fd:65:4b:
98:a6:35:2c:66:86:48:88:2c:17:48:f9:c5:a2:0f:65:14:1e:
97:8c:71:26:a1:b7:d5:b8:71:fa:49:ae:7a:7d:db:d3:5d:90:
11:99:1f:1e:f7:39:76:0a:de:03:ad:04:c1:78:a7:85:d6:dc:
94:5a:80:72:9e:45:b4:b4:3c:28:e5:f7:aa:21:31:52:77:08:
d8:b4:b0:c7:ba:07:f5:e8:a1:36:ce:0c:6a:2b:d9:00:ad:66:
86:c7:ca:bf:4a:20:82:6d:8e:6e:29:44:49:4b:ee:7a:da:2e:
03:06:ed:c3:f8:93:e9:6a:4c:13:a2:af:40:21:96:be:c4:ec:
71:72:21:e8:14:7b:b3:51:0b:70:69:2d:fb:9b:fc:45:eb:71:
3d:5f:cc:98:ce:0e:f6:c8:43:af:75:f4:15:76:30:60:22:d4:
18:11:2f:20:d2:0c:d4:02:a2:24:ec:75:3f:de:95:6c:a8:64:
6d:0d:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:34:15 2025 by rpki-client