Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft
File: 04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft (raw, json)
Hash identifier: HH2Ondl754JGjxL1QpVr7gbUZHbv3x+o0MQhEBvt9Hw=
Subject key identifier: 57:8C:6D:99:02:E7:72:B6:3D:6D:3F:61:C3:D6:A2:01:76:31:08:92
Authority key identifier: 04:F7:D8:E6:71:AC:7D:0A:0F:EE:B7:4E:4B:E9:C9:C1:3E:B2:95:4C
Certificate issuer: /CN=04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C
Certificate serial: 09802EFB8BE33A4BE04D7C369BFC126B4BAEAC55
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft
Manifest number: 01B1
Signing time: Wed 02 Jul 2025 19:46:28 +0000
Manifest this update: Wed 02 Jul 2025 19:41:28 +0000
Manifest next update: Thu 03 Jul 2025 19:53:28 +0000
Files and hashes: 1: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: BmKTbRMoiut+8VNSufvgCLPuOQU03tX8DldEeEoDX0o=)
2: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: RXK+W3w1YvQu9ahIRwMIryYcMgQG39a2/hB4IK34E74=)
3: 04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.crl (hash: VECa1OfZLs7Xm+uu7qeZwofVRJWjvxFcMqpujdbBLWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:80:2e:fb:8b:e3:3a:4b:e0:4d:7c:36:9b:fc:12:6b:4b:ae:ac:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C
Validity
Not Before: Jul 2 19:41:28 2025 GMT
Not After : Jul 3 19:53:28 2025 GMT
Subject: CN=578C6D9902E772B63D6D3F61C3D6A20176310892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:dc:d4:26:48:5c:b7:14:e1:bd:3a:04:de:
e3:fa:32:ed:2a:26:65:d7:08:d8:9d:43:c8:f6:a8:
96:3f:83:ad:b5:18:70:c4:b2:78:08:f4:0f:5f:9f:
2f:75:fd:b0:88:1d:b2:4f:64:33:7e:20:9b:84:f5:
b1:48:03:7e:25:cd:61:b3:ce:9a:e1:1b:9e:da:f8:
04:75:f6:ad:d8:8e:39:c6:8c:2e:e1:36:a6:16:aa:
f2:f6:22:6c:b1:09:4c:6d:97:c8:3b:92:79:d0:c5:
31:20:3e:20:81:99:c6:83:fc:ca:aa:74:64:f1:ec:
d0:ac:87:7d:92:86:51:ba:f4:b8:a8:d6:fe:95:ea:
5b:85:08:f9:c8:3c:53:5d:19:d3:5a:81:ea:b3:7a:
eb:22:18:33:3b:7a:2e:b9:51:cd:ba:4d:b4:53:59:
5d:bb:4c:0f:70:0b:b6:15:82:d6:c2:2c:7b:1a:d4:
8e:67:c9:53:54:e1:79:3c:0e:bc:37:bb:16:f8:1f:
f9:34:d5:27:d7:58:e3:c7:e9:1c:a3:6c:17:ec:90:
5d:60:4b:5f:af:bf:7c:e9:f8:f6:5f:0a:21:f6:22:
07:d2:51:3e:e8:80:fb:74:1d:42:92:ec:72:82:c9:
54:f2:9d:db:40:64:bd:3f:c2:09:21:13:d6:b2:3f:
be:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8C:6D:99:02:E7:72:B6:3D:6D:3F:61:C3:D6:A2:01:76:31:08:92
X509v3 Authority Key Identifier:
keyid:04:F7:D8:E6:71:AC:7D:0A:0F:EE:B7:4E:4B:E9:C9:C1:3E:B2:95:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b4:2d:0c:04:f3:55:7f:38:04:b8:cf:c4:49:d7:5b:4e:4f:
e5:db:77:b2:53:71:52:43:8e:8f:0f:9a:ea:46:6e:d5:59:73:
ca:ed:ce:6d:71:50:6b:3c:b4:39:71:5d:b4:f5:11:50:58:03:
7c:62:0f:af:ae:22:02:c5:42:5b:71:6b:9d:8e:7f:18:21:19:
ee:5e:2f:5f:7c:82:4a:a5:73:94:f8:77:83:cc:ae:89:f8:00:
a6:0e:53:21:0d:75:dc:c9:bc:a2:1d:8e:e2:47:95:e6:d9:1e:
6b:5c:dc:f0:55:9c:27:9a:87:c4:13:5b:d4:cd:15:12:f8:c8:
1c:b9:42:d6:3b:a3:a6:c1:77:12:9a:fd:9c:84:7a:ae:7d:db:
ce:ff:38:20:02:79:0f:b4:2a:b9:9a:99:7a:ca:a6:05:48:63:
84:87:a9:ec:af:44:f9:75:22:7a:f9:e1:29:6c:c8:ca:ff:1c:
33:32:98:e6:e4:6a:3f:b6:6e:07:eb:6b:9b:c3:6e:38:ba:d1:
1e:c3:2b:4a:34:c5:0c:a8:39:48:6e:0d:0b:79:06:a5:34:d5:
96:53:36:8c:bb:2f:3c:5c:c9:1f:a6:98:36:7d:fc:32:2a:1a:
ce:42:83:f0:96:a5:7c:c0:de:45:9e:81:bc:9a:1f:a7:01:59:
dd:3b:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:58:43 2025 by rpki-client