Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
File: 4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft (raw, json)
Hash identifier: FbxCy++AfUZRiKwnBVHPZ8a7Vd+mjrhKZkIO41C9ReE=
Subject key identifier: 67:EB:41:6A:A8:7E:0E:E2:B2:93:D0:4F:28:C2:96:08:49:A6:36:17
Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Certificate issuer: /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Certificate serial: 5BA5656BB267AFFF2682ABBB84B1B2A82D056E71
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
Manifest number: A1
Signing time: Wed 02 Jul 2025 22:21:33 +0000
Manifest this update: Wed 02 Jul 2025 22:16:33 +0000
Manifest next update: Fri 04 Jul 2025 00:40:33 +0000
Files and hashes: 1: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: te+8Q1RQF+/El0aKCot2iG7DWX0UbXJkKUaUr9PfYwE=)
2: 4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl (hash: TfvqVUFX5suwjvSBf1gKVok/E9mpQOTnrU83erfkNL8=)
3: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: 4Gi+kIIUqV5pUjirmODz+ut3Qk0c/1o7NqIqNMEHsSc=)
4: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: fR50iWKN91zeMKObuJZ1eZa1Tl9ML9P7Lc9Jyq3bDSI=)
5: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: QHn6tZLY5zwuhSPqOA8QQMb0D6GsyTP/mqBIqGqENAM=)
6: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: J8io8U0XPUuDsKGS242FyC3RGJyS4nfWqlR7rVI4fs4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a5:65:6b:b2:67:af:ff:26:82:ab:bb:84:b1:b2:a8:2d:05:6e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Validity
Not Before: Jul 2 22:16:33 2025 GMT
Not After : Jul 4 00:40:33 2025 GMT
Subject: CN=67EB416AA87E0EE2B293D04F28C2960849A63617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:d7:ec:ce:b9:6c:a1:a8:40:92:04:20:12:
85:2a:67:ac:63:c0:69:0c:05:0e:d4:e4:6b:1e:27:
e7:ae:b6:fd:32:18:4e:da:c3:7c:e2:e4:2b:58:35:
80:65:ea:b6:a1:6d:bd:34:d0:f9:8f:e9:7c:22:b5:
80:f6:37:7b:63:30:26:9d:ef:4c:30:9b:5f:0c:1a:
f3:88:9b:37:ae:a2:98:3a:3f:a3:61:5e:79:92:9e:
9c:55:0f:6a:84:13:0a:39:64:ca:6c:63:ed:1a:15:
6e:89:07:0a:da:fd:41:07:7f:e8:00:02:4e:f8:b9:
22:56:c0:dd:d6:a3:ea:d0:48:a0:a8:5a:da:4a:71:
38:ef:a3:11:a1:6b:92:41:17:69:67:f8:cf:ba:26:
b6:02:28:ba:7d:88:c5:22:5a:fd:1b:28:95:fe:a8:
a9:02:0d:60:39:0f:2d:74:83:78:07:38:6a:6e:71:
49:af:0b:1c:b7:7c:fb:95:3a:46:85:5d:7e:13:57:
85:3a:33:a6:c6:f9:69:ed:3d:19:2c:a3:2e:91:37:
fb:40:4c:19:e4:a8:f0:ec:2b:b4:ce:80:31:6c:f1:
31:69:e4:0c:bd:07:84:c4:75:24:a1:5b:fb:24:40:
79:10:b8:e0:0b:e4:a3:87:ef:9f:94:3d:ac:0d:68:
62:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EB:41:6A:A8:7E:0E:E2:B2:93:D0:4F:28:C2:96:08:49:A6:36:17
X509v3 Authority Key Identifier:
keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b3:df:6d:3a:5b:fa:2c:5e:32:bc:17:8f:5b:bd:8f:52:63:
39:6a:48:ca:ae:49:06:76:eb:52:7e:76:2b:9e:a9:1a:23:49:
13:10:e7:fa:c4:be:ec:bf:f1:89:36:e1:74:72:a0:9b:54:24:
ac:ac:a5:3c:ec:57:5c:c6:1a:ec:09:e8:b7:67:a3:d0:6b:89:
81:bc:b2:15:7a:1c:87:62:09:8f:40:43:41:fe:4b:26:56:a6:
1d:94:09:f0:fd:1a:20:12:9a:af:a3:f6:a9:34:2b:74:0e:8d:
4f:d2:60:0b:6e:27:e1:30:2c:2b:2b:eb:f9:48:ea:e4:7d:b3:
88:34:4b:89:f2:12:21:8d:01:be:a1:32:61:26:2a:a5:4a:a8:
4c:e4:e1:d8:64:1c:7b:a0:6d:8b:7f:cc:11:e7:ad:40:fd:5a:
d0:40:71:94:84:d1:0b:68:22:9d:cd:22:c2:cf:eb:05:bf:08:
d2:16:31:85:ee:4c:0f:aa:e4:66:db:fc:88:db:a7:c5:d8:57:
ce:5b:44:d0:6d:a0:10:29:25:2c:00:eb:47:01:f1:e3:10:75:
81:33:f6:ec:66:18:0f:32:53:63:f6:bf:14:69:04:a7:b5:f9:
81:12:6a:cb:d4:da:87:a7:bf:89:6e:f7:5e:6b:2d:07:36:04:
8b:4c:23:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 14:39:07 2025 by rpki-client