Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier: NP1NUSProsl2F1nT/bh4TNesFeAn+zz3+/1RGx5Xu6M=
Subject key identifier: 1B:7F:31:6D:7A:97:EE:9C:F9:1D:B6:A7:0C:48:4B:F2:58:66:40:5A
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 0195E12221331BED050A174070D83075EFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number: 12BE
Signing time: Sat 29 Mar 2025 09:01:05 +0000
Manifest this update: Sat 29 Mar 2025 09:01:05 +0000
Manifest next update: Sun 30 Mar 2025 09:01:05 +0000
Files and hashes: 1: 1-NHXjtqrvVrRCtlhC4QnYQDdZPQ.roa (hash: 5tQ4LpDD9EcQQczJTsl4dpwzoP4ak/HQs6biLiGOV3E=)
2: 2UCbDoS3ycyYJJre1asZT-TvgMA.roa (hash: DT/mBjBdX0oTgiUzQgQuXZrljdo+CoIj0mpOVzjBOfI=)
3: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: nzTNIEoFXo2EsTZ2jETtrw8zpfA/Nl0imwNY3Z4YA6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:21:33:1b:ed:05:0a:17:40:70:d8:30:75:ef:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Mar 29 09:01:05 2025 GMT
Not After : Mar 30 09:01:05 2025 GMT
Subject: CN=1b7f316d7a97ee9cf91db6a70c484bf25866405a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:57:3e:69:66:39:ea:c7:b4:9a:e7:d1:16:
b7:b2:1b:e4:1e:4e:97:75:5f:a5:8e:5c:3d:18:a7:
38:33:00:41:ba:b8:1f:ef:da:ba:65:b1:83:01:c6:
74:ea:7d:ea:2f:2c:b4:99:85:cc:04:8d:5f:d1:d6:
91:e2:19:cf:2f:4d:34:e7:8a:74:01:a6:84:89:c2:
35:96:2b:5d:90:7d:f3:e7:a4:b4:ec:b2:03:b5:8d:
77:39:8e:80:be:cb:6c:4b:35:9e:a8:f0:01:7c:a5:
31:da:d4:ae:a3:5b:74:d3:38:9f:08:a4:76:a7:e8:
86:dc:d4:c2:81:00:55:8c:a8:12:42:fb:6b:52:96:
e3:49:40:03:11:a0:29:3b:35:22:23:93:fd:19:16:
93:7c:65:c8:6a:28:d6:8f:1d:fa:6d:88:16:c1:ed:
66:0f:05:54:55:cd:e8:19:af:47:6e:49:73:a4:94:
aa:ed:ab:9d:f1:ee:c6:ba:2c:4c:61:a5:5b:f3:23:
3f:91:b8:42:4f:8c:89:eb:81:b3:52:8b:db:be:1b:
26:cc:11:85:c4:ca:dd:64:fa:09:21:72:87:b8:70:
ea:0e:bf:8b:0b:f6:6b:c7:18:f1:c6:6d:1b:26:2e:
2d:e0:4f:5e:99:74:47:8e:c2:60:ba:b9:b6:77:6a:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7F:31:6D:7A:97:EE:9C:F9:1D:B6:A7:0C:48:4B:F2:58:66:40:5A
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:48:1d:0c:a9:9b:84:1d:7e:32:25:aa:68:6f:65:05:2a:9d:
a6:7b:c2:ae:59:31:2a:6b:05:f0:75:c0:74:fb:81:38:be:1c:
93:6e:11:47:72:6a:4f:b3:cf:96:ce:81:c7:11:d3:49:c3:ed:
ba:76:34:bd:d2:9b:2e:59:1f:20:21:a5:ef:56:44:83:20:8f:
5e:1d:e3:6b:3b:d4:40:2b:e9:bb:d0:c1:23:6d:0f:9b:ee:5b:
a2:af:6a:d0:0c:01:c8:6d:26:ef:c3:9f:32:fd:15:db:8c:e0:
d9:ad:0e:ef:48:eb:04:c6:13:ed:3a:50:55:c4:82:ef:d8:af:
9d:4a:56:ee:5e:4f:c8:d6:16:b6:83:c1:b3:2a:f7:89:09:28:
fc:e6:e8:48:3b:43:15:ce:3d:de:b7:04:7c:3f:9f:5a:58:61:
90:14:56:b5:32:06:17:3e:70:c8:57:70:cd:15:1b:27:73:b8:
93:01:9f:d4:9c:59:a7:69:87:fb:36:0d:e6:1f:a2:c1:ab:e4:
3c:90:c6:02:56:62:06:95:f2:b5:cd:4f:fb:53:dc:66:f3:e8:
30:f9:72:b9:78:83:7e:e0:88:bc:e6:db:44:55:ce:55:d8:7f:
33:1b:0f:a3:78:7e:98:7b:b0:b1:26:cf:6b:d1:b3:ee:f5:58:
5e:62:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:32 2025 by rpki-client