Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/Hy-7A3stmMR0tipg7IjaDNLjfGE.mft
File: Hy-7A3stmMR0tipg7IjaDNLjfGE.mft (raw, json)
Hash identifier: BFPG5O7JN598qraXtwrwnT/rcDyQL6FsynNMo116LR0=
Subject key identifier: 71:55:A9:36:68:7D:83:7A:D4:90:7E:8F:10:6E:38:ED:F8:15:BC:A0
Authority key identifier: 1F:2F:BB:03:7B:2D:98:C4:74:B6:2A:60:EC:88:DA:0C:D2:E3:7C:61
Certificate issuer: /CN=1f2fbb037b2d98c474b62a60ec88da0cd2e37c61
Certificate serial: 018EE5EBECF7938DBC7C31BF348DE4A7C28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hy-7A3stmMR0tipg7IjaDNLjfGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/Hy-7A3stmMR0tipg7IjaDNLjfGE.mft
Manifest number: 08B5
Signing time: Tue 16 Apr 2024 08:00:27 +0000
Manifest this update: Tue 16 Apr 2024 08:00:27 +0000
Manifest next update: Wed 17 Apr 2024 08:00:27 +0000
Files and hashes: 1: Hy-7A3stmMR0tipg7IjaDNLjfGE.crl (hash: KoowoqEKM44LBiEBP4mQn/2GQnfFICB5/+87Fmy5KsM=)
2: V2P6D_uDTCyy93I1gqio7fwhvYU.roa (hash: XbrZvUoCuYMABfR5WGz3Aa0TY11jg8XJeUq+TkhN0Ns=)
3: v-p1LWi7Lb-JQMbx0_kkc4Qlc7o.roa (hash: Gzle9aTofgGLRzEKDvEks9txbPZbRuXiFQzIPufM5c0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e5:eb:ec:f7:93:8d:bc:7c:31:bf:34:8d:e4:a7:c2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2fbb037b2d98c474b62a60ec88da0cd2e37c61
Validity
Not Before: Apr 16 08:00:27 2024 GMT
Not After : Apr 17 08:00:27 2024 GMT
Subject: CN=7155a936687d837ad4907e8f106e38edf815bca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:07:b4:89:5b:94:95:75:26:18:b0:41:05:
a5:af:40:82:22:f7:14:51:9e:a6:11:00:9c:10:63:
f3:4f:7d:0c:89:e2:0e:5b:3a:c7:47:43:41:8d:60:
2f:c2:b8:f0:71:82:02:78:fc:ea:c4:2f:b7:14:f3:
65:a7:b7:3c:0b:b0:4d:ad:07:1c:69:02:b6:a2:89:
9e:b8:03:20:06:5c:07:e0:de:f5:cb:a9:73:7c:06:
24:74:e4:d7:56:e9:9c:87:c3:25:92:ac:82:5d:f2:
82:d9:5f:28:19:4d:7c:03:20:7b:df:33:67:8c:8a:
97:a9:f2:85:8b:30:c2:a7:af:d0:3e:c8:3c:7d:44:
48:fc:31:ee:5c:7b:12:0e:f7:f6:99:bb:70:f8:3a:
13:60:2b:26:9a:3e:91:7a:28:6c:de:86:3f:ba:f2:
b0:cb:fa:b7:67:04:9b:09:b5:2c:12:fb:09:ba:6b:
05:4e:fc:72:69:43:aa:69:ea:ea:40:56:ad:49:5c:
97:da:88:d7:3a:60:3f:6e:b7:49:65:97:35:0c:d9:
91:11:08:f7:67:0b:aa:61:68:53:96:3f:b1:f2:ce:
e2:d1:6c:21:af:14:a9:15:a8:ff:03:10:be:6e:a9:
3e:05:66:64:1d:d2:f3:aa:13:08:7c:e1:f1:88:01:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:55:A9:36:68:7D:83:7A:D4:90:7E:8F:10:6E:38:ED:F8:15:BC:A0
X509v3 Authority Key Identifier:
keyid:1F:2F:BB:03:7B:2D:98:C4:74:B6:2A:60:EC:88:DA:0C:D2:E3:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hy-7A3stmMR0tipg7IjaDNLjfGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/Hy-7A3stmMR0tipg7IjaDNLjfGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/Hy-7A3stmMR0tipg7IjaDNLjfGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:71:36:2e:fb:30:c4:c0:96:c7:2f:28:c1:1d:c6:52:b1:c8:
98:ef:a0:0b:99:52:d5:99:ee:11:12:38:f6:36:28:c7:5c:c2:
9a:db:36:16:0f:1b:39:37:3e:6f:7f:b9:d4:cc:10:e5:65:49:
1d:6d:08:b6:cb:b3:d4:b6:12:12:fb:34:2b:73:40:e3:fb:1c:
7d:fd:e0:85:2d:e3:11:92:a0:ed:be:0b:08:11:e0:89:85:16:
b4:b3:c5:e9:dc:14:5e:63:9e:28:37:50:5f:67:b6:21:74:d4:
7c:6b:98:9a:60:04:88:81:52:12:50:a1:9d:10:e5:99:60:64:
66:2f:d1:5a:90:81:7e:52:69:99:c4:7a:04:0c:ff:3d:94:75:
d9:f8:43:f5:f5:1f:b2:17:87:ae:68:d2:92:45:00:4d:5f:1e:
31:08:6f:21:2a:60:3f:67:95:6e:b6:c1:16:ea:d8:15:20:78:
d8:6e:00:79:7a:ef:a3:07:e8:3f:b1:08:1b:66:8f:1d:d3:fd:
c8:e5:26:d6:71:ed:37:d1:a7:9c:b4:08:e1:7e:ac:ba:b8:3d:
61:4e:7b:17:ae:95:a5:60:93:fd:7d:4e:01:32:c4:0c:dc:8a:
50:2d:d0:bb:19:44:da:af:da:55:d5:6c:9b:a8:c7:d8:19:4f:
df:3e:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:41:55 2025 by rpki-client