Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
File: eY4NpPkQB7IkdorLTRMfElF9K3o.mft (raw, json)
Hash identifier: 1kpIUU0AmfQ9VUKINd1nsPmsUG7XDU5LBgty0mp3420=
Subject key identifier: 2D:90:5B:59:71:40:2A:C2:9A:AD:1E:85:54:00:4D:75:4E:DB:D6:28
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Certificate issuer: /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial: 0195E12218483303CD167621B4E3DC4BDA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
Manifest number: 06E2
Signing time: Sat 29 Mar 2025 09:01:02 +0000
Manifest this update: Sat 29 Mar 2025 09:01:02 +0000
Manifest next update: Sun 30 Mar 2025 09:01:02 +0000
Files and hashes: 1: JQGa11BJ6rW4XIkwrE2Pn3mnbCE.roa (hash: lyg6mL7hgbTWMhjKowvZCwiOw1BkDLdd336Z4BXH0aw=)
2: PY2GKalpJxh0rVeN3SNnaDuGcN8.roa (hash: SriQyHP0WB/8fwiUvKAdnNLXQ0snarIjG0cxw/V7C/w=)
3: eY4NpPkQB7IkdorLTRMfElF9K3o.crl (hash: ya2U5Qoa/ECRRlW+tRIUkFVoERbcjkpoZOaVYm4lvDk=)
4: numbWnJewpdlWjFsofSPwm7IG3g.roa (hash: 14YqjZz0f+0ogH+Jj76bMz/1yDXbVz5uWlMR4KVjJRU=)
5: psQBUc0pobHwdrhlOUZzj_GPEto.roa (hash: qru8ysHHH3C4jCMlszx1z613KVN+O1eNTXPzB5PAv+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:18:48:33:03:cd:16:76:21:b4:e3:dc:4b:da:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
Validity
Not Before: Mar 29 09:01:02 2025 GMT
Not After : Mar 30 09:01:02 2025 GMT
Subject: CN=2d905b5971402ac29aad1e8554004d754edbd628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:f1:bd:47:1a:4f:78:bd:98:ed:e0:72:8f:
8e:fe:3b:e9:8c:e3:27:9b:84:33:ec:64:0a:50:a8:
6b:39:e7:fd:cd:e6:e9:64:ef:41:7e:9d:ab:19:59:
91:dd:6e:ff:ad:57:03:36:94:02:22:d0:e2:7a:de:
25:a2:b3:52:39:8a:11:0f:28:fc:79:15:3d:dd:c5:
25:6f:70:43:10:3f:25:41:3f:af:eb:c7:81:83:fb:
1b:7e:5a:cf:99:fa:31:bc:0a:2f:2e:5b:e5:17:d1:
02:2b:a3:8a:44:3b:ea:af:05:24:cf:14:4a:4a:d2:
76:94:35:2f:1e:40:ff:b3:2e:6a:c5:54:b4:18:99:
74:cb:2f:df:64:8e:29:9a:f3:2d:cf:33:ef:08:b2:
51:e4:dd:20:58:d0:c3:35:f0:cf:23:94:ab:f0:c0:
46:4a:da:7e:89:8c:2e:25:90:6e:cb:51:d3:5f:21:
69:c2:a4:34:f9:83:cb:0b:93:50:64:6a:e3:c9:a1:
13:7a:4a:16:13:a2:cf:57:a3:67:62:5d:db:79:da:
4b:62:ba:ec:6c:74:c0:95:00:a2:42:86:c9:42:ef:
e3:ca:58:f4:7b:ee:f5:0d:de:62:d1:be:e3:f7:36:
96:63:08:4a:bc:4e:47:f5:50:ff:c6:a2:57:ae:9a:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:90:5B:59:71:40:2A:C2:9A:AD:1E:85:54:00:4D:75:4E:DB:D6:28
X509v3 Authority Key Identifier:
keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:3a:3c:1d:cd:8b:32:eb:16:4d:8a:5f:86:d3:1b:21:48:1e:
2d:f2:b4:be:10:57:08:87:6a:e9:be:a1:9c:c8:34:70:9b:84:
88:1a:92:4f:9a:50:69:6d:1c:a8:54:0b:b4:8d:53:fd:c6:d1:
90:30:24:ff:61:c3:d4:a6:0c:b1:fa:14:0e:e0:ef:46:8d:80:
8b:06:fe:01:44:8a:99:ee:8d:06:fd:c6:24:79:c5:3e:7c:62:
1a:ac:55:3c:43:10:1a:f5:89:48:96:6a:40:1a:9b:15:b9:d2:
2f:51:1d:bb:72:6a:87:9e:c7:41:04:9b:87:97:8f:d1:6b:9c:
5d:3d:46:13:4d:51:e5:51:b3:a0:2d:b3:4e:31:a7:7a:71:e5:
9e:30:d4:2d:6a:22:74:5e:99:98:8c:d7:92:80:5e:51:86:a2:
a6:1c:17:2e:7c:ba:4b:18:bb:cd:ee:06:8a:82:c3:c5:53:4c:
ca:c4:32:e5:43:3c:7f:d6:ba:fd:ad:de:06:28:75:6c:c8:93:
7e:99:d7:d7:9c:69:45:56:5f:e6:ef:30:e5:68:2e:d0:b6:16:
f3:d0:ad:9f:77:1d:b1:4f:82:66:77:27:91:d7:70:4c:62:53:
aa:a0:e5:59:2e:14:b8:6d:df:90:a4:e8:78:06:35:34:74:05:
5b:d1:72:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:12:53 2025 by rpki-client