Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: Crm+UdkWmGhGZ9d9q7/t55gQ5POJEYxnaCW9/64BgHk=
Subject key identifier: 35:AF:0F:62:45:CE:26:D4:13:4A:6A:ED:73:7D:AE:A8:84:A0:4D:C5
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 0195E1900CB9250B0BBDD4C9D29563A05389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 1093
Signing time: Sat 29 Mar 2025 11:01:08 +0000
Manifest this update: Sat 29 Mar 2025 11:01:08 +0000
Manifest next update: Sun 30 Mar 2025 11:01:08 +0000
Files and hashes: 1: 6nn-10KbmPgCc6evrpm-TWzQPN8.roa (hash: o4INP15AI01CmXxJKcY1+iiTvm9rSpAtz6YN4QZ0dG0=)
2: ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa (hash: rQ9TfGtesxjebHDlAk08FQJ/mYhxwGmDbJSu6X6Tu58=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: Ag54a07gphSAK9lGBhigVm4ZWY2Ouw4sgG1KQYRyiTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:0c:b9:25:0b:0b:bd:d4:c9:d2:95:63:a0:53:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Mar 29 11:01:08 2025 GMT
Not After : Mar 30 11:01:08 2025 GMT
Subject: CN=35af0f6245ce26d4134a6aed737daea884a04dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:51:73:ce:00:f1:1d:97:29:ff:a1:61:19:
56:26:a4:db:cc:dc:d2:bb:a1:61:1e:48:e3:e2:7b:
4f:69:9e:36:e7:b6:37:4b:28:30:07:93:64:4e:15:
1a:eb:3d:eb:f5:4a:fb:de:cc:eb:52:46:10:92:4b:
38:7a:7c:8b:e3:11:76:e3:fd:9e:94:52:76:d9:38:
5a:56:3e:73:bf:bd:4c:b9:08:1b:b6:10:5d:dd:6a:
08:21:07:93:71:75:dd:a0:9c:fb:77:83:cc:21:ea:
a9:9e:2a:82:86:46:a0:ca:a3:13:7c:5a:71:2f:d6:
e7:68:7f:b8:a4:20:19:d0:03:b8:69:a0:4d:54:92:
bb:99:2a:82:4f:8a:df:fd:4b:1f:5d:fa:5f:f7:33:
a8:5b:d3:70:c5:37:a7:76:3b:15:bc:69:80:b2:05:
a6:89:6d:33:fe:9a:fb:d2:34:a6:8c:42:a8:17:10:
c4:bd:df:8f:1f:fb:08:3f:a3:ef:84:74:d6:e0:74:
cc:25:7f:96:0e:31:ce:a3:c1:d6:05:fe:a8:65:9c:
f9:da:56:fc:2d:14:a7:5d:f5:fc:80:9a:71:ce:63:
0e:2e:1b:a2:cd:25:ad:ce:fa:44:31:b1:6e:e0:37:
ba:be:84:d6:83:52:aa:26:6e:c0:8d:a2:6e:30:36:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AF:0F:62:45:CE:26:D4:13:4A:6A:ED:73:7D:AE:A8:84:A0:4D:C5
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:10:61:2a:e1:a7:97:12:a4:c0:5c:77:9d:1b:fc:86:91:3f:
f9:46:f2:62:26:3b:e7:23:b1:24:e5:80:4e:36:02:b3:42:68:
8e:62:cb:70:42:47:7c:e1:db:f1:e3:9f:78:24:66:9c:f0:92:
b0:4f:80:31:82:0a:2f:95:e4:21:17:44:cb:b2:a6:cc:49:78:
31:66:c3:bf:a4:44:ff:5e:c4:79:15:11:de:78:4c:85:b5:99:
d4:8d:b2:96:db:71:e6:43:f5:e6:9a:1c:47:40:82:0e:9d:bc:
6a:fe:7c:4d:0d:06:94:c8:a7:3d:5f:01:13:71:a1:3d:6d:ea:
27:ca:d5:8c:dc:b7:d9:05:15:bd:51:98:df:94:dd:61:bc:0e:
11:29:55:16:1a:35:01:45:84:8f:d0:b2:5f:ca:73:e1:f0:80:
5f:a2:e4:64:e7:37:ac:77:04:c0:3a:8c:2f:23:cc:28:4c:1a:
5d:bf:56:50:01:2e:45:db:fe:ff:17:58:7d:c6:ab:14:0b:28:
52:e0:f7:18:73:0a:47:61:5b:1a:4b:dd:7b:3a:e6:c3:cc:01:
63:3a:bc:3a:6a:2b:d8:57:6d:a1:4e:d0:5f:fe:31:d0:f5:70:
3e:03:2f:f5:87:26:2c:fc:b7:eb:f2:21:70:a7:5a:86:c2:b2:
d1:86:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:19 2025 by rpki-client