Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft
File: 23D444E7DED3712847CAE2B46DDD886FC2914D54.mft (raw, json)
Hash identifier: jJh147AVcLYMzkEyPPgnJ3ztZPSMeUBxVEo19k/vTX4=
Subject key identifier: AC:2D:06:53:07:58:52:E4:31:BC:BE:4D:74:B9:AE:34:42:F7:F1:07
Authority key identifier: 23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54
Certificate issuer: /CN=23D444E7DED3712847CAE2B46DDD886FC2914D54
Certificate serial: 0B34D0DED14318950BA65A64505F09414CFEF091
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft
Manifest number: 03E8
Signing time: Wed 02 Jul 2025 20:54:38 +0000
Manifest this update: Wed 02 Jul 2025 20:49:38 +0000
Manifest next update: Thu 03 Jul 2025 21:45:38 +0000
Files and hashes: 1: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: tfZTODACLawFck6n6yim45qqX0QKQWHGw0OfZn9hHA4=)
2: 23D444E7DED3712847CAE2B46DDD886FC2914D54.crl (hash: Qkgqig2OZyyIPh3xEQGgSdix8Sl8oQuPZOcm1YOBT4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:34:d0:de:d1:43:18:95:0b:a6:5a:64:50:5f:09:41:4c:fe:f0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23D444E7DED3712847CAE2B46DDD886FC2914D54
Validity
Not Before: Jul 2 20:49:38 2025 GMT
Not After : Jul 3 21:45:38 2025 GMT
Subject: CN=AC2D0653075852E431BCBE4D74B9AE3442F7F107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7e:8e:cb:d0:95:12:c6:44:a7:3d:3f:71:1a:
eb:7b:1a:bf:ed:b2:20:98:d0:2b:27:88:8f:14:d1:
fc:bd:f1:28:62:78:29:cd:04:c5:bb:bc:f6:01:0e:
c8:bf:ed:e8:e4:5c:bb:5a:24:29:2b:18:d4:e6:4e:
59:e8:c5:40:ba:02:be:b0:87:d1:0d:c9:44:36:b9:
a3:e2:05:39:4b:54:6a:a2:bd:8a:db:fa:e4:5f:85:
c2:60:78:5e:7a:62:d3:8b:1e:95:c4:5b:2f:5c:5b:
26:27:29:af:57:e5:02:f4:a8:0a:21:6e:0e:d7:2a:
d0:bd:61:01:fc:3e:a7:4b:fe:5b:eb:2c:de:4d:c0:
97:b4:9b:57:e0:92:42:67:9e:4b:bf:95:54:49:c9:
4d:8e:4b:3e:04:fd:28:7f:03:d1:2d:08:aa:9e:83:
67:56:0a:9b:5d:5b:c5:ea:2a:e3:4d:bc:2c:a7:0f:
64:f7:db:d8:cd:55:c8:1b:72:fd:95:0c:2e:0c:be:
3a:2a:16:57:b5:4a:19:c5:63:4c:71:cf:48:d0:28:
7a:d9:a2:5d:ef:a0:fa:5f:79:5f:34:33:bc:87:9f:
f1:7d:fd:2e:5b:55:88:98:90:21:5b:52:2a:ee:66:
fe:ec:24:1d:c2:6a:f4:41:1c:21:aa:41:28:93:fb:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2D:06:53:07:58:52:E4:31:BC:BE:4D:74:B9:AE:34:42:F7:F1:07
X509v3 Authority Key Identifier:
keyid:23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:53:a4:9a:ee:c3:e4:77:8f:fa:13:0b:e6:3f:f3:2f:12:e7:
b4:b5:4f:63:0d:df:66:cf:00:6a:14:80:e3:38:60:70:58:8e:
fb:17:92:70:7f:5f:d6:34:58:af:a7:62:21:1f:5e:93:9e:78:
19:95:0f:ae:07:99:f2:5e:c7:55:78:a1:7e:d4:fa:51:78:44:
14:e9:f9:e0:bb:76:1e:c9:f0:e1:32:62:ae:fe:d3:74:4a:dd:
21:5e:7c:a7:55:79:0d:29:62:d5:46:33:16:08:a3:e6:0e:9b:
51:c7:cb:9b:7c:da:73:e4:49:ed:3b:94:0e:57:e7:c6:e5:c0:
99:fc:37:57:d3:e8:70:a3:34:00:35:1a:6a:49:55:46:0b:d8:
4f:29:b7:54:54:eb:1e:e2:6d:14:2e:44:70:65:0a:f5:88:c1:
38:b5:dc:11:16:46:df:d9:1e:5b:c8:92:0b:41:6c:39:b6:d0:
f8:28:0d:78:37:7e:13:1a:4c:9c:be:c4:39:de:e3:39:1a:62:
04:c2:94:f8:b7:d4:2e:3a:76:e1:55:e9:3e:4d:27:61:d5:3b:
57:03:05:13:6d:2d:8e:dc:c1:fc:a6:d5:5e:06:28:c6:3d:c1:
db:b3:48:c8:7e:ed:46:a6:9a:80:04:96:83:cb:6a:14:ed:4f:
5e:95:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:39:56 2025 by rpki-client