Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
File: ydpiiCTNWbFCcrQFiolkLktHvdw.mft (raw, json)
Hash identifier: Ik7Se3VGlUXMMt4Xt/yrLKz7awe8MGL2qq4uYP281aY=
Subject key identifier: 96:7A:7F:81:A7:1F:EF:5C:94:7B:D9:05:7C:4E:46:FD:5B:00:99:2A
Authority key identifier: C9:DA:62:88:24:CD:59:B1:42:72:B4:05:8A:89:64:2E:4B:47:BD:DC
Certificate issuer: /CN=c9da628824cd59b14272b4058a89642e4b47bddc
Certificate serial: 0195FF2C73A5AE76F42B37ED9DBBA6699CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
Manifest number: 14D2
Signing time: Fri 04 Apr 2025 05:00:57 +0000
Manifest this update: Fri 04 Apr 2025 05:00:57 +0000
Manifest next update: Sat 05 Apr 2025 05:00:57 +0000
Files and hashes: 1: OHyz0yCihOyYZELcx_eXaVTeTj8.roa (hash: hh10KBiSSdE2vx4cx18arLN2/pV/Y4yXBQ4rOBuQMKc=)
2: O_iQtcfGegqJT45Rax7efqPp2Jk.roa (hash: BUrfaVohuc/Gdz/TrWFm+d3l6jKAoDirWJgzHBScGZY=)
3: ydpiiCTNWbFCcrQFiolkLktHvdw.crl (hash: EVYdxaWXzE7iA9lDj9vEhHF4CWrJuSYILaF1MidnBqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:2c:73:a5:ae:76:f4:2b:37:ed:9d:bb:a6:69:9c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da628824cd59b14272b4058a89642e4b47bddc
Validity
Not Before: Apr 4 05:00:57 2025 GMT
Not After : Apr 5 05:00:57 2025 GMT
Subject: CN=967a7f81a71fef5c947bd9057c4e46fd5b00992a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:46:74:49:36:c1:05:9a:46:c8:11:05:e9:
43:48:ad:54:cc:90:42:aa:5e:a4:b2:0c:01:af:2a:
a3:7a:d8:00:11:1b:24:9d:8d:16:cc:5e:7d:b3:93:
f1:42:57:cb:1a:b7:b7:be:22:7f:e1:5a:b5:d9:b7:
7b:e8:72:aa:6f:a6:be:22:da:36:f7:2d:c1:3d:f2:
0a:41:6f:ae:61:f6:6d:9f:6e:4f:8d:d8:88:a3:35:
25:67:7d:dd:50:bd:3a:4a:c3:49:4f:7a:25:5c:9d:
6f:3e:8e:80:ff:cf:3c:32:f5:1a:e5:2b:4c:8f:df:
f3:8f:75:bb:f9:cf:1c:de:e2:02:c3:1e:a5:ae:55:
24:81:9a:cc:70:7d:9b:ca:fb:a0:86:c6:9e:ee:9a:
b8:90:43:0d:ea:0a:60:f2:6d:8d:fa:fb:aa:2d:f8:
a0:ff:de:2e:b3:ee:c9:b6:ef:fc:a7:5a:d6:8e:ac:
46:88:f5:a1:cb:6f:50:75:45:3e:75:8b:15:f3:2b:
6c:57:63:22:71:22:82:35:6f:9e:3c:58:7d:a6:d4:
6e:68:23:c7:1d:3d:54:c1:64:d5:25:d5:00:c1:1b:
b9:b7:72:09:2a:85:bd:a9:c0:8f:d4:19:00:09:a6:
f3:8b:76:1d:8d:89:38:0a:19:bf:13:1f:47:32:12:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7A:7F:81:A7:1F:EF:5C:94:7B:D9:05:7C:4E:46:FD:5B:00:99:2A
X509v3 Authority Key Identifier:
keyid:C9:DA:62:88:24:CD:59:B1:42:72:B4:05:8A:89:64:2E:4B:47:BD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fb:27:29:bc:2b:9b:42:14:8d:a7:6a:f4:13:41:c6:f0:c0:
2e:d4:c0:60:e9:3c:f3:2c:f5:52:4f:53:31:82:91:1c:ae:a5:
88:a8:03:e5:74:1f:a2:6f:ac:ad:2c:a5:f2:87:65:be:3c:cd:
79:e7:38:0b:a5:96:2e:aa:74:82:97:0e:bd:84:02:71:e4:7b:
63:df:a9:d3:34:7d:fb:3e:e0:ab:55:ea:b9:3f:ad:4f:f4:ae:
b2:5a:2d:26:67:18:fd:4b:7f:7a:b2:a2:14:0f:35:c8:bd:c6:
b3:f4:8d:3c:2d:90:d1:ea:fc:0e:90:01:cb:4e:c8:23:20:4b:
7d:9a:14:72:f6:5e:91:4f:5a:97:79:7a:ab:6d:01:71:e7:5f:
f4:0b:22:80:fc:7e:ff:e4:fa:0b:aa:14:db:16:2e:b3:73:27:
2c:35:22:7a:bc:20:1a:b4:b0:bb:0f:00:fe:c5:50:26:57:dd:
62:11:64:30:6d:fa:e7:92:f6:d1:87:99:58:6e:8a:b6:9a:02:
44:fe:bd:05:9c:99:a0:d0:3b:f6:3c:52:9b:ac:e9:a6:c9:8c:
c1:77:d1:c7:1c:37:b4:46:05:07:a6:77:04:a6:eb:8f:d4:b1:
2d:5e:89:fe:b0:4f:c5:0c:ce:d7:4a:8a:39:12:4c:06:97:82:
14:73:57:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:17:37 2025 by rpki-client