Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
File: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft (raw, json)
Hash identifier: 5NcfaAkFyZvROQa+XT8ItOSEfYqJLP0F0T6SyZDywis=
Subject key identifier: F3:24:FD:11:0A:73:D7:C3:43:53:15:1D:7F:4E:58:06:37:17:83:00
Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
Certificate issuer: /CN=428e828829846f63465a37447ece3a746a48dd6c
Certificate serial: 0195E07D9E21E272DAB2DAF5303E18A4D7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 06:01:23 +0000
Manifest this update: Sat 29 Mar 2025 06:01:23 +0000
Manifest next update: Sun 30 Mar 2025 06:01:23 +0000
Files and hashes: 1: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl (hash: qMON2F2FPCGkTR5rP0cVWvxeIiDrxsr+lff+anEfS4A=)
2: _k0OxqJ8CNa2nq6tzt4bUNoG6Sg.roa (hash: TBT+FD53tM1tzuAflJ2lZOj8tykRjtKXY5Xc3IXyQAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:9e:21:e2:72:da:b2:da:f5:30:3e:18:a4:d7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c
Validity
Not Before: Mar 29 06:01:23 2025 GMT
Not After : Mar 30 06:01:23 2025 GMT
Subject: CN=f324fd110a73d7c34353151d7f4e580637178300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:33:dd:f9:8b:a1:1a:6a:07:e6:5d:2f:cc:0b:
b5:f1:05:9c:44:f6:b5:09:2a:ea:8c:79:06:51:91:
9f:02:4e:74:25:6c:39:f3:7c:5b:41:29:ba:85:37:
1a:5d:31:5d:36:85:f2:65:9b:5c:db:22:25:ab:f5:
4b:29:0b:3c:00:1d:c9:9f:3a:ed:32:96:7f:5a:08:
e6:3f:17:0a:e0:6f:7f:09:bd:a8:0b:ef:65:55:0f:
df:7b:24:d0:2c:15:94:7d:f3:7e:2e:86:40:f5:07:
f9:41:4a:36:e7:04:e3:9d:32:d1:a4:77:8a:03:04:
ee:7b:9a:b9:c9:f7:6f:06:05:c6:28:a7:a6:a8:49:
7c:da:94:65:a4:f4:34:a5:9f:01:78:fa:97:96:fe:
2e:ea:a0:bc:13:2b:61:6d:db:d0:c8:a6:da:7b:81:
fa:14:7c:f0:2c:6a:28:55:11:d6:a7:c2:c5:65:6a:
18:0c:ee:2e:38:81:5c:1e:a3:07:fb:df:e4:25:74:
45:1b:20:1e:61:97:aa:14:04:2b:e0:a9:fd:57:66:
5f:0b:4d:1d:c4:70:90:63:4c:26:f1:e0:30:86:f4:
68:40:6d:32:88:4a:ed:72:16:5d:87:64:20:a6:e0:
9b:02:f0:d3:8a:47:5f:f5:df:8c:b6:73:c8:76:f9:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:24:FD:11:0A:73:D7:C3:43:53:15:1D:7F:4E:58:06:37:17:83:00
X509v3 Authority Key Identifier:
keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9c:0c:dd:d0:a9:fd:2f:d0:42:c2:da:0f:43:11:11:c1:e4:
13:4f:78:d7:81:80:bf:78:9b:90:7a:f3:3a:1a:69:10:6d:69:
08:d2:ca:69:a0:48:db:26:66:3d:73:c3:79:9f:2f:40:7d:13:
32:f8:56:62:a3:60:38:6e:3b:74:82:87:58:89:fe:3d:4c:26:
10:a0:04:d7:24:15:bb:86:a8:c0:10:01:e0:a3:e1:29:38:84:
58:83:44:4e:fd:bd:cc:ed:1e:4a:71:50:8d:29:6f:ca:73:c0:
35:e8:ca:93:41:dc:2e:59:6b:48:25:21:af:e0:28:05:ad:ee:
99:20:7d:1e:73:92:94:ee:51:68:e0:e3:f0:28:3a:e5:b5:ee:
e8:9c:04:cd:52:20:71:8c:cd:f6:30:07:4b:d2:06:44:50:3f:
07:de:dd:8e:99:21:66:d8:52:49:85:59:b3:10:ec:d3:49:9f:
9c:83:48:83:5d:28:a8:c8:db:69:d0:03:f8:25:57:78:ba:e5:
6a:40:b3:39:cf:c8:28:57:e7:9b:67:49:58:5a:f5:43:16:14:
0f:82:e4:49:c9:71:f8:04:88:d2:28:07:83:17:47:b7:1a:84:
16:08:3b:e1:2d:0f:cc:a1:62:60:2f:11:22:a7:e6:67:81:f5:
52:00:36:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfZ4h4nLastr1MD4YpNf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOGU4Mjg4Mjk4NDZmNjM0NjVhMzc0NDdlY2UzYTc0NmE0
OGRkNmMwHhcNMjUwMzI5MDYwMTIzWhcNMjUwMzMwMDYwMTIzWjAzMTEwLwYDVQQD
EyhmMzI0ZmQxMTBhNzNkN2MzNDM1MzE1MWQ3ZjRlNTgwNjM3MTc4MzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DPd+YuhGmoH5l0vzAu18QWcRPa1
CSrqjHkGUZGfAk50JWw583xbQSm6hTcaXTFdNoXyZZtc2yIlq/VLKQs8AB3Jnzrt
MpZ/WgjmPxcK4G9/Cb2oC+9lVQ/feyTQLBWUffN+LoZA9Qf5QUo25wTjnTLRpHeK
AwTue5q5yfdvBgXGKKemqEl82pRlpPQ0pZ8BePqXlv4u6qC8EythbdvQyKbae4H6
FHzwLGooVRHWp8LFZWoYDO4uOIFcHqMH+9/kJXRFGyAeYZeqFAQr4Kn9V2ZfC00d
xHCQY0wm8eAwhvRoQG0yiErtchZdh2QgpuCbAvDTikdf9d+MtnPIdvlRrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMk/REKc9fDQ1MVHX9OWAY3F4MAMB8GA1UdIwQY
MBaAFEKOgogphG9jRlo3RH7OOnRqSN1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jNWJiNjMtMzBiZi00OGM4LWE0MzMt
YTJmNjdmMmJmOTUwLzEvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jNWJiNjMtMzBiZi00OGM4LWE0MzMtYTJmNjdmMmJmOTUw
LzEvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJwM3dCp
/S/QQsLaD0MREcHkE09414GAv3ibkHrzOhppEG1pCNLKaaBI2yZmPXPDeZ8vQH0T
MvhWYqNgOG47dIKHWIn+PUwmEKAE1yQVu4aowBAB4KPhKTiEWINETv29zO0eSnFQ
jSlvynPANejKk0HcLllrSCUhr+AoBa3umSB9HnOSlO5RaODj8Cg65bXu6JwEzVIg
cYzN9jAHS9IGRFA/B97djpkhZthSSYVZsxDs00mfnINIg10oqMjbadAD+CVXeLrl
akCzOc/IKFfnm2dJWFr1QxYUD4LkSclx+ASI0igHgxdHtxqEFgg74S0PzKFiYC8R
IqfmZ4H1UgA2zA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:25:43 2025 by rpki-client