Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.mft
File: ahp7gMaEYoWSMrhvK0UmWNj3-Ek.mft (raw, json)
Hash identifier: nJK3UmOjS/V9QID5MunhyQ0W+k1LZ8nF+6gJOEebq/g=
Subject key identifier: 80:78:49:9D:CB:E2:AC:75:DF:1B:5E:FE:E5:F7:6D:D0:60:76:61:7B
Authority key identifier: 6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
Certificate issuer: /CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Certificate serial: 01966172947E6E6D1B9B5DA188A7BDBA0759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.mft
Manifest number: 150A
Signing time: Wed 23 Apr 2025 07:00:21 +0000
Manifest this update: Wed 23 Apr 2025 07:00:21 +0000
Manifest next update: Thu 24 Apr 2025 07:00:21 +0000
Files and hashes: 1: 0LoYqwN4EfuOpzNBl81Ir0O3xvg.roa (hash: h5JSgifNUd2hd+AKHO4CM6TE/DtVvf5eI+T3LKM47js=)
2: _mJV8aX_Qs8QBpHiXiKK8iF0edI.roa (hash: fDYoIBnVmtW522s9sJLf7723BDfyrSi2LsKN+Lo5R+0=)
3: ahp7gMaEYoWSMrhvK0UmWNj3-Ek.crl (hash: eFmleDKWupQZ5g2V8SwlU+t6kZE4y4NdXOoEQc+HYyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:72:94:7e:6e:6d:1b:9b:5d:a1:88:a7:bd:ba:07:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Validity
Not Before: Apr 23 07:00:21 2025 GMT
Not After : Apr 24 07:00:21 2025 GMT
Subject: CN=8078499dcbe2ac75df1b5efee5f76dd06076617b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:f4:fa:45:3d:d5:be:5d:37:11:4a:79:a6:
0d:e6:99:cf:4f:0d:32:01:b8:5b:6e:77:be:e1:38:
5d:a8:44:d3:e9:81:55:eb:83:5d:54:2a:14:56:7d:
4a:a4:f5:e7:4d:a9:b2:a1:e0:94:90:b1:5c:b2:2e:
df:7c:28:91:70:c6:70:10:ea:6c:fe:fe:33:0e:85:
af:ad:5c:d1:cc:41:84:8d:73:d4:c2:fa:6c:f6:14:
f9:c4:d2:4a:f0:3d:73:54:ce:e0:62:a7:ba:62:eb:
1c:f9:90:92:46:77:c2:3a:8f:58:ba:1d:57:99:a2:
79:b3:8e:3c:0d:eb:29:48:46:94:ec:e4:0a:4c:a6:
24:b8:0e:b4:52:d4:f7:0e:54:b6:dd:4d:40:47:0a:
52:76:02:ee:5b:17:41:4f:7c:1a:6a:05:52:af:f7:
50:62:df:cb:10:8a:79:c6:fe:91:17:c0:e5:d0:70:
c1:7c:e3:e5:6b:86:10:cd:15:6b:3d:9c:d8:44:76:
07:17:92:fb:40:57:0d:3c:cc:8a:3f:5f:85:c6:67:
0b:4b:40:80:77:b7:42:f0:4e:4e:d0:2f:25:73:ce:
dc:a4:41:a1:79:d3:74:3a:6e:8c:e8:65:6e:e5:8b:
0b:40:4d:41:3c:7f:e2:f1:12:6b:9c:4b:b5:bd:f4:
01:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:78:49:9D:CB:E2:AC:75:DF:1B:5E:FE:E5:F7:6D:D0:60:76:61:7B
X509v3 Authority Key Identifier:
keyid:6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:be:4b:11:da:6c:d2:8c:1c:da:5c:49:cf:2d:4e:4a:86:6d:
9a:71:71:41:c6:10:fa:30:c3:e2:5f:f6:40:f8:f1:17:a5:04:
e0:99:9b:42:b8:1a:02:80:88:50:0f:ea:9a:de:62:2b:b0:87:
df:6f:c2:fb:59:9e:11:52:bf:51:68:68:f0:0f:fc:f7:e0:4a:
29:d6:dc:71:33:ae:de:61:1c:b3:2d:6f:4e:5f:34:89:13:fb:
5c:20:3a:b8:a8:69:e2:8f:08:7b:28:20:ca:94:bd:70:36:b5:
4c:8b:97:25:c8:39:7a:3c:5e:0c:01:65:0a:54:44:9c:32:f4:
cf:0b:1c:b0:e7:44:b4:b3:a1:6b:df:8f:0d:38:44:1c:10:89:
f4:87:f1:d6:8e:70:1c:8d:a1:9b:e9:f3:e3:dd:f1:1c:89:cb:
b3:79:50:d6:6c:d4:52:af:1e:e6:98:ea:ec:4d:62:a0:e5:e5:
d1:cb:87:d4:0e:d9:7c:9b:6d:06:00:89:6c:7d:a0:0d:03:6d:
b2:5e:6b:10:e1:a5:39:fb:e6:7a:92:f0:61:e8:2b:55:76:d6:
c3:85:a2:9f:04:0e:35:7c:f1:db:88:d2:76:71:08:c6:6e:60:
56:4e:98:de:e0:50:e3:74:ea:e1:02:8b:fb:84:67:ed:5a:c1:
5e:f3:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:11:44 2025 by rpki-client