Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
File: qpB64Zd8I1J6rWZWoUjHA3LpslY.mft (raw, json)
Hash identifier: 5z8vRtI4Q39+GTM6ePcDqorMzwvV5YGKl4zG54mYDXc=
Subject key identifier: 32:17:60:18:2C:19:51:E0:0E:16:19:82:E8:4A:3B:07:B0:31:5B:68
Authority key identifier: AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
Certificate issuer: /CN=aa907ae1977c23527aad6656a148c70372e9b256
Certificate serial: 0195DFD8F9048702A2888A45253B752D71FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
Manifest number: 078F
Signing time: Sat 29 Mar 2025 03:01:33 +0000
Manifest this update: Sat 29 Mar 2025 03:01:33 +0000
Manifest next update: Sun 30 Mar 2025 03:01:33 +0000
Files and hashes: 1: ea2Y-dwaT445EGlgfXN8R70YRos.roa (hash: hFopTbVTP9tQkxA8ISdrfSlJKlSYxul+sHm5GKjmi5o=)
2: qpB64Zd8I1J6rWZWoUjHA3LpslY.crl (hash: jPkrB/sPMdeRXiABVuPR6RFfTs7aXw+Ct2RETFw6SUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:f9:04:87:02:a2:88:8a:45:25:3b:75:2d:71:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa907ae1977c23527aad6656a148c70372e9b256
Validity
Not Before: Mar 29 03:01:33 2025 GMT
Not After : Mar 30 03:01:33 2025 GMT
Subject: CN=321760182c1951e00e161982e84a3b07b0315b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:86:3a:74:b1:31:9c:5e:55:38:ae:c4:77:
7a:ec:56:3c:1b:1f:01:33:bf:47:54:8a:a6:c8:30:
b5:89:6a:b7:3d:66:f8:8b:10:ae:04:4e:79:86:fb:
2d:28:a4:0a:5f:e2:2b:f7:75:1f:e1:3c:d5:41:7e:
37:58:cf:21:ac:b5:d3:89:80:88:26:eb:99:83:e2:
cf:ed:b2:21:59:4c:00:6e:67:e3:52:a2:39:17:7b:
70:df:cd:ac:41:22:cb:84:ed:1c:c7:22:1b:3e:41:
f1:df:4a:ef:b9:c0:5d:54:fa:29:88:10:fe:8a:03:
9d:48:68:bf:3b:70:3b:ac:65:84:04:eb:aa:ed:53:
b4:38:17:06:2e:e2:af:99:99:a9:13:4e:35:1b:ea:
53:cd:34:41:89:e3:fe:47:ed:e2:99:dc:12:3f:d6:
89:7a:2a:fb:96:33:f6:ff:ba:11:9a:f0:06:b6:e8:
ef:3a:20:ff:95:2e:25:b6:b8:56:23:77:94:01:bd:
d2:ec:f7:e1:e2:6f:ac:a9:2d:18:bf:46:8a:6e:28:
83:fb:22:00:35:ef:a1:2a:9b:3c:13:32:a8:bd:47:
d0:dc:2e:b4:87:02:05:d9:49:93:85:d1:9b:cd:d2:
20:ca:ca:98:e5:90:27:8f:69:9a:10:cc:3c:b5:f5:
d4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:60:18:2C:19:51:E0:0E:16:19:82:E8:4A:3B:07:B0:31:5B:68
X509v3 Authority Key Identifier:
keyid:AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f4:08:52:bd:ff:09:89:13:30:e5:f9:dd:9b:7c:63:a3:96:
2e:67:0a:47:6f:5a:1a:2e:5c:5a:e7:83:74:7c:d9:8e:9a:22:
de:9c:af:ce:9e:d3:12:d9:8d:1d:b6:e6:e8:8b:f1:e6:b3:52:
ca:67:23:10:e9:8f:05:c5:52:25:b1:f3:2a:26:82:33:90:92:
fb:18:67:dc:ab:29:0c:d1:e9:30:d3:c6:15:88:00:2b:aa:ce:
7d:bc:1b:ff:b3:56:4b:0d:e5:8d:f2:0d:b1:d3:b1:a6:0f:2c:
7b:e3:57:ad:ab:b1:ff:77:4e:14:36:74:e5:b5:d0:52:46:71:
68:25:a2:d3:8e:3d:c7:8c:90:b0:10:d9:28:a5:71:c6:72:9c:
16:64:f2:2c:3c:69:be:15:00:98:a4:9c:a1:fc:e0:59:d1:f9:
4b:a5:70:29:a8:42:95:a8:fd:34:69:99:1b:0d:3d:9e:4e:58:
57:92:12:0a:04:b1:55:b4:af:65:13:0b:60:4a:f6:fc:9f:46:
d3:8b:9d:74:fb:ec:b2:cd:4d:46:2f:94:d1:be:a6:09:e3:63:
c7:5c:c5:b8:de:96:f2:d9:1b:f8:43:ad:32:85:ec:83:16:25:
e7:32:9a:e8:3d:a9:fb:1c:e9:f9:f6:bf:b9:31:5d:47:7a:65:
3c:3e:4d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:58:49 2025 by rpki-client