Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
File: sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json)
Hash identifier: 6w9DBS9TMHlE1EjgR7LYzQRt0fQX2/HSfEzdFGncaP4=
Subject key identifier: 33:0A:14:62:37:33:C3:71:1E:1C:2E:6D:61:E1:15:D2:92:D6:39:33
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial: 0195E15959A2BA23803C24BD2D4B30F56AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 10:01:24 +0000
Manifest this update: Sat 29 Mar 2025 10:01:24 +0000
Manifest next update: Sun 30 Mar 2025 10:01:24 +0000
Files and hashes: 1: DNhIHCVoBglUmAVlCkJ5G-L36yg.roa (hash: 31245JAwO/UkCcpQa4UanpWYM+ItoRpnBX/McoOb5tQ=)
2: FfGHuB6Qf_cay6wn_ZrJC4SPGUg.roa (hash: DYs9L8yM8et51Ym0pIsTXdtN2ADOJkVDLkBPalnCV9A=)
3: fIN0CuyWjIdLGQA-5hoaOxgsCEU.roa (hash: NyCjKtY4yfk/Nsn/Ck5PkA1Ia9CEltJSbyJgOPEbXmk=)
4: iipSuvIjR47VudmgbPEDa9JY9oY.roa (hash: UNIVy+xZ2R8yR9G0m1INDMtIUCeoWGaMGRk0QvHxxTQ=)
5: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: mhUtyTwVGqJyw0Kd3Sqm2EC5md8kaJSjU2gzKR+Ji4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:59:a2:ba:23:80:3c:24:bd:2d:4b:30:f5:6a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Validity
Not Before: Mar 29 10:01:24 2025 GMT
Not After : Mar 30 10:01:24 2025 GMT
Subject: CN=330a14623733c3711e1c2e6d61e115d292d63933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:01:53:22:c8:83:77:5f:d9:6a:cf:d9:ca:
87:7d:63:a3:b1:e0:1e:ca:55:44:a7:34:59:51:f9:
09:97:7a:89:07:9f:31:8e:fe:21:37:9d:9e:a6:1e:
a4:d9:67:eb:b3:85:77:45:88:45:1b:85:a0:06:12:
e6:13:ff:23:37:a1:8a:eb:87:46:af:49:55:82:3b:
d1:b1:97:38:68:90:e3:ea:52:e6:bb:42:b2:3e:96:
c6:09:53:ff:88:9d:02:cc:8e:4f:d0:8e:83:d3:a1:
b5:66:93:a1:09:9b:06:37:7d:e2:8e:f9:8d:2d:9d:
fa:47:36:97:2c:dd:4a:bf:19:45:06:fb:3c:62:65:
9a:4c:60:ba:3a:43:94:9b:02:dc:96:53:05:54:58:
53:44:2a:b6:3b:75:78:1b:2c:aa:d1:9f:91:0b:37:
c2:1e:df:47:da:5e:cf:d1:c9:fd:b8:e2:5c:37:32:
8c:35:85:68:a2:6a:56:eb:a9:fa:55:cb:6c:fa:f4:
71:3d:e4:d2:45:10:28:e5:7e:c8:fb:a5:17:f1:9b:
41:29:38:71:97:30:21:c2:4e:32:48:89:da:82:b0:
f0:e2:f5:5e:6e:e7:0c:0e:39:5b:de:c8:f5:e7:51:
f9:73:5d:c3:b4:6b:03:f1:a0:a2:ed:ab:91:fe:56:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0A:14:62:37:33:C3:71:1E:1C:2E:6D:61:E1:15:D2:92:D6:39:33
X509v3 Authority Key Identifier:
keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2f:7a:95:91:66:cd:62:14:e2:60:6e:8e:27:f9:55:ed:b0:
ca:9e:a5:68:e2:a6:a5:1d:fb:9b:37:14:80:c1:39:ac:67:b2:
4b:55:dc:e4:f6:84:34:9f:fe:2c:d9:fe:74:06:63:8f:aa:48:
59:ea:e0:9e:fa:87:de:d2:67:f2:79:e1:e0:5a:19:53:2f:b4:
64:4e:84:e3:c4:62:b7:dc:8d:0a:8c:cb:68:83:0d:af:fa:74:
89:24:16:35:7b:09:1b:f9:9e:36:e5:a2:0c:db:62:aa:ff:32:
db:cb:ca:63:e6:06:65:75:b7:26:25:2c:73:68:2c:85:f9:8a:
24:78:ce:25:ed:36:c4:e0:df:b7:8b:68:36:14:06:a9:16:cc:
b0:00:47:e7:f3:c8:17:4f:f7:f0:2c:cf:e6:e4:d1:5f:bd:31:
df:e3:f7:a9:57:9c:da:da:da:e0:da:2d:ec:8c:e1:10:21:1f:
6b:b6:dc:3a:23:28:bb:35:90:04:9c:9d:5a:74:0a:53:cc:33:
b9:34:f5:1c:90:6d:48:60:fe:c2:9a:b3:1b:ab:6d:67:fb:27:
8e:61:cd:51:c6:0e:44:20:e2:55:38:95:41:65:57:cf:c0:84:
07:f0:ab:8f:e8:49:9a:a9:25:fc:39:7f:0a:a0:c9:1b:ce:2d:
91:d6:3f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:51 2025 by rpki-client