Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
File: jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft (raw, json)
Hash identifier: gxnXQNpY2mGBeiTCjVcIXjybNed0oVEFLxNhBUYIU9s=
Subject key identifier: 46:6E:72:47:D2:B1:E7:D0:48:91:AF:E1:F8:AA:95:07:34:49:01:4E
Authority key identifier: 8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
Certificate issuer: /CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Certificate serial: 0197101DA7C8C6432E0A2E26CDB992998923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
Manifest number: 11F5
Signing time: Tue 27 May 2025 05:01:08 +0000
Manifest this update: Tue 27 May 2025 05:01:08 +0000
Manifest next update: Wed 28 May 2025 05:01:08 +0000
Files and hashes: 1: Kt2ksaxPkIjtDoeyg1P8yernNDc.roa (hash: wfAd3vob2ra8znve71igmwtD5TyA3SG1S1RzxivWZj8=)
2: byPwkkahLGpxY_tW1OLYNjMyZ_Y.roa (hash: QA9SayE2KiT0c9dHKY7N9OrSbz3bY915oFBo7q1THjo=)
3: jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl (hash: A2Tx8IwwhYT5Xgm8EBr37Fg3u2OidTPxiLuaGUfb8yE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:1d:a7:c8:c6:43:2e:0a:2e:26:cd:b9:92:99:89:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Validity
Not Before: May 27 05:01:08 2025 GMT
Not After : May 28 05:01:08 2025 GMT
Subject: CN=466e7247d2b1e7d04891afe1f8aa95073449014e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2a:82:b3:d4:4d:5e:0c:ef:92:db:e7:49:c1:
9f:3e:46:e7:d4:65:91:fb:23:5c:cd:c0:bd:f5:f8:
ea:c1:29:13:28:ad:1b:a2:c5:9e:28:7e:00:19:f9:
ad:2e:3a:62:51:be:01:4c:6c:0a:a3:ed:1e:78:38:
c0:a3:a9:14:da:20:19:f7:d1:c2:d3:6b:76:f0:89:
c4:18:5f:a5:63:df:ec:3c:6c:37:e1:64:fb:59:1c:
df:a5:eb:8a:e5:38:57:53:a6:0d:17:ec:1b:56:cd:
a1:e1:85:be:dd:e4:b7:1f:f1:1c:49:42:b1:ee:7a:
63:10:c8:7f:93:4e:fe:8a:c2:31:a1:69:40:42:c6:
7b:ec:68:b7:05:4e:f9:31:4f:26:92:1e:11:0d:b9:
57:4c:e9:d7:dc:77:6d:d3:90:fe:1c:11:76:e2:d7:
22:44:e2:4f:81:61:00:97:46:fe:fe:32:d6:44:bc:
aa:a9:16:27:e1:a7:9c:4f:e8:16:9f:22:f7:f7:82:
0e:95:76:5e:f0:54:cd:71:7b:a7:6d:03:cd:06:be:
7f:91:e0:23:f2:72:d3:68:dc:6c:de:74:97:ea:3f:
28:f0:e1:db:f9:ad:69:1c:8a:0a:74:e6:7a:dc:73:
a1:ea:58:1b:06:68:65:7b:f4:62:04:00:de:bf:f6:
67:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6E:72:47:D2:B1:E7:D0:48:91:AF:E1:F8:AA:95:07:34:49:01:4E
X509v3 Authority Key Identifier:
keyid:8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b7:11:1f:32:50:e8:5b:8c:33:4c:e7:a2:68:64:b3:f6:2f:
0e:9c:67:58:4c:ee:a0:d4:2e:16:19:1e:2f:c5:3d:92:e1:03:
2a:a5:86:4d:12:f9:7a:60:88:25:78:72:91:b1:54:ea:ef:6f:
3d:c3:0b:62:ba:1f:0b:25:48:6e:3f:3d:6d:51:1c:ad:95:3f:
c8:43:59:e4:a9:02:cd:1c:bd:4b:cd:bd:bc:a9:00:98:f9:c7:
f9:7e:cd:7a:22:0e:a2:14:07:7e:6c:ef:90:08:79:aa:47:82:
97:1c:5e:1a:06:54:bf:53:7e:a4:1a:1b:59:05:7e:b7:25:d8:
f5:0c:32:4a:85:ab:ef:65:8d:5d:6a:2a:9c:fa:62:f8:8b:4c:
a3:e6:67:3b:f6:3a:13:4e:58:f2:5e:04:32:d3:80:67:55:0d:
f9:8c:ab:62:2f:d5:4a:89:ea:1a:3e:32:44:1f:b3:94:4a:17:
3e:cb:a0:64:44:e7:72:98:3f:1d:1e:45:69:ec:d5:d2:07:12:
6b:3e:cc:c7:85:72:40:c2:99:66:ab:a6:b7:2e:69:5b:1a:a3:
4e:6e:09:95:1e:2f:2f:fa:bf:87:37:e7:54:51:a7:89:36:df:
98:26:fb:c4:2d:3f:6a:04:ae:ce:b9:02:35:53:f0:77:31:4f:
7d:f0:57:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:02:29 2025 by rpki-client