Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json)
Hash identifier: tSGIYBPisWGzOz88HOt5r0EHWQ+ae7wltsNmG3ZW2AU=
Subject key identifier: DE:07:77:AE:EA:F3:54:5B:87:83:A4:4B:A5:B4:8C:C7:1B:0A:25:23
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 0195E0B428AD72355A058E3365F2EA8E9FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
Manifest number: 0777
Signing time: Sat 29 Mar 2025 07:00:58 +0000
Manifest this update: Sat 29 Mar 2025 07:00:58 +0000
Manifest next update: Sun 30 Mar 2025 07:00:58 +0000
Files and hashes: 1: PREVDyEb408mqa9BxzP0AsRzJeg.roa (hash: aYqJv67l6Fq1t+h1omQ5wjXrKiL4xcndOuCQgkoKKGY=)
2: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: SuKjS3ixezTuA0/KA1XWqcZKWsrnJrW97HcdXiibjXo=)
3: p4jWyPdIBFSOhKsOHJbFsDe7R3Y.roa (hash: jnU5hIXXGhayItcaB6AV8Aoaha2Knjux2sAEHQkirvk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:28:ad:72:35:5a:05:8e:33:65:f2:ea:8e:9f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: Mar 29 07:00:58 2025 GMT
Not After : Mar 30 07:00:58 2025 GMT
Subject: CN=de0777aeeaf3545b8783a44ba5b48cc71b0a2523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:b0:f7:d9:77:34:2c:3f:6c:19:c1:10:be:
fe:49:f8:71:53:25:b1:b8:7e:ca:01:47:8c:21:14:
c9:c8:c4:c2:98:a2:63:5d:48:5b:a7:50:ab:58:ab:
c9:e5:ee:5d:5d:81:4b:24:ce:ba:2d:51:a1:a9:f0:
c5:69:14:16:a9:46:23:ae:e0:36:81:f5:a4:a3:00:
cd:d1:2d:49:98:f9:6d:36:36:db:6a:36:ab:67:66:
94:b9:93:43:94:e7:a0:91:5e:48:04:b2:42:c4:c1:
49:c5:c3:59:7e:21:7d:b2:4f:e1:cf:09:d0:8e:bc:
6e:9d:1f:8c:36:d2:78:22:b1:c0:21:79:37:c9:89:
15:98:f1:ea:1a:b4:23:f6:83:99:6e:8f:60:ac:25:
b5:48:37:a0:9e:46:ac:59:77:c2:0d:f0:a3:d8:82:
4c:6a:9e:07:c0:85:48:93:4e:b4:9b:f1:38:6c:af:
62:7d:40:0b:4b:40:f3:99:ca:46:69:3e:ce:a2:31:
fb:f8:b2:79:48:77:fd:70:c5:17:0a:09:3c:1a:0b:
a5:e4:b8:97:db:ef:50:28:85:c6:11:e2:63:24:42:
ce:d6:42:3e:fe:a0:41:b7:32:23:38:84:c0:2f:2f:
d4:01:0d:7e:af:39:7b:6a:d2:89:a6:e2:3f:f7:27:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:07:77:AE:EA:F3:54:5B:87:83:A4:4B:A5:B4:8C:C7:1B:0A:25:23
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:73:18:19:31:17:0f:1e:32:35:96:c8:03:41:be:4f:2a:bb:
91:b0:8c:57:68:7f:64:5c:df:eb:d7:6a:67:fc:86:77:48:32:
74:08:cf:ab:51:97:ec:9f:dc:b9:a0:0c:81:ac:c0:7d:f6:41:
53:fb:b0:99:cd:f5:27:54:7a:fc:84:01:52:13:b9:5f:23:68:
40:91:5e:f9:61:57:6c:a2:5d:0a:7a:06:ed:e7:d0:45:ec:4d:
95:0f:a3:d5:d9:2a:4d:35:12:2b:cd:e2:87:fb:d5:1a:c8:59:
75:32:d5:df:83:44:aa:cc:11:cf:02:7c:24:00:0c:89:df:f0:
2d:d1:5d:6f:0d:22:5e:5c:09:66:bd:ce:45:83:7f:b2:c8:16:
ec:3a:63:d8:e8:e1:02:bf:0b:cb:34:46:3f:8b:35:d3:68:ef:
43:d6:0a:d1:d8:4c:8b:cd:5f:a3:88:2c:8a:e6:76:da:93:42:
f3:e4:a4:f1:54:5b:4a:ca:6a:a0:d6:1b:96:06:d7:21:9d:cf:
76:f4:cc:25:ed:a7:f5:88:70:4d:d4:85:e9:cc:9d:a2:ff:9d:
02:c1:9d:76:0e:45:fb:11:ab:85:68:5b:97:77:ee:76:8d:2f:
18:39:8d:96:af:c9:91:a3:b9:d5:c3:f2:8b:00:08:b8:09:e0:
2f:31:50:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:49:50 2025 by rpki-client