Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: cUOyWqriD/OS50aWwQ1mEMsNGtT+vrRves8+pjYvrr8=
Subject key identifier: CD:AA:82:AE:78:F7:42:B8:79:90:2D:59:16:52:F1:5E:F9:29:C7:7C
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 0195E1593274DFAB80574F93C602E0309339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 12FD
Signing time: Sat 29 Mar 2025 10:01:13 +0000
Manifest this update: Sat 29 Mar 2025 10:01:13 +0000
Manifest next update: Sun 30 Mar 2025 10:01:13 +0000
Files and hashes: 1: ChY1pYRmqo4gHf3bQwXo87kO4Nw.roa (hash: b4fVB4MFOUGQYpV3kbDWZEsf3wE2N+b11phHSCf2ye8=)
2: Y0Nk9tl-qCa8DorGiEDjwrSmX0s.roa (hash: mzQKn7Y6MiSFmMsypQQoGywZaZjgp8BP9HplYmIAhgw=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: e5ZW8WXiq58cbDWVbuAFaE7Eav3CW7CGAL3oQ80XMYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:32:74:df:ab:80:57:4f:93:c6:02:e0:30:93:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Mar 29 10:01:13 2025 GMT
Not After : Mar 30 10:01:13 2025 GMT
Subject: CN=cdaa82ae78f742b879902d591652f15ef929c77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:fd:9b:a3:f5:ee:79:41:cf:5a:36:d1:c7:
d5:ff:ce:b1:74:24:84:83:c2:13:d6:70:6d:70:e9:
c1:a5:c3:79:79:17:4c:61:fa:83:cf:ce:16:2e:3a:
45:56:16:c7:25:b9:32:a1:4a:b9:41:14:ff:bb:5f:
3b:93:c9:79:fc:f5:66:aa:cf:7c:6c:d6:0c:15:45:
ae:4a:3e:db:43:b5:60:39:43:d4:47:00:ff:f2:22:
3f:74:43:08:8c:60:e0:ce:f9:cc:3c:29:4f:b3:f0:
68:d2:ad:f5:ba:ad:51:4d:58:da:a0:69:54:02:50:
ba:64:f6:66:c4:31:9a:fa:b0:43:76:09:eb:72:73:
1e:a2:38:b0:00:45:ff:22:e3:29:65:ac:ab:b4:69:
77:68:28:a0:1f:3a:cd:e3:65:61:7e:94:d0:7b:a1:
fc:f6:a7:a6:0a:33:c7:8c:05:94:a9:1a:f2:93:c2:
42:7e:be:bd:4c:31:a1:47:8d:87:f5:ed:a2:51:c6:
f8:11:9e:a1:06:57:51:87:6d:f3:67:94:cf:7c:67:
82:33:37:7f:b8:aa:06:a2:67:eb:0f:b7:2d:20:dd:
74:32:8e:00:ab:f8:1b:51:c5:d7:43:b2:c7:8d:f6:
09:ba:96:47:ef:cb:88:71:d3:d2:49:72:15:80:e6:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AA:82:AE:78:F7:42:B8:79:90:2D:59:16:52:F1:5E:F9:29:C7:7C
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e8:08:22:1e:45:93:27:e2:20:bf:f7:e2:86:06:de:9d:cd:
c0:41:fb:24:ca:4b:55:42:c2:74:de:ee:79:1d:4e:30:97:1e:
97:24:09:35:6d:39:e6:69:b6:b3:40:84:b3:22:8b:1b:e5:10:
df:ef:0a:07:40:1c:42:c1:64:51:fd:a3:e4:91:cc:47:fe:51:
1f:03:5b:b9:6e:8b:37:7c:2a:7d:64:15:4a:08:f8:af:41:85:
ec:a4:a9:84:03:d6:1b:c7:a9:cc:44:bc:aa:fc:53:15:98:07:
7b:37:de:e5:28:3d:38:57:3a:a0:15:9b:db:9c:92:9d:19:c0:
83:f9:9f:64:5f:58:73:d2:02:ed:fc:7f:2a:9b:a2:c2:94:40:
b6:df:f2:8f:52:c3:54:28:99:d9:ec:b9:94:f1:f5:42:cd:60:
de:c1:3f:66:a1:b3:f3:0b:7c:b8:82:49:43:d8:cd:13:d2:f0:
5a:ad:be:ca:c1:1f:56:47:cc:ed:f7:d7:b2:b6:36:ae:c0:93:
28:05:55:74:c5:cc:ab:89:e8:da:cb:57:95:57:ed:8a:6c:e3:
1d:e9:df:be:f0:66:06:a3:4c:2e:73:9f:ce:ef:bf:80:b6:4c:
94:f5:93:e3:0c:56:8d:a4:2f:84:07:bb:49:79:1a:95:47:a2:
7b:4d:5a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:01:37 2025 by rpki-client