Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
File: XnKDhygnB8uQxfqebs30S2IGJdg.mft (raw, json)
Hash identifier: FquebhJMtbtoVg+4pqiwV+MpkmIOxQrvmAEKUnbCmCE=
Subject key identifier: 34:41:EF:98:18:8A:B5:18:4C:A7:B9:02:83:FF:98:3C:0C:4F:EB:CF
Authority key identifier: 5E:72:83:87:28:27:07:CB:90:C5:FA:9E:6E:CD:F4:4B:62:06:25:D8
Certificate issuer: /CN=5e728387282707cb90c5fa9e6ecdf44b620625d8
Certificate serial: 0195E0B438B57C1BBCDE125AF69D34FC52A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnKDhygnB8uQxfqebs30S2IGJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
Manifest number: 06B7
Signing time: Sat 29 Mar 2025 07:01:02 +0000
Manifest this update: Sat 29 Mar 2025 07:01:02 +0000
Manifest next update: Sun 30 Mar 2025 07:01:02 +0000
Files and hashes: 1: XnKDhygnB8uQxfqebs30S2IGJdg.crl (hash: pfS3+JL6xsHFpCjAw/GSNHSsanSrpNNiefMLpudNtz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:38:b5:7c:1b:bc:de:12:5a:f6:9d:34:fc:52:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e728387282707cb90c5fa9e6ecdf44b620625d8
Validity
Not Before: Mar 29 07:01:02 2025 GMT
Not After : Mar 30 07:01:02 2025 GMT
Subject: CN=3441ef98188ab5184ca7b90283ff983c0c4febcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:fe:b4:51:b0:79:28:bf:6b:77:c2:a6:6e:
96:8e:1d:30:67:08:94:f4:25:f8:97:1f:6d:cf:17:
b7:fa:08:7a:56:18:e6:30:70:8b:43:21:d1:2a:39:
0b:e5:eb:7b:6f:64:5e:7f:44:21:98:3a:73:6f:e8:
96:78:5d:8c:68:3d:63:c7:e2:a4:69:96:68:2d:84:
da:8d:7e:c0:2c:23:6c:3a:c4:ef:89:c9:ac:f5:9e:
e6:12:80:11:a3:54:14:95:bf:f6:0d:f0:64:95:19:
c2:8e:e7:cd:d7:ae:cf:ca:62:91:79:b1:a2:e0:86:
6c:dc:e1:0b:6b:8a:99:c7:15:c8:02:f0:6d:4b:89:
59:e5:4f:0f:17:46:e2:ea:4e:a7:30:3c:e1:63:48:
c9:77:92:c4:de:79:2b:1c:77:f5:f1:3f:9c:00:2f:
4d:84:a0:34:3b:03:92:a8:12:96:23:c9:8d:f5:07:
f7:86:e4:a0:2e:cf:fe:ec:df:73:09:c9:27:ac:32:
14:b6:32:8c:90:74:01:63:97:47:c3:47:aa:1d:38:
d9:b2:a0:2f:71:da:fb:c6:23:a3:35:c4:af:94:f1:
85:72:21:8a:0c:be:3a:6a:34:a3:43:91:90:45:ca:
24:b9:fd:43:f9:1f:cb:85:83:1e:4d:e5:83:75:3d:
00:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:41:EF:98:18:8A:B5:18:4C:A7:B9:02:83:FF:98:3C:0C:4F:EB:CF
X509v3 Authority Key Identifier:
keyid:5E:72:83:87:28:27:07:CB:90:C5:FA:9E:6E:CD:F4:4B:62:06:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnKDhygnB8uQxfqebs30S2IGJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f5:fa:2f:d2:22:c5:28:c7:c5:44:2f:4b:50:5b:18:cf:a5:
13:98:3a:c7:1b:d4:07:74:b4:b7:43:4b:e6:0b:aa:e8:15:49:
6a:d8:16:15:1e:c1:33:79:7e:9c:dc:b9:27:92:b5:a1:0d:50:
39:05:d9:e7:62:19:9e:b4:65:52:6f:eb:cd:6c:d4:80:c0:a1:
15:fb:43:6b:cc:aa:08:43:4f:33:bb:be:40:60:c2:ca:a0:cd:
ce:67:4c:47:e7:8a:4d:e5:41:b8:44:be:52:fd:4d:bc:22:ee:
53:e4:d7:dc:36:84:9b:64:c8:ac:eb:9c:f5:1e:29:4e:cb:f2:
cc:b8:ae:8b:d0:fd:8c:1b:16:47:30:51:0d:72:20:d7:64:a7:
b6:d4:bf:f3:09:42:3e:a8:b3:0d:23:7b:b2:e4:aa:b4:27:ab:
93:b7:e7:df:52:d6:ae:12:3d:62:99:80:4c:35:d5:fe:8e:e1:
af:72:50:d5:08:60:1a:90:26:73:c5:68:93:37:03:e7:c6:94:
87:9e:02:bb:fb:db:cc:8b:be:63:6a:65:60:86:b1:3d:a7:95:
70:b5:48:9f:90:f0:1b:7a:f9:f0:79:6b:07:c1:ba:07:1f:b5:
d4:f3:10:46:37:aa:85:06:09:37:56:ad:a2:c4:cf:66:f8:9b:
e0:cf:1f:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtDi1fBu83hJa9p00/FKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzI4Mzg3MjgyNzA3Y2I5MGM1ZmE5ZTZlY2RmNDRiNjIw
NjI1ZDgwHhcNMjUwMzI5MDcwMTAyWhcNMjUwMzMwMDcwMTAyWjAzMTEwLwYDVQQD
EygzNDQxZWY5ODE4OGFiNTE4NGNhN2I5MDI4M2ZmOTgzYzBjNGZlYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF3+tFGweSi/a3fCpm6Wjh0wZwiU
9CX4lx9tzxe3+gh6VhjmMHCLQyHRKjkL5et7b2Ref0QhmDpzb+iWeF2MaD1jx+Kk
aZZoLYTajX7ALCNsOsTvicms9Z7mEoARo1QUlb/2DfBklRnCjufN167PymKRebGi
4IZs3OELa4qZxxXIAvBtS4lZ5U8PF0bi6k6nMDzhY0jJd5LE3nkrHHf18T+cAC9N
hKA0OwOSqBKWI8mN9Qf3huSgLs/+7N9zCcknrDIUtjKMkHQBY5dHw0eqHTjZsqAv
cdr7xiOjNcSvlPGFciGKDL46ajSjQ5GQRcokuf1D+R/LhYMeTeWDdT0AGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRB75gYirUYTKe5AoP/mDwMT+vPMB8GA1UdIwQY
MBaAFF5yg4coJwfLkMX6nm7N9EtiBiXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5LRGh5Z25COHVReGZxZWJzMzBTMklHSmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83Mzk1ZWUtNDc3ZC00ZmFlLWFhOTIt
NmI5ZGRlY2Q3NTA2LzEvWG5LRGh5Z25COHVReGZxZWJzMzBTMklHSmRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83Mzk1ZWUtNDc3ZC00ZmFlLWFhOTItNmI5ZGRlY2Q3NTA2
LzEvWG5LRGh5Z25COHVReGZxZWJzMzBTMklHSmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePX6L9Ii
xSjHxUQvS1BbGM+lE5g6xxvUB3S0t0NL5guq6BVJatgWFR7BM3l+nNy5J5K1oQ1Q
OQXZ52IZnrRlUm/rzWzUgMChFftDa8yqCENPM7u+QGDCyqDNzmdMR+eKTeVBuES+
Uv1NvCLuU+TX3DaEm2TIrOuc9R4pTsvyzLiui9D9jBsWRzBRDXIg12SnttS/8wlC
PqizDSN7suSqtCerk7fn31LWrhI9YpmATDXV/o7hr3JQ1QhgGpAmc8VokzcD58aU
h54Cu/vbzIu+Y2plYIaxPaeVcLVIn5DwG3r58HlrB8G6Bx+11PMQRjeqhQYJN1at
osTPZvib4M8fww==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:27:44 2025 by rpki-client