Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/zF4owk3fULPGkLGV3Vc83T-OJps.mft
File: zF4owk3fULPGkLGV3Vc83T-OJps.mft (raw, json)
Hash identifier: +81mwwpIMM0TMCqXuocir18t8u9kdSAyS8kCdAsrr+U=
Subject key identifier: 5C:CC:9B:99:EE:F9:9E:2A:71:E8:6E:F5:D6:0B:4B:F8:6E:65:A5:5C
Authority key identifier: CC:5E:28:C2:4D:DF:50:B3:C6:90:B1:95:DD:57:3C:DD:3F:8E:26:9B
Certificate issuer: /CN=cc5e28c24ddf50b3c690b195dd573cdd3f8e269b
Certificate serial: 018D787F88A545A5187DF672B8E7EF223982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zF4owk3fULPGkLGV3Vc83T-OJps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/zF4owk3fULPGkLGV3Vc83T-OJps.mft
Manifest number: 085C
Signing time: Mon 05 Feb 2024 09:00:40 +0000
Manifest this update: Mon 05 Feb 2024 09:00:40 +0000
Manifest next update: Tue 06 Feb 2024 09:00:40 +0000
Files and hashes: 1: 0CW8Ncg0GIH7q8-Xhkhb0MHeNtk.roa (hash: Vx575fuOUXLFuBv6Q+oM0HVyx67/OIdCzexD4LMWTas=)
2: zF4owk3fULPGkLGV3Vc83T-OJps.crl (hash: yN7JJXJbYoL3LmQlWW+xXunUh47olnIrCRw8HvWFcfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:7f:88:a5:45:a5:18:7d:f6:72:b8:e7:ef:22:39:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5e28c24ddf50b3c690b195dd573cdd3f8e269b
Validity
Not Before: Feb 5 09:00:40 2024 GMT
Not After : Feb 6 09:00:40 2024 GMT
Subject: CN=5ccc9b99eef99e2a71e86ef5d60b4bf86e65a55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:34:fc:65:ba:b2:15:6e:ca:3e:29:f0:9d:
71:3b:19:0b:80:21:34:b8:2b:43:bf:3d:b1:75:6a:
dc:11:15:ed:6b:c4:bf:06:ab:d2:88:e0:71:b2:0d:
65:de:47:aa:83:d2:58:a3:d3:a8:ac:5f:43:4d:36:
b4:ce:21:17:ec:1a:95:31:0d:96:d8:56:cc:0a:29:
df:b5:36:4d:ac:ad:53:9a:66:af:2b:c3:c1:44:2f:
45:71:44:08:d6:e4:a8:f3:ff:36:d9:9f:a1:35:9a:
4a:85:30:43:4b:67:53:58:6a:a3:6e:ac:2c:cf:68:
f9:29:86:5f:d8:3d:ba:ff:fe:75:e0:1d:6a:9a:80:
ad:79:fa:fb:c7:dd:6b:33:5e:05:b0:ea:9d:16:80:
78:75:29:13:8f:85:c8:7c:8d:79:f7:de:66:d0:82:
cb:6f:b0:42:ee:aa:1f:25:42:c8:c7:ea:9c:3f:69:
87:82:f4:c5:67:46:eb:05:2a:f9:33:73:24:14:c7:
9f:0a:ba:c8:38:6e:e2:bd:ed:8b:c2:45:5b:e4:c6:
b6:6e:be:c1:79:6c:5c:f4:c4:c4:4f:13:85:2e:38:
73:21:a4:c4:3f:cc:7f:ab:24:62:6a:39:a1:f3:6a:
16:20:78:db:32:13:ca:7f:7e:4a:3d:14:a2:d3:5a:
b1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CC:9B:99:EE:F9:9E:2A:71:E8:6E:F5:D6:0B:4B:F8:6E:65:A5:5C
X509v3 Authority Key Identifier:
keyid:CC:5E:28:C2:4D:DF:50:B3:C6:90:B1:95:DD:57:3C:DD:3F:8E:26:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zF4owk3fULPGkLGV3Vc83T-OJps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/zF4owk3fULPGkLGV3Vc83T-OJps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/zF4owk3fULPGkLGV3Vc83T-OJps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fe:89:a9:a0:96:0e:24:38:0f:6b:ca:7d:a8:1e:ba:dc:1d:
43:c9:c2:bf:0b:ea:8d:05:53:75:ec:ce:2b:34:59:98:1c:47:
cd:99:91:98:99:d4:13:4d:fc:d3:e7:ed:ae:89:7e:d2:b4:8b:
57:19:ac:54:b0:6d:8d:8f:d0:63:fa:19:63:4a:0a:66:aa:6f:
7e:fb:26:fa:05:2e:9d:06:af:60:1b:3a:ce:11:eb:85:30:97:
04:05:b0:f4:36:65:08:9c:63:d2:d1:a9:98:de:45:12:df:29:
b7:25:97:1f:21:73:0f:18:23:5d:10:a8:1d:5f:48:0a:03:e3:
8f:cd:b9:8f:c1:f4:a0:60:13:0e:50:76:90:f8:87:42:a5:3c:
c9:06:81:90:b2:20:35:22:af:72:1e:1a:b8:61:32:37:be:51:
3d:ce:84:5d:4b:99:8a:ba:62:c9:36:d0:05:06:b6:b2:d9:75:
90:46:9e:51:85:2e:57:c1:09:6e:dc:de:c8:7f:0f:a2:31:03:
d7:1f:d4:1c:76:fa:52:e4:2a:9d:cc:d9:eb:2c:11:8d:5d:a7:
90:88:74:2f:8d:d9:8c:b2:13:aa:23:ea:d5:05:de:25:22:54:
d8:70:fa:06:d2:8a:77:5d:af:53:0e:2c:04:00:b9:f8:d9:56:
25:71:8c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:09:57 2025 by rpki-client