Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
File: 1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft (raw, json)
Hash identifier: WAbONMf/yiFtmnv4UcvZM/9Udz5Zxo32QZJ6nUZgxoc=
Subject key identifier: 2F:BD:FB:F2:F7:89:B2:19:23:3D:91:8B:22:72:22:B5:83:FB:F3:9D
Authority key identifier: FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
Certificate issuer: /CN=faf814df8575986dd904a98687583c138768a114
Certificate serial: 0196FCCDC7A1CDB03B73DCBC8F382926F75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
Manifest number: 0FF0
Signing time: Fri 23 May 2025 11:01:06 +0000
Manifest this update: Fri 23 May 2025 11:01:06 +0000
Manifest next update: Sat 24 May 2025 11:01:06 +0000
Files and hashes: 1: 1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl (hash: swl8yF8mvrem7i+2WkUXDs3GFgrN6BXAWdFPHsAsuoc=)
2: PSDe4mK_6sDHN2_ikwrsB7r4x8E.roa (hash: +rSMz15QPdcNrfCJaZ0raaYeAdhGu+UnOVTPQ1q0l6Q=)
3: s5uswa19Uff22iB-dXtqkkmV_rE.roa (hash: nIij+OFtE0vEkYeQJJWHSLDLEYsBsVEmFRZ+nuktJgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:cd:c7:a1:cd:b0:3b:73:dc:bc:8f:38:29:26:f7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf814df8575986dd904a98687583c138768a114
Validity
Not Before: May 23 11:01:06 2025 GMT
Not After : May 24 11:01:06 2025 GMT
Subject: CN=2fbdfbf2f789b219233d918b227222b583fbf39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:92:e4:aa:96:46:0b:9d:b7:ea:d7:29:e9:
70:49:c4:36:18:5d:59:81:44:dc:22:8a:27:cd:22:
e7:a2:fa:9c:b5:2b:cc:ae:0c:90:cb:f4:ce:c9:da:
80:58:b1:6e:bb:d6:9b:fc:12:d5:f7:e2:95:0e:55:
d8:6a:2b:20:86:4c:08:f2:8f:8c:46:4f:29:fa:14:
c1:4b:e5:7b:6d:8e:e3:73:80:47:f9:47:58:ae:05:
5a:3d:19:e8:b1:01:61:b4:7e:e9:7f:de:ef:ed:b3:
26:7f:4f:66:a5:47:c8:19:f2:76:60:b5:c1:a2:b1:
59:18:a4:b7:8c:9c:f9:25:52:ac:3f:b0:f5:ee:a9:
7a:a4:1e:d2:18:38:9b:1e:a1:bc:a3:ee:18:9c:d0:
b4:20:2f:90:08:e6:0a:39:e0:01:e9:19:5e:7a:98:
ea:bc:e7:8a:1f:11:9e:51:c9:65:60:6e:77:47:a0:
2f:37:58:9e:66:50:0f:76:9d:24:e1:7f:45:de:9d:
88:2e:81:e4:a3:49:19:4e:16:c1:d9:1c:c7:f4:ca:
fe:0a:34:9a:9c:f3:6c:87:49:ad:74:68:7c:e7:3d:
03:1f:48:a9:96:52:ae:96:3a:2b:da:a0:1e:81:dd:
37:e7:c6:65:b5:9d:d8:94:62:72:7f:03:e1:64:fd:
e2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BD:FB:F2:F7:89:B2:19:23:3D:91:8B:22:72:22:B5:83:FB:F3:9D
X509v3 Authority Key Identifier:
keyid:FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:08:cb:c9:02:e7:ed:ea:9e:1b:e9:92:1e:75:a3:fa:0b:18:
4e:e4:ab:21:5e:45:54:46:a7:25:5d:d9:94:ce:7e:d1:5f:e3:
f9:81:77:1e:a7:e4:ab:0c:1f:19:f6:64:03:9f:41:e2:4a:6a:
78:f1:bd:f9:ed:d7:89:76:a4:68:d1:26:fb:9d:80:a3:2c:11:
5d:fb:f5:ad:a3:d1:42:d9:56:cf:00:f5:67:d0:e3:0f:51:e6:
5f:ef:1e:f5:ff:0c:ac:04:05:0b:7f:c2:d0:ba:fe:97:a4:d3:
bc:07:7c:24:8a:83:da:0e:8b:a4:36:1c:77:5f:d2:cd:1a:3b:
ff:69:88:ca:89:c5:56:00:96:ed:7f:fb:f9:53:05:88:5f:ca:
47:65:fa:6a:92:d9:46:57:fc:e0:a5:e8:9e:fe:cb:ae:9b:5b:
a8:82:a4:b3:0f:9c:c6:f4:b0:25:34:05:17:5e:eb:a2:79:4b:
06:b2:92:84:08:5e:7e:3f:98:a6:63:49:d4:12:5c:d1:f0:fd:
be:68:5c:3a:61:28:96:fe:0b:53:70:82:7c:b4:64:d9:4b:48:
c0:cc:06:fa:33:0c:8b:cc:78:b5:03:05:88:67:52:1d:3d:ec:
e3:d2:3e:b9:5f:fc:36:c2:57:d0:be:4b:6b:93:14:a1:a0:25:
43:2c:a9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:13:55 2025 by rpki-client