Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/Qy_9NnlukPgSoWEuwfRk3j1eLzg.mft
File: Qy_9NnlukPgSoWEuwfRk3j1eLzg.mft (raw, json)
Hash identifier: DQxRD0aG5Y9krRKS19GzJofnDke6iKDNnSNVQK9n7VM=
Subject key identifier: BB:87:6F:25:F1:2C:40:6A:0A:AD:3B:8D:8F:55:C5:FB:F2:B0:B0:E4
Authority key identifier: 43:2F:FD:36:79:6E:90:F8:12:A1:61:2E:C1:F4:64:DE:3D:5E:2F:38
Certificate issuer: /CN=432ffd36796e90f812a1612ec1f464de3d5e2f38
Certificate serial: 0195AE4727CD24E3D921CF6607041B9C5B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_9NnlukPgSoWEuwfRk3j1eLzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/Qy_9NnlukPgSoWEuwfRk3j1eLzg.mft
Manifest number: 07EE
Signing time: Wed 19 Mar 2025 12:00:53 +0000
Manifest this update: Wed 19 Mar 2025 12:00:53 +0000
Manifest next update: Thu 20 Mar 2025 12:00:53 +0000
Files and hashes: 1: Qy_9NnlukPgSoWEuwfRk3j1eLzg.crl (hash: T/YJW59dfSuZbVPeik1X5FvgL4eGDT47dGzBf9tj92A=)
2: YBiOU9LodRSxT5PuJn9g5UO2M2o.roa (hash: 08SR7+nvpd/XA2umdXMZ+Q/H2vBB7qTfGHTnuA1+CaQ=)
3: qMfi8e7m1fr1Hzuvp-QSKdbHo_c.roa (hash: tC15G7NC/3zskzQUaxJ7obi+f6xMCn57e/4LdL2XoDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:47:27:cd:24:e3:d9:21:cf:66:07:04:1b:9c:5b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432ffd36796e90f812a1612ec1f464de3d5e2f38
Validity
Not Before: Mar 19 12:00:53 2025 GMT
Not After : Mar 20 12:00:53 2025 GMT
Subject: CN=bb876f25f12c406a0aad3b8d8f55c5fbf2b0b0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:30:10:5c:af:58:42:75:3a:73:21:e8:7f:2b:
a2:36:85:82:68:db:61:4d:0c:82:ac:38:17:a9:d4:
6a:19:61:dc:f3:f0:eb:3c:cf:52:ed:fa:26:9e:b2:
b8:ca:b5:92:3e:4f:2e:79:57:73:ec:5a:3f:c7:a4:
85:8f:07:ef:2c:44:41:f0:66:42:61:63:3d:f5:44:
b9:71:a3:45:ac:9c:cd:0c:93:db:55:41:19:ea:ab:
7e:b8:45:ab:fb:e3:8f:fb:eb:6b:b6:88:ee:e1:db:
12:1e:ba:d0:64:05:c1:d0:8b:b4:0a:4f:63:0b:93:
de:11:ca:09:7a:60:e0:3d:47:48:90:7b:94:12:2a:
70:c0:c0:17:04:58:5b:d0:0e:35:6e:77:ba:3f:d7:
28:ee:1b:86:bb:28:6f:60:50:d6:6e:76:ff:a5:6f:
ce:57:e7:0f:82:c6:d4:5c:2d:8a:3a:1f:44:be:a8:
87:9e:e9:46:1c:6b:80:6c:8d:56:00:7b:ca:5b:f6:
0f:9b:3d:45:f0:23:81:6e:97:26:7e:79:94:7a:9a:
9d:6f:47:b5:f9:bc:17:f2:5a:77:bd:5e:2b:b7:ad:
62:9a:0a:7d:7a:f1:dd:fe:e5:03:81:2a:08:de:33:
17:fd:79:2b:da:88:b3:07:f7:0f:5b:f0:86:f3:8d:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:87:6F:25:F1:2C:40:6A:0A:AD:3B:8D:8F:55:C5:FB:F2:B0:B0:E4
X509v3 Authority Key Identifier:
keyid:43:2F:FD:36:79:6E:90:F8:12:A1:61:2E:C1:F4:64:DE:3D:5E:2F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_9NnlukPgSoWEuwfRk3j1eLzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/Qy_9NnlukPgSoWEuwfRk3j1eLzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/Qy_9NnlukPgSoWEuwfRk3j1eLzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0f:de:1f:22:d4:4d:f6:03:aa:37:eb:00:04:0d:05:1c:e2:
1f:2b:cf:2d:d4:2d:fd:b3:4a:0b:fa:eb:1e:a2:09:04:58:6d:
3e:cb:fb:3c:79:90:34:eb:e4:95:8f:3f:1b:52:f8:fb:41:bc:
61:4a:e1:ae:9d:c2:a0:23:64:5b:e8:8d:9f:34:00:3b:b5:5f:
1e:95:03:25:dd:16:34:36:d9:6b:41:b7:c3:1d:98:b7:12:2d:
81:d9:f7:ad:8d:91:10:91:fc:87:0c:6b:45:3a:3f:83:9e:3f:
f1:29:3d:3d:3d:67:1a:16:7e:93:cf:2e:62:e2:ac:c8:0a:e5:
92:3b:91:30:fd:b2:cc:29:ad:4b:30:e4:d4:70:1c:98:53:9b:
3a:0a:17:90:34:9d:66:8b:e2:ef:47:79:4b:5a:49:fd:bd:6a:
23:63:b7:3a:71:d5:9f:c5:d3:59:0b:44:f8:24:c3:79:52:0c:
cb:76:e9:62:a0:79:90:f9:c5:76:72:97:23:78:1c:9c:9a:ca:
4b:3c:e2:2e:02:b1:f0:5e:47:ed:21:01:95:a9:8b:24:30:8c:
ec:2e:ed:fb:13:3c:31:ab:1f:c7:7f:22:9a:e0:02:b1:96:88:
a0:77:e8:c1:d1:3c:b6:d9:dc:7f:6b:0b:62:ab:8d:dc:e9:59:
f2:33:86:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:03:50 2025 by rpki-client