Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: wclcMkl4vgNKTOac04srEOrUmVwqxX+pG6eToXqF32g=
Subject key identifier: A8:0A:93:54:BC:86:F8:6A:51:F5:F6:75:06:BA:DF:33:DA:DB:F4:22
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 0195E0B464A1B28CB5C12788EED6F8B6666B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 08BD
Signing time: Sat 29 Mar 2025 07:01:13 +0000
Manifest this update: Sat 29 Mar 2025 07:01:13 +0000
Manifest next update: Sun 30 Mar 2025 07:01:13 +0000
Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: J1HKy5W61XaW2UmH2gmqalz4zXxsSTC1yUQ11r68u/M=)
3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:64:a1:b2:8c:b5:c1:27:88:ee:d6:f8:b6:66:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Mar 29 07:01:13 2025 GMT
Not After : Mar 30 07:01:13 2025 GMT
Subject: CN=a80a9354bc86f86a51f5f67506badf33dadbf422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:86:ef:92:2b:64:9b:4f:df:2a:7a:5e:19:
53:d0:ed:cd:4e:2b:79:94:c0:11:6d:17:9a:84:ba:
f8:b7:f4:9c:3a:73:ea:2d:a0:34:09:cf:79:86:3b:
29:75:22:db:69:6f:19:f7:61:4a:3b:71:81:81:9b:
6e:ff:84:1c:f3:34:45:df:94:82:4e:d3:e3:db:5d:
9b:9f:9f:79:72:1a:e9:0c:b7:ae:29:af:da:c3:8e:
1c:4a:9c:45:65:47:b3:a1:66:d3:f4:e3:80:e7:8c:
15:78:51:30:d1:f5:9e:27:56:b9:21:ed:91:7a:25:
b9:c8:38:2c:ed:b9:4d:4b:49:b2:63:99:96:0e:af:
0c:b2:4f:a4:d7:45:8b:c3:a2:34:02:30:39:54:89:
71:23:47:8a:b6:96:61:2c:25:cf:2b:04:23:f5:8c:
36:a7:45:b1:6a:41:83:f7:a2:d7:73:0b:40:f2:38:
63:cb:01:19:7a:f0:f5:ba:18:98:39:81:88:2f:ae:
ca:77:a3:27:f7:bd:81:1e:25:02:5c:aa:1c:6b:f2:
e7:1d:52:66:ec:f8:c1:88:fd:e6:c9:73:16:49:ec:
70:2d:08:be:10:7a:22:c6:2c:5b:1e:99:a2:9d:d1:
0c:9e:c2:46:30:f9:a6:28:e0:b3:b5:66:f9:f2:33:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0A:93:54:BC:86:F8:6A:51:F5:F6:75:06:BA:DF:33:DA:DB:F4:22
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e2:ba:f7:3b:23:d2:5e:15:7e:12:0d:56:fc:58:5a:cd:03:
18:3f:50:d4:6a:75:65:1c:bc:13:c5:e7:c6:49:e1:ae:5f:e8:
c5:4e:28:b8:b2:29:4b:a4:d7:aa:bd:b5:68:ec:ef:cf:a5:91:
b5:7d:26:93:dd:f1:30:db:0a:20:29:5e:6f:6a:09:af:dd:76:
1f:f6:ad:62:14:a1:f8:39:8d:ab:bf:7a:8a:2d:e2:ff:eb:61:
9f:d4:d7:0e:58:eb:d5:a8:a5:17:dd:27:8a:4f:37:b1:3d:02:
4c:cb:0d:f3:80:48:73:19:c3:0d:7c:6c:7d:2b:e6:5e:e4:1b:
69:04:72:ea:e2:75:46:43:4b:ff:6c:34:d9:75:41:e0:22:82:
13:14:da:e2:3e:8a:17:0a:61:20:b9:71:6c:4a:98:aa:04:47:
d6:3f:13:b3:af:81:95:d1:83:e2:78:9d:af:68:93:b5:13:79:
8c:88:dc:ad:c2:ee:0b:32:73:16:2f:99:8c:97:a6:e7:7b:e4:
b1:6b:17:78:91:f3:16:b3:6f:bd:f6:76:21:25:13:f8:30:0b:
46:6a:f4:18:30:39:ee:98:36:3a:7a:2c:42:37:83:7e:8c:25:
4b:89:4a:39:06:24:c6:a4:a9:47:4b:de:1e:7f:d8:c0:67:0e:
3b:2d:a6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:30:38 2025 by rpki-client