Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: TSQA6BQwxAuLNtmyxzA9zxmaX7ofq4frnAQN3UnORrM=
Subject key identifier: F3:E9:1E:35:72:B1:FC:21:96:FB:5C:37:DA:6D:EB:DC:88:B3:AB:03
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 0195E00F8053264E320561EE6FAB1B39B6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 14BF
Signing time: Sat 29 Mar 2025 04:01:06 +0000
Manifest this update: Sat 29 Mar 2025 04:01:06 +0000
Manifest next update: Sun 30 Mar 2025 04:01:06 +0000
Files and hashes: 1: jQsHaj5ydFI2fziM46K4sV8khMM.roa (hash: /VZu49ELcVRt0AgBq70u1HUIw5xDpnWHzAN7Dc2pulg=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: DNopaBuU5nZGkQoVG/91vrpPu0dMh6B4oNIGDmtNO+8=)
3: tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa (hash: lo7qT/3mV2HNXlaDbWGrnZSKU8gfCipkct2DwMPEdOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:80:53:26:4e:32:05:61:ee:6f:ab:1b:39:b6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Mar 29 04:01:06 2025 GMT
Not After : Mar 30 04:01:06 2025 GMT
Subject: CN=f3e91e3572b1fc2196fb5c37da6debdc88b3ab03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:46:c2:27:d9:21:3e:24:f1:29:17:b6:25:f1:
56:ce:5f:ed:8e:d7:5e:31:d3:b8:1b:c0:2d:6e:f8:
f4:39:ab:d8:b3:7b:dd:bf:e3:1d:52:2f:76:1e:7b:
3d:97:9b:97:07:a8:9b:a3:76:b1:d6:78:8b:78:18:
6f:fa:ae:7b:22:cd:12:b8:55:97:c5:9b:bb:8c:fd:
df:29:82:78:75:cc:b2:94:73:42:56:6b:16:fb:5f:
43:ef:03:16:23:fc:c4:ad:f4:c8:29:34:70:59:a5:
2c:16:25:6b:8f:e8:be:73:fb:5f:cb:06:08:d1:a8:
39:10:c7:05:4a:25:01:30:2c:e0:1f:2c:50:37:2c:
2b:b3:dd:47:36:6f:f5:90:d8:a8:d3:58:aa:3e:88:
7d:52:f8:bf:d2:cd:f8:c9:df:fa:ce:4b:a3:96:68:
64:a7:a0:08:61:41:1f:a1:90:e0:80:63:51:29:1e:
fe:97:26:83:70:cf:ef:78:7e:18:a0:55:5c:c2:2d:
d8:06:a1:bc:c4:8d:d2:49:9c:72:95:b8:d5:f8:93:
1d:2e:db:c6:c6:34:a6:bf:3b:c4:c5:e1:29:4e:2b:
b0:33:5f:e2:9c:9f:af:4d:a4:bd:ee:2c:6a:0f:9f:
69:34:c2:27:29:b5:50:24:e3:ed:22:62:6e:38:81:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E9:1E:35:72:B1:FC:21:96:FB:5C:37:DA:6D:EB:DC:88:B3:AB:03
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4d:29:7d:50:f1:e2:5f:9b:9b:7a:d2:d9:3d:4e:90:d4:82:
10:32:26:b8:43:83:fd:58:01:82:e5:34:1b:72:ac:ee:1a:39:
d0:b5:99:f7:50:d7:35:16:e8:3e:31:6b:d0:b4:39:72:21:9a:
c1:f1:c3:2f:85:30:85:3c:df:15:71:31:11:5a:e6:f0:33:00:
12:21:f6:e8:b7:c0:12:ab:1e:2b:85:8a:b4:25:d9:72:a0:83:
82:ed:62:44:ac:1c:49:1d:07:e0:b4:6f:2c:80:f7:42:01:f4:
7d:ce:1d:5d:e5:0b:c0:01:72:b1:50:d2:ec:04:3d:aa:bf:ad:
90:c0:33:55:6f:41:88:2f:ed:2c:17:12:9f:b5:56:b3:43:1f:
22:42:90:4f:83:5e:4b:8e:6d:9f:1c:d8:88:0f:13:98:1e:fa:
67:72:1e:4e:4c:de:4e:c9:7c:19:bd:1d:7d:8e:a7:20:5d:6d:
8a:5a:98:53:d7:a8:17:1b:77:cf:a3:57:d7:b3:f9:58:fc:93:
25:80:1c:d2:37:60:ab:a1:bd:48:73:a0:4a:ba:5f:a7:dc:32:
b1:2b:90:ba:b3:8f:ff:5c:cb:9b:83:58:51:46:01:9c:0c:2c:
c9:bd:75:55:da:d6:b7:77:e5:0b:35:26:3e:df:79:d0:d0:da:
60:f5:1b:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD4BTJk4yBWHub6sbObbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDE0Y2UxOGE4ZjFkMDVhNmEzNTM5MGFmNGFlYzhjZTZj
YzU2ZWMwHhcNMjUwMzI5MDQwMTA2WhcNMjUwMzMwMDQwMTA2WjAzMTEwLwYDVQQD
EyhmM2U5MWUzNTcyYjFmYzIxOTZmYjVjMzdkYTZkZWJkYzg4YjNhYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUbCJ9khPiTxKRe2JfFWzl/tjtde
MdO4G8Atbvj0OavYs3vdv+MdUi92Hns9l5uXB6ibo3ax1niLeBhv+q57Is0SuFWX
xZu7jP3fKYJ4dcyylHNCVmsW+19D7wMWI/zErfTIKTRwWaUsFiVrj+i+c/tfywYI
0ag5EMcFSiUBMCzgHyxQNywrs91HNm/1kNio01iqPoh9Uvi/0s34yd/6zkujlmhk
p6AIYUEfoZDggGNRKR7+lyaDcM/veH4YoFVcwi3YBqG8xI3SSZxylbjV+JMdLtvG
xjSmvzvExeEpTiuwM1/inJ+vTaS97ixqD59pNMInKbVQJOPtImJuOIHIaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPpHjVysfwhlvtcN9pt69yIs6sDMB8GA1UdIwQY
MBaAFLPRTOGKjx0FpqNTkK9K7IzmzFbsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEt
NTJjNjk5ZDM4NmNkLzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEtNTJjNjk5ZDM4NmNk
LzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI00pfVDx
4l+bm3rS2T1OkNSCEDImuEOD/VgBguU0G3Ks7ho50LWZ91DXNRboPjFr0LQ5ciGa
wfHDL4UwhTzfFXExEVrm8DMAEiH26LfAEqseK4WKtCXZcqCDgu1iRKwcSR0H4LRv
LID3QgH0fc4dXeULwAFysVDS7AQ9qr+tkMAzVW9BiC/tLBcSn7VWs0MfIkKQT4Ne
S45tnxzYiA8TmB76Z3IeTkzeTsl8Gb0dfY6nIF1tilqYU9eoFxt3z6NX17P5WPyT
JYAc0jdgq6G9SHOgSrpfp9wysSuQurOP/1zLm4NYUUYBnAwsyb11VdrWt3flCzUm
Pt950NDaYPUbQg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:16:53 2025 by rpki-client