Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
File: 2ygv2JcxfCyt17E5afbwFcOX4F0.mft (raw, json)
Hash identifier: pbobcEe3uD4B8LyWqqVTtmISN/9P4kNDADvTsxdv164=
Subject key identifier: B6:3E:88:50:71:4D:84:FA:A3:E8:5F:BC:23:F3:F9:1B:9D:72:FF:B5
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Certificate issuer: /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial: 0195E0EB038A5CB5DF500BD2153454ADEA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
Manifest number: 0420
Signing time: Sat 29 Mar 2025 08:00:53 +0000
Manifest this update: Sat 29 Mar 2025 08:00:53 +0000
Manifest next update: Sun 30 Mar 2025 08:00:53 +0000
Files and hashes: 1: 2uqD5zGZ2YzBCLr29oUkHyxLaOg.roa (hash: Rlx38ri/UsUpqTWWjiQxvpWbwT4B1nvpj+Qj3oYHyJI=)
2: 2ygv2JcxfCyt17E5afbwFcOX4F0.crl (hash: Nx2pU6MU/gUvAw7grQWoplfet97fIlyj50o76JRil3w=)
3: 8E0qGZiI3H1f7W6kT4F7Kkpy9TA.roa (hash: oJIUnSFr4nxPfIklC3jgxHnAbm0kguG5fFIKoWMYD0A=)
4: VjqdrxGTRj_HInStkdep02mDb9Q.roa (hash: FNpVRLOkWoRmhAFzENCKzeCXF5FLB71OdgzjA3hm4XA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:03:8a:5c:b5:df:50:0b:d2:15:34:54:ad:ea:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
Validity
Not Before: Mar 29 08:00:53 2025 GMT
Not After : Mar 30 08:00:53 2025 GMT
Subject: CN=b63e8850714d84faa3e85fbc23f3f91b9d72ffb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:93:f6:34:e3:d8:b5:da:b9:9b:16:44:3d:
87:17:61:88:5e:ad:57:ea:1e:40:e6:37:db:ab:2c:
2f:d0:fa:6b:10:b7:18:c7:3f:c7:d3:8e:c4:41:80:
3a:c5:33:2e:3c:39:d6:92:44:b9:5d:4b:ac:2b:6c:
c4:67:c1:be:7a:12:45:45:f1:4f:12:a3:48:46:0c:
d6:0b:d9:c2:91:ed:ec:63:d1:e8:07:85:ef:33:81:
5f:79:a7:5b:9c:d8:7c:36:06:25:d8:08:a7:27:52:
ea:b6:af:a6:ef:30:a3:ca:a5:a5:b9:f8:51:5a:f1:
b8:5e:cf:18:4b:91:04:1e:53:1d:c3:82:50:6c:b0:
c4:f0:6f:96:4c:ef:07:53:ba:73:b6:b5:c9:a7:05:
09:36:fb:69:65:45:57:a1:1f:4d:29:67:41:e2:5d:
35:ad:46:84:0d:10:56:50:85:40:2b:81:31:7a:0c:
0e:a4:00:08:b9:8e:03:81:30:de:44:c1:0d:7f:ce:
68:39:80:bb:53:a2:a7:22:67:93:67:ef:8c:6d:e7:
ae:10:e7:94:04:b5:fd:e6:ba:13:78:9b:72:1f:53:
69:a8:47:ce:e9:84:7a:c5:f0:a1:fd:2b:21:a5:8a:
bd:cf:e5:c0:24:b1:ce:bb:d2:8b:03:12:01:0d:9a:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3E:88:50:71:4D:84:FA:A3:E8:5F:BC:23:F3:F9:1B:9D:72:FF:B5
X509v3 Authority Key Identifier:
keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ba:b7:c2:02:c1:45:b1:25:58:bb:45:0a:e1:5a:39:83:64:
e3:d0:54:07:c4:b8:cd:0e:07:03:e1:fe:fb:41:1a:e6:db:b7:
9f:a9:1c:b1:6f:ca:f2:05:9d:92:e1:38:d6:a0:a6:50:79:bc:
03:f4:f8:13:50:42:07:c7:6e:9d:45:bc:46:37:31:79:e4:d2:
07:e2:67:a2:53:67:d4:86:bc:a2:70:f4:d0:a6:ec:5b:79:8e:
ab:43:e8:4d:be:37:bb:ee:91:b5:8d:8d:96:ef:92:33:0b:06:
8a:0d:0b:18:a2:5e:c7:7c:86:9f:f8:f8:c6:26:92:6a:5b:5c:
b0:00:f6:fd:17:96:cb:96:c1:b1:ad:6e:dd:8d:c1:88:40:95:
99:af:98:cd:d8:ca:46:2c:cc:ee:1b:42:85:68:ba:ad:81:f3:
5c:3d:0f:0c:a5:6c:77:b4:a9:86:dd:48:1d:75:f8:b5:47:d6:
65:7a:3f:ad:bf:52:d8:77:ab:52:20:c2:c3:02:eb:c4:fe:61:
98:2c:38:92:e9:38:ae:9a:16:e1:be:8b:45:18:d7:ea:a6:a7:
cf:db:44:22:e5:63:f2:0c:a1:da:d4:ad:e5:7f:63:37:60:ef:
c7:f7:09:6f:7e:7e:e4:a4:da:32:96:39:4a:6f:0b:3e:8c:ad:
b9:60:06:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:51:46 2025 by rpki-client