Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
File: XAJzZX7FoThNU28b2Z2RZQf-eyk.mft (raw, json)
Hash identifier: 5i59ZOM/G6Z2T67WeYE8bCP3g31bGgiw7j2EPYPedWA=
Subject key identifier: F0:E2:31:02:C7:EF:A0:97:62:E6:A2:FF:EA:15:C7:C3:97:DF:7F:D4
Authority key identifier: 5C:02:73:65:7E:C5:A1:38:4D:53:6F:1B:D9:9D:91:65:07:FE:7B:29
Certificate issuer: /CN=5c0273657ec5a1384d536f1bd99d916507fe7b29
Certificate serial: 0195E0EB00D653EC52F2B1911A9F5ABCC811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAJzZX7FoThNU28b2Z2RZQf-eyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
Manifest number: 0F5A
Signing time: Sat 29 Mar 2025 08:00:52 +0000
Manifest this update: Sat 29 Mar 2025 08:00:52 +0000
Manifest next update: Sun 30 Mar 2025 08:00:52 +0000
Files and hashes: 1: BjEhACV2yXJRHQhe31y5AzO3--o.roa (hash: IOjD1WKD18GQcde1wwfvHfJUbrYC9FaaN08pCD3XzFo=)
2: XAJzZX7FoThNU28b2Z2RZQf-eyk.crl (hash: 0cJgMY6USj+aJlLu1u/d5d1HVenqHlydgfS9zOqDIp0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:00:d6:53:ec:52:f2:b1:91:1a:9f:5a:bc:c8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c0273657ec5a1384d536f1bd99d916507fe7b29
Validity
Not Before: Mar 29 08:00:52 2025 GMT
Not After : Mar 30 08:00:52 2025 GMT
Subject: CN=f0e23102c7efa09762e6a2ffea15c7c397df7fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:95:31:19:d5:68:b9:5e:10:0f:13:ec:30:
32:70:17:93:74:f8:82:26:e6:1b:11:10:a0:54:e6:
dd:44:8c:4b:2b:dd:57:86:a8:97:b8:cd:e2:f1:f8:
1d:7a:3e:ec:4d:8c:69:94:88:9f:9b:a4:11:e3:22:
11:31:54:36:9e:ee:b4:44:ab:b6:6e:91:c6:e1:57:
d6:95:c9:82:d7:ba:6c:79:74:92:23:e1:b1:ff:7f:
a9:83:f6:e2:4e:1e:0b:22:bf:35:78:e7:f4:60:46:
ea:a5:65:6e:bc:2a:aa:6e:3d:07:a9:d5:6f:91:ef:
3b:91:00:77:5d:07:3f:8f:0d:9d:34:01:54:97:51:
20:1a:f1:8a:37:12:93:28:41:0a:7a:04:ae:19:8e:
46:22:b1:6c:a5:32:b5:ba:02:4b:ea:d2:26:c1:de:
ae:a4:14:39:9d:15:5e:9f:1e:93:15:3d:95:55:60:
b3:5c:59:76:ff:9e:e1:c6:5b:c0:e1:47:15:51:c1:
e0:ea:ad:2e:de:39:3d:6c:8c:79:93:ed:74:81:05:
11:5b:5f:42:2b:12:a3:de:5c:2d:d0:a1:35:e7:2a:
6d:d5:0c:aa:99:cd:de:d7:bb:73:d0:4d:7a:d4:06:
89:2f:90:9b:ec:2b:1f:55:46:3c:b7:62:2f:87:21:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E2:31:02:C7:EF:A0:97:62:E6:A2:FF:EA:15:C7:C3:97:DF:7F:D4
X509v3 Authority Key Identifier:
keyid:5C:02:73:65:7E:C5:A1:38:4D:53:6F:1B:D9:9D:91:65:07:FE:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAJzZX7FoThNU28b2Z2RZQf-eyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:56:87:60:3f:5a:6d:e0:81:c6:6a:92:a1:b1:6c:2c:61:c0:
e1:1e:39:b1:28:4d:0f:54:fa:09:42:d3:35:64:b1:b1:4e:29:
5d:1e:d4:9f:51:33:c4:af:9f:21:c2:a2:ec:97:05:7d:16:5a:
51:8c:6d:55:58:5c:53:fb:af:0c:bf:76:27:81:3a:36:b5:22:
ff:ce:63:72:46:cf:d6:18:3f:d6:f2:71:ca:ae:a5:84:e1:59:
42:f5:18:33:7b:dd:22:ab:d5:5c:f2:a0:ed:93:20:c3:ea:dd:
5d:f8:5a:2a:33:7d:63:81:8b:5a:e1:cf:b0:e2:39:e8:2d:ed:
67:95:5f:74:77:d1:44:fa:06:63:d6:8b:32:fe:1e:fb:5c:ca:
5e:7b:a8:dc:97:9c:df:80:e9:39:03:d1:6d:84:70:0b:04:65:
7d:f3:e1:4a:86:cf:c0:1f:73:7f:90:43:6d:47:da:68:d9:44:
95:c9:46:96:59:3f:ae:26:0d:ce:31:ce:2a:0f:b8:b2:b3:04:
ed:aa:59:30:61:5c:81:88:da:c9:a6:16:fb:e1:43:ce:43:df:
31:85:f6:0b:40:98:be:72:e4:96:d9:39:c6:fe:49:64:41:21:
a4:a9:09:8d:77:37:59:0a:6b:3c:c7:c5:15:3b:5d:49:e7:b1:
41:fe:86:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:27:09 2025 by rpki-client