Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
File: ThDafpumSZaP9RoB5aLULyK35N0.mft (raw, json)
Hash identifier: fbPDYDYI1tNcy+0t15Dl2ewHQ8SXqCXscacBaAHBLW4=
Subject key identifier: CE:CA:7D:E6:2D:6E:F8:BC:98:B7:6A:B3:D7:B7:7E:A5:D1:07:A6:31
Authority key identifier: 4E:10:DA:7E:9B:A6:49:96:8F:F5:1A:01:E5:A2:D4:2F:22:B7:E4:DD
Certificate issuer: /CN=4e10da7e9ba649968ff51a01e5a2d42f22b7e4dd
Certificate serial: 019565C037C5EF0CC483BA7030CBCB780062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThDafpumSZaP9RoB5aLULyK35N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
Manifest number: 0727
Signing time: Wed 05 Mar 2025 10:00:50 +0000
Manifest this update: Wed 05 Mar 2025 10:00:50 +0000
Manifest next update: Thu 06 Mar 2025 10:00:50 +0000
Files and hashes: 1: ThDafpumSZaP9RoB5aLULyK35N0.crl (hash: kvffuL20q1cqheh++IaEp95x0pJePcUNc5M67YZ/C5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:c0:37:c5:ef:0c:c4:83:ba:70:30:cb:cb:78:00:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e10da7e9ba649968ff51a01e5a2d42f22b7e4dd
Validity
Not Before: Mar 5 10:00:50 2025 GMT
Not After : Mar 6 10:00:50 2025 GMT
Subject: CN=ceca7de62d6ef8bc98b76ab3d7b77ea5d107a631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:27:8b:5a:e2:19:41:5e:09:e0:9e:3b:9c:
32:ad:d6:fb:e7:2b:6b:46:c0:b6:d6:c9:00:a2:4d:
66:91:52:77:4b:cb:c7:31:d2:32:de:d9:23:1a:f4:
4f:cf:17:93:5d:6b:26:c5:21:cb:24:0e:28:42:07:
2d:c1:cb:ac:f8:0e:5e:10:14:24:9e:f6:3d:89:37:
e1:38:67:9e:18:5b:7c:cc:ea:b7:23:2a:92:a8:65:
26:70:39:3f:a8:27:30:8e:57:2d:2b:be:b8:72:e7:
36:52:c2:73:89:3f:21:80:8e:9e:e5:0c:2f:6c:f6:
6a:6e:1b:cb:50:63:10:f0:b0:00:ef:fa:34:bd:a7:
5f:64:0b:96:7a:85:64:98:cc:44:20:32:fc:0a:4f:
ba:dc:0b:55:69:ba:1b:5e:99:01:99:01:9c:11:f4:
ce:81:63:2e:65:ba:90:61:1c:27:12:b5:83:b6:db:
65:da:c9:3e:d7:e7:f7:9f:9a:7e:3c:ff:ff:cd:fb:
30:05:5d:2f:83:23:7a:1e:ea:37:2d:24:6c:e0:ae:
8e:56:df:b6:4b:2c:e6:4f:52:61:c5:23:77:3c:17:
e4:73:27:de:99:a3:20:35:04:0b:2c:2c:03:94:f8:
e6:86:b7:f6:d3:2e:47:8f:27:fe:d2:94:7f:cd:cf:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CA:7D:E6:2D:6E:F8:BC:98:B7:6A:B3:D7:B7:7E:A5:D1:07:A6:31
X509v3 Authority Key Identifier:
keyid:4E:10:DA:7E:9B:A6:49:96:8F:F5:1A:01:E5:A2:D4:2F:22:B7:E4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThDafpumSZaP9RoB5aLULyK35N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:06:65:d2:f9:29:93:b7:1b:02:1b:91:08:96:53:eb:51:8c:
cd:77:ad:57:29:bf:15:cd:00:07:81:bc:9d:52:95:cb:b4:76:
2c:7b:ff:52:1f:ba:8b:4f:ed:47:d4:28:ea:8f:f8:43:7d:ad:
aa:80:8a:9c:8d:c9:68:3b:34:fb:dd:8d:a3:41:47:04:b3:66:
c0:2a:71:ee:e2:33:f1:9b:2b:f6:04:29:91:cb:90:d1:66:90:
46:8a:62:6a:cc:81:1e:4e:10:c6:bc:07:05:28:5f:09:4a:6f:
61:48:43:20:80:36:ab:8e:b9:0c:10:74:63:99:4b:dd:ed:95:
5b:af:ca:3e:e1:19:3d:6e:49:a0:7b:6d:2f:5b:6a:73:60:9e:
74:ec:5b:d2:2f:2f:b5:4c:15:cf:72:fa:5e:a3:94:42:ec:a0:
a9:1d:73:68:51:af:eb:77:c9:39:12:fe:ee:c4:9c:30:78:6c:
51:8f:42:a0:85:3f:57:58:8c:e8:66:77:45:d4:58:3a:df:d9:
0f:ee:74:76:ba:8a:9b:e8:e6:51:3d:b1:93:04:9d:85:7c:0a:
b5:06:b1:dd:29:06:c0:bf:6b:5c:98:df:64:08:39:c6:f9:1e:
80:ea:b2:61:d3:b4:60:38:6d:61:f4:ca:9a:9c:f0:77:bc:ee:
9c:9b:df:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVlwDfF7wzEg7pwMMvLeABiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTBkYTdlOWJhNjQ5OTY4ZmY1MWEwMWU1YTJkNDJmMjJi
N2U0ZGQwHhcNMjUwMzA1MTAwMDUwWhcNMjUwMzA2MTAwMDUwWjAzMTEwLwYDVQQD
EyhjZWNhN2RlNjJkNmVmOGJjOThiNzZhYjNkN2I3N2VhNWQxMDdhNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvYni1riGUFeCeCeO5wyrdb75ytr
RsC21skAok1mkVJ3S8vHMdIy3tkjGvRPzxeTXWsmxSHLJA4oQgctwcus+A5eEBQk
nvY9iTfhOGeeGFt8zOq3IyqSqGUmcDk/qCcwjlctK764cuc2UsJziT8hgI6e5Qwv
bPZqbhvLUGMQ8LAA7/o0vadfZAuWeoVkmMxEIDL8Ck+63AtVabobXpkBmQGcEfTO
gWMuZbqQYRwnErWDtttl2sk+1+f3n5p+PP//zfswBV0vgyN6Huo3LSRs4K6OVt+2
SyzmT1JhxSN3PBfkcyfemaMgNQQLLCwDlPjmhrf20y5Hjyf+0pR/zc9t1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7KfeYtbvi8mLdqs9e3fqXRB6YxMB8GA1UdIwQY
MBaAFE4Q2n6bpkmWj/UaAeWi1C8it+TdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhEYWZwdW1TWmFQOVJvQjVhTFVMeUszNU4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lMzUxMzItNGI2NC00MmU3LWI3Nzgt
MzJjZDY2NjhiZTg2LzEvVGhEYWZwdW1TWmFQOVJvQjVhTFVMeUszNU4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9lMzUxMzItNGI2NC00MmU3LWI3NzgtMzJjZDY2NjhiZTg2
LzEvVGhEYWZwdW1TWmFQOVJvQjVhTFVMeUszNU4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAZl0vkp
k7cbAhuRCJZT61GMzXetVym/Fc0AB4G8nVKVy7R2LHv/Uh+6i0/tR9Qo6o/4Q32t
qoCKnI3JaDs0+92No0FHBLNmwCpx7uIz8Zsr9gQpkcuQ0WaQRopiasyBHk4QxrwH
BShfCUpvYUhDIIA2q465DBB0Y5lL3e2VW6/KPuEZPW5JoHttL1tqc2CedOxb0i8v
tUwVz3L6XqOUQuygqR1zaFGv63fJORL+7sScMHhsUY9CoIU/V1iM6GZ3RdRYOt/Z
D+50drqKm+jmUT2xkwSdhXwKtQax3SkGwL9rXJjfZAg5xvkegOqyYdO0YDhtYfTK
mpzwd7zunJvfnQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:19 2025 by rpki-client