Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
File: zPKS2CwKIlLdMoWihzMfRFDtNZo.mft (raw, json)
Hash identifier: wd+2H7ZX2DszumI8Fwk4LXSBdwbPLbwT7gj2qJ9Vk5w=
Subject key identifier: 5B:29:3D:40:A5:C2:7D:5A:CF:47:36:01:0B:D3:98:18:CF:D9:2A:82
Authority key identifier: CC:F2:92:D8:2C:0A:22:52:DD:32:85:A2:87:33:1F:44:50:ED:35:9A
Certificate issuer: /CN=ccf292d82c0a2252dd3285a287331f4450ed359a
Certificate serial: 01957FED8BB512BCC0E0B52EA5DF050B408E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
Manifest number: 086A
Signing time: Mon 10 Mar 2025 12:00:28 +0000
Manifest this update: Mon 10 Mar 2025 12:00:28 +0000
Manifest next update: Tue 11 Mar 2025 12:00:28 +0000
Files and hashes: 1: CkBOc7z4kdZJGb4-90X6hX6L7jo.roa (hash: 2s0FvcQyY/vg4fHm2yrRgYb/gxmRARkKeZ3RrkEOVnA=)
2: zPKS2CwKIlLdMoWihzMfRFDtNZo.crl (hash: ll1JJozYQYyq/yczvLxRQXkileABVv9ng9n7+OL24vI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:ed:8b:b5:12:bc:c0:e0:b5:2e:a5:df:05:0b:40:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf292d82c0a2252dd3285a287331f4450ed359a
Validity
Not Before: Mar 10 12:00:28 2025 GMT
Not After : Mar 11 12:00:28 2025 GMT
Subject: CN=5b293d40a5c27d5acf4736010bd39818cfd92a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:46:5c:b8:5e:2d:f3:68:ab:80:5d:94:4f:
e7:2c:c2:01:b7:74:10:9f:11:0b:74:9d:83:78:16:
95:31:4d:e3:77:0e:de:e9:5a:e5:94:ad:35:af:fd:
38:14:17:8d:f2:f9:80:f1:63:8d:53:35:2d:b9:91:
8d:37:ea:34:c4:33:49:6d:c8:3b:f6:dc:92:11:3f:
d8:60:a4:ed:20:bc:84:b8:ea:32:ff:0b:d7:32:2e:
84:27:60:8f:f4:9e:0f:8c:18:a6:a0:58:56:15:f8:
5b:43:15:d0:e3:35:2d:71:7d:b0:46:5f:d8:d7:ee:
89:8a:99:c4:8e:35:09:c8:2e:6d:19:6d:63:81:af:
8e:42:2c:c8:63:e6:97:4f:d0:47:29:38:d9:16:76:
cf:bf:b2:af:bb:6c:c4:2f:e1:29:22:c1:ef:68:40:
36:d0:68:e6:38:1b:c4:6e:fa:88:78:03:6c:14:b7:
f7:70:4e:92:13:25:1f:62:a8:26:97:b2:5f:88:30:
ae:d8:08:1c:0d:98:99:e1:73:2a:75:a6:3f:bc:b2:
95:70:1a:51:b6:95:d2:a2:d1:a3:31:de:37:ac:df:
d8:ca:66:26:85:89:05:c0:a0:fd:f3:73:9a:bc:d0:
41:97:e1:61:e8:ca:35:25:e7:16:bb:56:26:2a:0b:
5f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:29:3D:40:A5:C2:7D:5A:CF:47:36:01:0B:D3:98:18:CF:D9:2A:82
X509v3 Authority Key Identifier:
keyid:CC:F2:92:D8:2C:0A:22:52:DD:32:85:A2:87:33:1F:44:50:ED:35:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:02:3e:6a:d3:24:26:f7:94:17:7e:7a:51:95:72:78:2e:6f:
b9:0d:5e:e5:f2:22:5b:a0:25:b7:80:62:e9:9e:bc:ed:ac:e0:
92:fb:c7:87:1d:5d:0a:03:73:00:83:13:f0:01:07:ef:e7:a1:
47:21:bf:f8:68:9c:d4:1b:98:8b:a0:0d:47:7f:e2:12:a9:e5:
69:ec:cc:48:67:9a:3f:47:71:a2:5b:04:ce:66:37:dc:1d:4e:
67:e7:cd:fe:31:17:eb:8d:ba:e4:23:1e:4c:04:05:a3:32:5b:
c7:2a:26:c2:f7:9a:c9:0d:c8:1d:83:64:94:cd:6b:43:11:a7:
02:30:b9:20:fa:8f:0d:99:e2:45:0b:65:71:d5:ba:b2:e1:64:
bb:8c:a6:c4:87:51:b5:6a:09:41:d5:b2:97:44:dc:5b:cd:08:
73:e3:e2:af:18:71:f2:e1:cd:03:33:1a:34:40:50:e7:db:33:
84:75:bc:18:a2:e7:59:fc:5f:8a:06:c1:57:b4:25:17:b7:30:
17:7d:db:3e:7f:d9:8b:53:10:6e:67:16:3a:a2:ab:8b:90:02:
3b:3a:9a:1d:43:0e:33:39:67:8c:d9:92:83:20:df:01:d4:c7:
48:a2:c7:e0:48:64:6d:ae:d1:32:ae:ac:76:bf:e8:82:19:ab:
c6:79:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:47:38 2025 by rpki-client