Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fccdc5-a6d6-48f8-8ff6-25c440a0ec1d/1/uxjIv-yGLxqlmY8YQM68PVkmgt0.mft
File: uxjIv-yGLxqlmY8YQM68PVkmgt0.mft (raw, json)
Hash identifier: lk2ouDpShsm80JqwGbuYyyjm/vNUpz3nxMNlVW7hgt0=
Subject key identifier: CB:A3:AF:6D:7D:F2:08:A6:65:95:80:42:EF:2D:85:46:31:4F:86:CF
Authority key identifier: BB:18:C8:BF:EC:86:2F:1A:A5:99:8F:18:40:CE:BC:3D:59:26:82:DD
Certificate issuer: /CN=bb18c8bfec862f1aa5998f1840cebc3d592682dd
Certificate serial: 0188E7E58A43646294518393C8352C4E1BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxjIv-yGLxqlmY8YQM68PVkmgt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fccdc5-a6d6-48f8-8ff6-25c440a0ec1d/1/uxjIv-yGLxqlmY8YQM68PVkmgt0.mft
Manifest number: AA
Signing time: Fri 23 Jun 2023 10:55:59 +0000
Manifest this update: Fri 23 Jun 2023 10:55:59 +0000
Manifest next update: Sat 24 Jun 2023 10:55:59 +0000
Files and hashes: 1: tDCQIuZ_9wJIF5B43UwRz6tf7Kk.roa (hash: XbXOoOL7WE6fP1F8W587Y6G4PG31v3qyzmd/upNb4fY=)
2: uxjIv-yGLxqlmY8YQM68PVkmgt0.crl (hash: fRkvmmieBitzSkVpbC3sqs3AH0Yn5t9b/IPE8lzGn4U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:e5:8a:43:64:62:94:51:83:93:c8:35:2c:4e:1b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb18c8bfec862f1aa5998f1840cebc3d592682dd
Validity
Not Before: Jun 23 10:55:59 2023 GMT
Not After : Jun 24 10:55:59 2023 GMT
Subject: CN=cba3af6d7df208a665958042ef2d8546314f86cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:38:dc:64:e4:ca:19:f7:ee:6b:fd:69:36:
30:c7:df:6f:e4:99:d8:e5:b1:f2:f8:0f:ca:58:66:
22:01:cb:f8:ed:09:df:fc:ff:29:4f:7a:86:21:e2:
46:98:59:41:c2:1a:d1:98:3e:80:05:9a:6b:e2:a7:
17:0c:77:23:d3:de:a8:9e:a7:4d:c6:3d:6d:de:c0:
6c:3a:a1:4c:a7:a7:05:31:b9:e3:db:e6:c6:a8:90:
a5:dd:b5:c8:66:13:29:39:ce:f5:9e:85:c2:18:4d:
25:28:52:95:c9:10:24:41:cb:80:cf:3d:70:ae:ab:
7f:e1:a3:61:ba:96:3d:37:bf:f2:2f:b9:90:c6:65:
b9:cd:df:b4:78:34:5d:c8:d7:c3:36:10:37:a3:4f:
57:90:70:54:49:1a:db:f9:03:28:5f:20:a5:27:3d:
e1:9d:cf:35:fd:f2:cf:e6:92:35:de:56:ce:d5:fc:
a6:46:09:3e:1d:1d:b3:21:bd:14:54:b9:4c:38:5b:
c3:b0:a4:7a:c1:40:9c:22:36:a1:21:16:4d:bd:74:
41:42:03:a9:28:0a:95:91:c1:36:67:c0:96:91:42:
11:45:e2:2e:a8:bf:52:b1:17:8b:c8:72:ca:cd:58:
7d:f1:eb:cc:e8:f3:2a:b8:d1:77:d3:24:d7:a4:b5:
71:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A3:AF:6D:7D:F2:08:A6:65:95:80:42:EF:2D:85:46:31:4F:86:CF
X509v3 Authority Key Identifier:
keyid:BB:18:C8:BF:EC:86:2F:1A:A5:99:8F:18:40:CE:BC:3D:59:26:82:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxjIv-yGLxqlmY8YQM68PVkmgt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fccdc5-a6d6-48f8-8ff6-25c440a0ec1d/1/uxjIv-yGLxqlmY8YQM68PVkmgt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fccdc5-a6d6-48f8-8ff6-25c440a0ec1d/1/uxjIv-yGLxqlmY8YQM68PVkmgt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:72:52:c4:2d:bd:c3:65:40:56:dd:7b:95:c2:d4:a6:e4:50:
a6:06:18:a3:8f:fb:c5:85:27:ef:62:36:78:53:e6:53:b3:de:
39:82:96:bd:58:b7:57:b5:93:bf:88:62:92:ce:0c:75:83:1b:
1d:98:53:2c:31:a2:02:8b:9b:4e:8f:74:bd:09:cb:e0:f7:14:
78:23:57:ae:94:4f:ab:ef:de:82:92:8b:8d:6c:aa:88:59:36:
15:ba:39:85:10:30:03:bc:ca:ce:e3:17:05:a3:e0:84:e3:63:
03:6b:2b:ef:0c:9a:8c:6d:ef:c5:fa:b7:cd:4a:3d:e9:8b:ac:
7a:d2:7c:0a:4a:5f:e7:95:2b:ec:f5:6b:48:86:24:65:cc:d6:
f1:c3:6f:f5:9a:00:9c:b0:a3:51:f7:0c:cd:4a:52:8f:45:33:
54:6d:ac:22:ec:46:cb:77:61:23:6c:47:1c:f3:20:ee:14:7a:
17:3e:1c:b5:df:34:47:00:9f:5e:ae:4d:91:06:68:12:1e:b6:
d9:ed:ad:61:97:d3:b9:53:09:78:f0:64:d0:14:16:f4:74:eb:
96:bb:7f:45:db:87:c7:4c:c1:de:c4:ed:a6:17:34:bf:b2:6e:
76:fb:27:c0:9a:fc:d4:e6:74:77:50:ff:1f:06:40:4c:bf:39:
33:60:ec:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:03:45 2025 by rpki-client