Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier: PlD7vKB19HEtGMvJBqIJdwjfoJhsLz450KAX62nbGP0=
Subject key identifier: 25:F3:B4:83:1A:58:D9:6F:9C:96:46:90:76:2E:D8:47:95:B6:4A:8F
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 0195E15A12CA1B95001EA9FEAAF1CCE4504F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number: 0927
Signing time: Sat 29 Mar 2025 10:02:11 +0000
Manifest this update: Sat 29 Mar 2025 10:02:11 +0000
Manifest next update: Sun 30 Mar 2025 10:02:11 +0000
Files and hashes: 1: cin36IkcVIQMWPjd44GqXKLQuWQ.roa (hash: OwdXlpnQGHCbD8dLSbClcbklFBICkGpHdsNc3VSAeno=)
2: xJ066uLw5CBis8gyryLoKkqRKLI.roa (hash: WiY+5aheCWzt8o2WuBVa4kjZbzzagp24qPWKgNtl8EM=)
3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: MOx5ED+XM6sLRq7R4QiBsJcTVgjizkzXKUC+yu/LESA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:12:ca:1b:95:00:1e:a9:fe:aa:f1:cc:e4:50:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Mar 29 10:02:11 2025 GMT
Not After : Mar 30 10:02:11 2025 GMT
Subject: CN=25f3b4831a58d96f9c964690762ed84795b64a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:6b:52:56:5f:ef:15:40:8c:67:db:48:13:
fa:35:fb:57:76:8f:31:21:4e:97:ad:ba:f4:13:a4:
f0:1e:ee:c3:d8:35:25:bb:9b:ee:e8:48:5b:7d:8e:
17:f3:12:35:24:ed:c1:ac:5b:27:53:be:b0:48:ad:
18:c1:af:94:dc:39:a2:3e:a3:84:11:47:f1:18:49:
fa:e2:48:60:6b:d9:57:b1:eb:c6:6c:1a:37:de:45:
96:7a:6b:ae:c0:c0:0e:91:a5:73:0a:63:57:8a:31:
97:fa:e7:11:ca:70:66:37:82:e7:1d:02:fc:43:7f:
83:af:ce:7b:cb:a0:71:83:55:f0:9e:9d:06:af:61:
1f:03:0e:b2:e6:3a:fc:da:db:32:39:2b:b5:7e:ee:
9a:ad:9f:5a:c6:46:d1:44:a5:48:32:46:40:93:30:
f8:3b:08:89:39:9c:84:c2:38:33:a1:c3:9f:7f:e1:
7b:a5:a8:e2:1e:5e:bc:83:3e:3e:73:70:4b:b6:7b:
7c:65:d3:d9:6c:89:07:20:0f:ea:eb:90:c5:30:a5:
d6:9f:70:e2:0f:ef:59:52:44:9c:ae:65:2b:97:2f:
e3:48:4b:e8:73:7a:9f:41:37:4d:16:e1:aa:e1:33:
8a:56:5a:5c:ed:1a:b6:f0:a0:94:25:6c:2f:ab:0f:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F3:B4:83:1A:58:D9:6F:9C:96:46:90:76:2E:D8:47:95:B6:4A:8F
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8c:79:8b:c4:ca:30:18:3d:42:65:a8:ef:06:9e:99:c5:f7:
9f:55:9c:a3:8f:0d:6a:36:41:50:e5:a1:c9:6b:f8:43:b2:e8:
4a:f1:54:b3:8b:e7:76:05:86:8c:c6:f5:2f:01:fd:0a:3c:89:
bc:42:6f:35:cb:09:d6:df:34:01:36:26:1a:4a:c0:b5:f5:63:
5c:0a:93:ab:cb:de:6d:9e:de:76:a3:4b:b1:9e:a9:df:35:69:
81:f5:7e:b9:17:6e:80:24:59:55:52:f5:71:a2:35:c7:e0:71:
50:74:d2:52:f4:26:eb:67:02:01:e8:d7:8b:6a:b1:1e:16:01:
84:d0:ea:fa:aa:36:f5:bc:bf:50:67:b6:3d:97:f8:18:89:08:
84:08:27:df:a1:1d:ac:a7:c1:9b:11:97:cd:d7:e3:9a:4b:e1:
57:e3:db:10:c2:26:ee:01:54:63:7a:dc:93:4c:de:1f:c4:6c:
88:1e:d3:cc:25:f6:8f:73:7d:10:e6:77:fc:7c:de:cd:15:29:
11:5b:d3:ca:a9:1f:60:6d:35:06:21:d5:42:f2:e5:1a:64:44:
34:f9:ad:5e:83:87:4b:c9:e4:ef:ae:bb:d5:11:78:88:1a:3b:
d3:b4:b8:6c:d9:72:c6:4b:8b:07:90:ac:ba:a9:2e:83:e5:e8:
0c:11:a0:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWhLKG5UAHqn+qvHM5FBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWU3YzQ2YjgxZGRhYjI3NDQyNzBjNWJhZDk4NmFmODZk
ZjRmNjAwHhcNMjUwMzI5MTAwMjExWhcNMjUwMzMwMTAwMjExWjAzMTEwLwYDVQQD
EygyNWYzYjQ4MzFhNThkOTZmOWM5NjQ2OTA3NjJlZDg0Nzk1YjY0YThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgprUlZf7xVAjGfbSBP6NftXdo8x
IU6Xrbr0E6TwHu7D2DUlu5vu6EhbfY4X8xI1JO3BrFsnU76wSK0Ywa+U3DmiPqOE
EUfxGEn64khga9lXsevGbBo33kWWemuuwMAOkaVzCmNXijGX+ucRynBmN4LnHQL8
Q3+Dr857y6Bxg1Xwnp0Gr2EfAw6y5jr82tsyOSu1fu6arZ9axkbRRKVIMkZAkzD4
OwiJOZyEwjgzocOff+F7pajiHl68gz4+c3BLtnt8ZdPZbIkHIA/q65DFMKXWn3Di
D+9ZUkScrmUrly/jSEvoc3qfQTdNFuGq4TOKVlpc7Rq28KCUJWwvqw8ZzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXztIMaWNlvnJZGkHYu2EeVtkqPMB8GA1UdIwQY
MBaAFMwefEa4HdqydEJwxbrZhq+G309gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUt
Mzk5YjdhM2IyMGNmLzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUtMzk5YjdhM2IyMGNm
LzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYx5i8TK
MBg9QmWo7waemcX3n1Wco48NajZBUOWhyWv4Q7LoSvFUs4vndgWGjMb1LwH9CjyJ
vEJvNcsJ1t80ATYmGkrAtfVjXAqTq8vebZ7edqNLsZ6p3zVpgfV+uRdugCRZVVL1
caI1x+BxUHTSUvQm62cCAejXi2qxHhYBhNDq+qo29by/UGe2PZf4GIkIhAgn36Ed
rKfBmxGXzdfjmkvhV+PbEMIm7gFUY3rck0zeH8RsiB7TzCX2j3N9EOZ3/HzezRUp
EVvTyqkfYG01BiHVQvLlGmRENPmtXoOHS8nk76671RF4iBo707S4bNlyxkuLB5Cs
uqkug+XoDBGgmQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:15:37 2025 by rpki-client