Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
File: OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft (raw, json)
Hash identifier: W0zNP5W/kOAXqkokiyjW89HKRlty3D9h5pB0473KAiM=
Subject key identifier: DE:DE:0D:72:84:15:97:7E:3F:95:93:8F:83:B7:C4:31:27:CB:FE:AE
Authority key identifier: 39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
Certificate issuer: /CN=39f086ca6211bb95d0643089c7da576fe67c2152
Certificate serial: 01979A8462BC551F95D9D7D68EFF792F771E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
Manifest number: 0CE2
Signing time: Mon 23 Jun 2025 02:00:56 +0000
Manifest this update: Mon 23 Jun 2025 02:00:56 +0000
Manifest next update: Tue 24 Jun 2025 02:00:56 +0000
Files and hashes: 1: MxMYPJuJ2ahCKlSKTQjVM4W37Zw.roa (hash: 9t6kBtgaiu9wCZTnovzIZuJxrTyQ2HBBvSidXlmnqaM=)
2: OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl (hash: vMrA8ZxawvpUuBBUiL84jCETITdop5vru6Nh6t9EdFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9a:84:62:bc:55:1f:95:d9:d7:d6:8e:ff:79:2f:77:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f086ca6211bb95d0643089c7da576fe67c2152
Validity
Not Before: Jun 23 02:00:56 2025 GMT
Not After : Jun 24 02:00:56 2025 GMT
Subject: CN=dede0d728415977e3f95938f83b7c43127cbfeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:a4:2d:7d:35:c7:bf:f1:85:23:c0:69:d3:
fb:f0:7d:8f:8b:c1:b3:83:ef:c3:ed:af:dd:2b:da:
39:ba:0d:c2:06:03:55:6d:92:e6:f2:c5:dd:1b:20:
ab:c2:fd:87:3e:f8:e7:b1:62:bc:77:7b:14:ea:cd:
9e:53:9f:59:8f:db:aa:78:25:ed:02:b4:36:83:15:
a9:d4:0f:25:58:da:5c:3f:77:6c:0b:f9:3e:6f:4f:
f4:85:84:66:23:f8:b6:56:27:aa:13:49:6e:14:8e:
a9:c2:c2:81:ab:63:b4:e5:f7:cb:12:5c:1a:b2:ee:
08:bc:98:03:46:1e:4a:5a:9b:b9:a7:87:0a:be:7d:
3a:77:56:3b:c4:e1:60:3a:da:5b:ae:a4:36:a5:66:
a0:22:11:29:76:39:37:02:dc:d0:04:39:2d:32:48:
ec:e3:e4:77:fb:66:1b:a6:45:f8:bb:3f:fd:02:30:
d9:98:ad:ac:90:44:41:56:bc:43:6f:a5:62:29:cf:
97:ed:73:22:9e:3d:89:55:d9:c7:04:9c:04:39:4e:
a8:da:5a:9b:80:a0:8b:72:93:53:12:0a:3f:ce:13:
5e:b5:29:ec:63:7b:07:19:15:bb:73:b6:01:18:e9:
e0:a4:23:86:b2:ae:b4:00:78:94:c7:6c:ac:60:c9:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DE:0D:72:84:15:97:7E:3F:95:93:8F:83:B7:C4:31:27:CB:FE:AE
X509v3 Authority Key Identifier:
keyid:39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a6:fa:2d:8e:68:78:4d:ea:4e:b2:b3:2e:27:cb:73:d1:c1:
df:11:50:72:bc:a7:a8:cf:0d:77:4b:cf:64:42:5d:d1:c3:23:
52:20:a1:d9:04:5a:cd:79:e4:b3:eb:3b:68:25:e3:8c:e3:f6:
31:36:32:9f:35:aa:c0:b9:44:96:6f:5b:ec:60:ea:79:78:6a:
30:5b:a7:ba:e9:c9:c1:5f:b6:27:51:cd:78:c8:9a:04:75:22:
68:66:be:ed:66:5f:a2:3f:e4:fe:6a:6c:ba:b3:95:f9:ad:51:
15:2a:f1:2a:43:10:65:42:f6:77:53:37:ff:18:43:17:49:64:
65:ae:5f:99:e2:db:f3:e7:81:64:cd:54:90:34:3b:95:1b:e2:
41:ea:9f:a8:d2:a5:82:54:6c:81:da:b3:aa:9b:98:01:17:80:
27:cb:30:81:a8:ff:cc:26:28:76:bd:e7:5a:28:1e:ce:cb:59:
ab:49:83:f9:d3:3e:e6:18:30:95:55:6f:79:ec:32:4c:94:37:
19:bf:5d:dd:85:ac:5b:e5:6d:42:ae:d8:3f:71:44:11:74:80:
cf:cb:64:59:6f:d0:de:a5:b4:28:25:19:3c:55:ce:9b:69:c0:
51:31:18:0b:be:5a:e6:1a:c4:d5:08:5d:22:bd:87:0d:00:11:
e5:b7:63:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:24:12 2025 by rpki-client