Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: JwAJv6P3LFdFyY4IPOLLWd/ai4B6mVpBlxt9CwrRIGM=
Subject key identifier: 36:56:BE:CF:75:4E:5C:96:E4:67:15:7E:5A:FE:84:51:08:C8:DD:53
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 0195E07D493FE7F613B93FD68761838DC0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 06:01:01 +0000
Manifest this update: Sat 29 Mar 2025 06:01:01 +0000
Manifest next update: Sun 30 Mar 2025 06:01:01 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: c84tZRyTNMkSeMDRvhkZT718m2+0I0329jFZtoQTNrs=)
2: 5395RGU-O7_Y-Wk8o5ckF03TEl8.roa (hash: 2x9LkbbQVmDZR4+CDqZEC8HuaScYKr9cs6YHpuOZlvY=)
3: JRT-ehjK87EWSX2wN_VxdPNgZVU.roa (hash: FFbMq3Jl0t/JwkKVVNHldSFfVrz4m+b2CW8bGskb98A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:49:3f:e7:f6:13:b9:3f:d6:87:61:83:8d:c0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Mar 29 06:01:01 2025 GMT
Not After : Mar 30 06:01:01 2025 GMT
Subject: CN=3656becf754e5c96e467157e5afe845108c8dd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7c:60:e7:a5:74:60:98:25:2b:7b:25:ed:c4:
0c:76:1c:b4:e8:81:48:c4:54:c0:4b:1f:d2:83:f9:
9f:e3:27:be:8f:85:39:00:c7:7d:8e:8f:8f:d4:ff:
9c:3a:02:50:69:c1:9b:50:44:f6:78:a3:40:ab:af:
18:13:48:76:49:0a:bc:f4:4c:1a:e9:49:cd:27:61:
c0:8c:70:42:53:58:9a:5e:f1:f6:1a:69:ab:e9:22:
3c:7c:c2:ad:cc:18:3c:88:43:df:77:47:69:54:e1:
71:36:14:6d:d3:5c:08:66:26:ea:92:9b:49:32:ac:
83:a7:49:4e:fc:c5:77:e8:68:06:65:48:b3:50:32:
9e:62:b5:e4:99:ec:9f:57:35:dd:6d:b7:6e:28:31:
df:67:fd:cf:4e:f6:83:46:a0:bf:a5:3b:06:e9:a4:
18:65:28:23:88:62:33:d9:31:89:35:ec:ee:52:7e:
33:04:dc:ce:8b:9d:52:7f:b0:75:8f:46:32:92:91:
e5:a8:92:63:5f:5f:d7:22:60:01:d8:34:93:3b:77:
9c:ac:0d:fb:52:02:0f:fa:3d:b7:58:b3:66:e4:18:
7e:1d:5c:d3:3d:5e:ed:44:33:16:e3:77:48:38:fb:
1d:f9:be:e2:fa:8f:c4:f1:c6:d0:26:ee:b0:62:ee:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:56:BE:CF:75:4E:5C:96:E4:67:15:7E:5A:FE:84:51:08:C8:DD:53
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a2:30:72:89:85:02:96:01:c2:0b:68:4f:6e:6e:2f:af:29:
c3:84:52:7c:a0:72:7c:27:77:58:1f:31:fd:b1:be:f9:9a:c1:
44:49:0b:01:33:32:c1:97:67:67:3b:3a:38:b8:ff:fa:86:51:
e8:81:9a:95:d0:41:19:10:05:8e:db:e1:a5:95:d3:90:b4:e1:
ed:ba:81:f5:f1:89:1c:7d:a8:2f:db:51:5e:98:19:0e:8d:07:
d4:bd:a2:65:88:cd:70:36:0f:c4:01:06:c8:a6:86:8b:c4:16:
2e:9c:80:bb:96:76:db:37:f1:5a:9e:ca:05:2e:2c:ac:b3:c4:
d7:85:3a:36:da:10:1d:d9:38:d2:e4:f9:c5:51:b4:8d:60:a5:
3d:01:5f:2e:a9:b2:38:72:89:9f:4d:5a:58:6d:08:87:c0:78:
5b:30:aa:ce:85:82:43:a5:86:23:3d:d6:73:ef:b9:95:af:db:
c8:60:d7:d0:15:44:49:bf:b1:66:d9:b8:09:32:3f:d9:47:80:
df:09:d5:71:47:67:8a:72:3c:c5:b7:a1:50:08:3a:60:cc:56:
55:fe:80:72:5d:a0:c6:7d:39:72:34:8a:f0:94:e5:37:9c:db:
81:9a:07:d1:1b:4f:e9:a7:04:70:8d:87:26:32:3e:de:60:16:
cd:c3:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:35 2025 by rpki-client