Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
File: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft (raw, json)
Hash identifier: NxslVVKRsWbb6m1lCzq5ljFqY8T1QDe/e7X4tsdL6WI=
Subject key identifier: 4E:7B:72:A6:F4:28:A3:12:7B:91:6B:1A:E6:0B:A2:61:3A:0A:CC:8E
Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Certificate issuer: /CN=41cede907492e50c951263957881bc3cc5ce30ae
Certificate serial: 0195E07D1F3EF3DB026C20C4CF3B272F9D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 06:00:51 +0000
Manifest this update: Sat 29 Mar 2025 06:00:51 +0000
Manifest next update: Sun 30 Mar 2025 06:00:51 +0000
Files and hashes: 1: 8cg6ls0eHu6-sPH76NoZH2FkNOI.roa (hash: 7HXBEdZlw4igKW3gOd2YE5Q8LK/5FqBXGlSg1vYH3n8=)
2: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl (hash: 6XHyr8ILiKnTNyaNznkWtDDYiua3aDNSDC6FjH4lLaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:1f:3e:f3:db:02:6c:20:c4:cf:3b:27:2f:9d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae
Validity
Not Before: Mar 29 06:00:51 2025 GMT
Not After : Mar 30 06:00:51 2025 GMT
Subject: CN=4e7b72a6f428a3127b916b1ae60ba2613a0acc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:c3:f8:be:a1:32:9b:03:bc:62:7f:ab:8b:
f0:1d:e7:84:c6:15:22:2b:01:0a:04:13:66:d8:01:
ab:03:fc:0d:06:a6:eb:e0:e8:28:12:62:28:37:73:
43:b6:fa:d8:82:1f:4c:b6:9f:ea:65:73:2c:bb:0e:
51:a5:6b:a6:f3:ca:1a:20:03:b6:b8:27:b9:55:fb:
cb:ef:94:60:00:3a:00:95:40:5a:b8:94:2f:32:65:
c8:a8:d2:77:e7:f8:cd:19:39:f3:7c:f5:23:76:2e:
48:29:af:7a:57:5b:66:8c:c8:9d:ce:c0:37:b1:f8:
51:27:5f:77:6d:7b:be:51:79:a2:5d:cc:32:61:ff:
55:33:e6:d7:91:75:63:73:e1:99:9b:55:52:ad:46:
f1:c6:37:3b:1a:83:29:32:e2:d4:a5:36:b0:ca:5c:
88:0d:ed:bd:68:62:ba:0b:2d:47:72:6c:48:d3:8f:
98:82:12:d9:dc:a9:5a:a7:42:73:dc:f2:7f:4d:86:
7d:ce:ec:84:15:4b:88:1f:2f:42:af:56:eb:83:24:
f0:98:f3:d5:ba:cb:9d:a5:f0:7e:49:2c:36:3b:52:
8b:bc:5a:3b:29:5c:42:76:77:9c:0a:1c:af:09:8b:
0a:b4:08:53:d1:3c:83:35:3d:b2:f4:81:8a:91:00:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:72:A6:F4:28:A3:12:7B:91:6B:1A:E6:0B:A2:61:3A:0A:CC:8E
X509v3 Authority Key Identifier:
keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e3:45:aa:0d:b6:80:1e:4a:1f:ba:f4:ea:de:a4:43:3a:94:
f6:ef:52:e3:c9:0f:0a:12:93:74:65:ee:bb:ce:4e:ff:84:1e:
af:c1:aa:57:96:e4:bb:2f:6b:4c:ef:f1:e4:7d:b5:51:52:22:
bf:c5:9f:09:14:96:48:93:c6:74:9c:2b:8b:71:8b:71:53:b0:
a2:62:51:2e:fa:5a:b4:d8:12:4d:cb:e5:5a:19:87:5d:22:2c:
08:00:fa:78:5c:e0:bd:d9:96:76:e1:e7:6c:18:d6:c6:d8:04:
97:3e:af:27:ed:ff:b4:4d:80:aa:d8:f9:40:ac:9e:9a:4c:af:
50:58:66:42:d2:b6:9c:25:a1:8f:ee:c7:0a:f6:47:83:cb:f7:
05:31:13:b4:3c:50:97:aa:76:d2:56:5b:c4:7b:74:19:7d:c1:
1e:09:42:54:66:c2:6f:48:09:00:a9:5f:ce:b0:af:d8:09:64:
32:29:2b:61:89:9a:e5:77:84:15:27:56:52:56:28:39:46:33:
9b:cf:c1:a7:18:84:0a:a2:50:60:f4:00:de:a9:73:32:ff:68:
20:b5:4d:2c:fe:70:e7:69:1c:91:64:dd:c0:81:27:4b:a9:d9:
4d:d2:5e:db:34:59:6b:01:f6:8d:ca:c9:9a:2d:12:76:ba:92:
df:82:3c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:41:43 2025 by rpki-client