Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: f8T8LnSzClmAtLWLBYhZudZmlNdvV7KnN4mXeU1J1Og=
Subject key identifier: 69:E0:AA:8C:48:F7:69:E7:F8:50:54:50:52:96:1D:0A:BC:47:CF:3D
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 0195E00F9D95B15A53F0EF7D25B4DE022896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 104F
Signing time: Sat 29 Mar 2025 04:01:14 +0000
Manifest this update: Sat 29 Mar 2025 04:01:14 +0000
Manifest next update: Sun 30 Mar 2025 04:01:14 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: 54+sgXsztYHV4rvYhyJBOPSRABsUzjIQKswPB9B2Nak=)
2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=)
3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:9d:95:b1:5a:53:f0:ef:7d:25:b4:de:02:28:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Mar 29 04:01:14 2025 GMT
Not After : Mar 30 04:01:14 2025 GMT
Subject: CN=69e0aa8c48f769e7f850545052961d0abc47cf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:77:a6:79:27:87:13:74:0f:f1:43:94:03:
42:2e:c9:22:72:0c:62:22:95:87:74:55:b0:02:dc:
d1:90:58:4c:7d:ee:f5:83:0e:c0:10:00:99:21:1c:
44:fc:1e:66:f1:7f:51:43:f5:e6:ac:f4:ec:ea:e5:
07:7c:d8:1d:83:d1:15:6c:94:ce:7c:44:22:99:89:
86:9b:c1:f2:e1:16:bf:c5:62:fe:5e:15:a6:5d:45:
fb:87:11:75:e6:b9:65:53:6a:f0:0b:39:da:85:41:
61:d9:cf:a6:c8:71:76:fe:c7:0f:b8:e1:7d:24:39:
15:91:db:fd:57:56:19:31:1b:2e:c2:99:fc:75:22:
26:4d:5a:99:54:be:bd:be:83:1d:13:79:05:bd:39:
eb:06:72:e4:0c:50:b0:9d:5f:43:7c:da:8a:a8:df:
2e:a1:64:ff:5b:78:f2:0a:7b:8c:3c:f8:21:8c:4c:
d9:85:6d:15:a3:84:d6:b5:d8:d2:ab:0f:0a:f5:5b:
93:55:51:7a:73:76:96:af:ae:03:42:14:c9:82:c2:
69:18:2b:dd:fd:50:6d:29:77:82:93:b6:10:2f:3f:
14:30:dc:2f:cd:06:d8:a7:3b:1e:67:fd:2d:b5:54:
21:c7:fe:4b:bf:2f:d4:14:6f:fe:db:b9:fb:4c:43:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E0:AA:8C:48:F7:69:E7:F8:50:54:50:52:96:1D:0A:BC:47:CF:3D
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:80:d0:53:32:0a:27:19:cc:11:b2:70:47:c9:60:43:13:18:
25:a7:3f:94:85:60:dc:ac:7a:98:b8:a0:4a:bf:77:3b:64:2c:
d5:70:48:65:37:7e:9b:a8:e3:e1:c4:a7:6e:68:be:84:6e:3f:
c8:1d:61:70:22:b3:21:3c:94:e8:dd:70:7f:a0:28:05:b2:6f:
92:87:78:09:5d:87:1a:1c:43:52:79:a0:f8:0c:5f:61:16:36:
e4:48:04:16:4e:f9:ff:06:f2:fc:eb:c1:3b:ef:1c:e8:0b:88:
54:40:20:77:6d:47:0d:fd:32:99:05:9c:47:78:06:43:96:b0:
b1:96:c6:25:6b:73:cf:82:6a:c1:31:25:ef:66:d4:49:3f:d8:
dc:21:8f:70:fa:9a:fc:fa:3b:9c:17:f0:95:85:2d:48:e2:8f:
f2:fa:be:59:63:e4:e9:a7:96:cb:71:e3:bc:65:17:c6:5a:7d:
7b:dd:71:c6:9e:d7:7b:e0:0c:a6:07:af:46:b9:b5:65:3e:1b:
b3:48:23:aa:da:f2:00:6d:5c:e9:0f:e9:ea:24:94:64:dd:3c:
56:45:07:0f:25:38:37:e0:3f:0c:90:cf:28:95:95:00:68:14:
d3:65:89:1b:d5:d8:8d:11:e6:8d:fc:c1:4d:54:7f:6e:7c:6b:
22:7b:a0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:58 2025 by rpki-client