Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
File: DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft (raw, json)
Hash identifier: U/BntYl4wh3Y9MMvgINcgNnOuiLmI4/K9hX8OSKzxew=
Subject key identifier: 53:12:29:46:3C:D9:23:F8:42:FA:6B:34:C1:90:BA:A2:BE:28:57:72
Authority key identifier: 0D:9D:B2:F3:C0:AD:EA:B3:76:7C:0B:31:72:18:45:AB:3D:44:5D:1C
Certificate issuer: /CN=0d9db2f3c0adeab3767c0b31721845ab3d445d1c
Certificate serial: 01957EDB49A454301526B3665DF1D2CCDCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
Manifest number: 0438
Signing time: Mon 10 Mar 2025 07:00:55 +0000
Manifest this update: Mon 10 Mar 2025 07:00:55 +0000
Manifest next update: Tue 11 Mar 2025 07:00:55 +0000
Files and hashes: 1: DZ2y88Ct6rN2fAsxchhFqz1EXRw.crl (hash: HbSLr9wiAPoA+hj7cICDpcWLTHoEeGgAu3K27//oBi0=)
2: iQmuyfyS-VZmfPFKC0Z9AaIC4kY.roa (hash: 7DCQpBOfhSoaH0TuGwai+ahzTdDtSNMxfs2ftu0Ew9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:db:49:a4:54:30:15:26:b3:66:5d:f1:d2:cc:dc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9db2f3c0adeab3767c0b31721845ab3d445d1c
Validity
Not Before: Mar 10 07:00:55 2025 GMT
Not After : Mar 11 07:00:55 2025 GMT
Subject: CN=531229463cd923f842fa6b34c190baa2be285772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:67:65:a3:f4:cd:a3:87:45:ac:52:2e:c7:
46:cf:8d:03:04:31:21:4a:45:72:d4:79:1c:77:8d:
7d:fb:fb:3a:bf:3f:96:bf:70:66:24:35:3c:8c:0c:
dc:e2:7d:05:9f:ef:62:00:05:f2:a0:7e:27:f8:39:
d5:2d:c9:b3:8d:10:91:06:6b:4e:61:8a:9c:4f:8a:
52:bd:ca:1d:84:03:b8:0e:c6:d9:40:b7:60:d4:99:
60:bc:04:3f:2e:92:a2:a1:76:a1:06:87:26:57:36:
05:24:54:f0:8e:70:a0:39:78:a6:f0:74:09:86:b9:
4b:cb:78:b6:c8:e3:7c:91:7b:df:6e:9b:8d:98:fb:
20:95:28:bf:4d:7f:7c:5a:d2:58:2d:9c:e6:46:02:
b6:42:a6:b8:fb:03:eb:e7:da:47:d1:7f:f8:c1:16:
b7:29:d9:e5:78:f9:21:fd:f4:e4:c9:7a:3f:71:4f:
d4:1b:be:c9:72:78:af:65:15:fc:8a:5c:f7:d4:e8:
e1:dd:1f:16:f5:64:e1:4b:58:49:cd:1e:76:93:46:
22:d4:a7:a6:09:a3:5b:d5:4b:5e:e4:da:01:d2:26:
e0:42:67:ae:93:02:08:62:ef:5c:9f:b6:69:cd:bd:
d8:55:a7:a0:f7:e8:0b:dd:cf:dc:54:66:95:ab:25:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:12:29:46:3C:D9:23:F8:42:FA:6B:34:C1:90:BA:A2:BE:28:57:72
X509v3 Authority Key Identifier:
keyid:0D:9D:B2:F3:C0:AD:EA:B3:76:7C:0B:31:72:18:45:AB:3D:44:5D:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:24:54:bb:e9:fb:67:30:85:df:a3:9a:7b:b2:7b:0b:f1:83:
19:bf:41:8b:16:d0:d3:f2:bb:e8:d3:1e:10:b8:94:a0:b7:9a:
f6:d7:76:66:4b:9d:65:04:0d:ae:26:aa:70:81:5a:43:99:07:
b5:6f:0b:6b:11:7d:08:fe:04:d2:11:fd:46:cd:5d:d8:4b:39:
26:e4:12:84:cf:b9:10:a8:07:24:cd:6b:72:47:6f:11:99:cf:
7e:69:c2:b2:4c:1f:52:7f:c7:66:4f:0d:d2:d4:74:6d:60:66:
0e:c9:78:e2:a7:f4:38:bb:83:bb:b9:8c:00:21:1e:6f:e1:ed:
94:9d:74:a5:c5:94:6d:8d:09:ce:5d:7d:e3:f3:97:b1:a3:b1:
ea:ee:61:57:e6:a7:88:fd:e9:d3:50:3f:97:7e:46:08:86:77:
ed:c8:d1:20:42:13:f5:c1:73:01:13:99:55:e8:4c:bb:28:5d:
40:58:ae:21:12:ce:a2:ff:3b:3f:15:da:20:09:9e:4c:83:7b:
6f:b9:69:2e:e9:1b:8b:21:06:f8:2a:c6:e3:a1:6e:38:56:aa:
ff:62:dc:5c:92:a6:86:31:8b:82:dc:77:1c:f4:22:ff:ce:b8:
c0:cf:13:f3:3d:63:1b:b1:da:a4:7e:16:81:03:ff:03:1f:7b:
04:5d:0e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:06:06 2025 by rpki-client