Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File: 55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier: OaN8LDNpI7wsi9vl4o5Nv2QST15Z3S3VeuMkTN3k/+c=
Subject key identifier: 19:69:5B:5C:2B:14:D7:33:C4:A7:2D:3F:64:07:AD:4C:CF:85:D4:7A
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer: /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial: 0195E1592B3759E3B1A96478F7957694B98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number: 0FBF
Signing time: Sat 29 Mar 2025 10:01:12 +0000
Manifest this update: Sat 29 Mar 2025 10:01:12 +0000
Manifest next update: Sun 30 Mar 2025 10:01:12 +0000
Files and hashes: 1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: N6mgK1RayXfQt59YjQecMeLmBhg98rIkUl6eaBp4PTc=)
2: _F8TtMCr-GrK1-WadHxYHdaqsV8.roa (hash: OhF5DdkGtGDTUS9hafqNY2D1lnp3rhyFQSObJeOPCts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:2b:37:59:e3:b1:a9:64:78:f7:95:76:94:b9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
Validity
Not Before: Mar 29 10:01:12 2025 GMT
Not After : Mar 30 10:01:12 2025 GMT
Subject: CN=19695b5c2b14d733c4a72d3f6407ad4ccf85d47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e0:e4:c9:94:61:0d:91:c0:e7:20:97:e6:50:
4c:fc:a9:2e:eb:b9:b2:a7:66:2d:06:9a:55:16:79:
e2:e2:63:b7:5b:e9:a0:7c:63:93:81:52:71:51:77:
cd:e2:c5:4d:5f:5d:e6:69:69:0c:2d:d0:e8:89:f9:
7f:c2:15:8b:e4:e1:be:40:bb:35:b0:af:17:e3:ad:
dc:fd:a3:27:ba:d2:74:23:ad:0c:89:33:d7:56:05:
02:c3:71:81:60:d4:99:dd:ad:aa:ac:75:4c:d7:1a:
a9:0b:d7:0e:03:7b:1c:58:6e:48:6c:6f:0a:cf:f2:
47:30:4b:11:29:93:f3:85:1c:1c:66:ff:36:ff:65:
05:96:31:1a:52:31:ec:5e:fd:fc:c7:9f:bb:e8:eb:
3c:4f:70:48:f1:67:7b:1a:de:55:b0:b9:7f:39:3b:
22:1a:44:b6:90:61:29:ca:20:60:b2:f0:90:d3:dd:
47:0d:da:4e:4b:4e:56:92:2d:66:9e:2b:ca:2a:32:
b9:50:be:06:a7:c7:47:7f:a6:d0:5f:3a:f9:b2:04:
db:87:4c:6b:b2:4a:09:02:59:a5:8c:a8:9e:10:a2:
05:96:3c:1f:85:64:a3:ea:96:2f:a6:5e:50:e9:0d:
ac:35:af:4f:04:45:b6:ce:5d:e3:79:30:55:31:a9:
65:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:69:5B:5C:2B:14:D7:33:C4:A7:2D:3F:64:07:AD:4C:CF:85:D4:7A
X509v3 Authority Key Identifier:
keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f0:56:cb:0c:08:ff:14:e6:07:7b:3a:81:2f:e4:4b:4e:96:
2e:33:8e:45:f4:c4:97:9b:91:ce:e4:4a:fd:c4:b0:95:01:a8:
a5:55:7a:1e:30:15:e5:04:89:fb:aa:8e:07:2a:95:29:48:b7:
bf:6e:7b:dd:70:9e:65:15:f7:50:41:66:a6:9b:da:93:5e:fe:
0d:ed:ab:e6:96:58:8a:5c:4b:47:94:29:78:49:08:1a:21:0b:
29:d9:1c:cb:be:75:23:20:ac:5d:19:af:e6:b0:42:c2:a3:38:
68:9e:41:ec:13:36:b7:be:4a:57:eb:b0:d7:8c:35:0c:fb:56:
f9:44:fd:02:9e:61:e3:02:a7:84:5a:ad:08:4c:4c:dc:a3:80:
c8:73:5e:0c:1f:ba:f7:a8:90:3a:57:46:87:0a:99:22:48:b8:
1f:f2:2b:a3:9b:49:0c:ce:a6:8b:ab:0f:60:82:ce:39:9c:cc:
c4:81:94:7a:5a:dc:6f:68:92:cd:54:eb:11:fe:9e:89:54:0e:
21:63:b8:9d:d1:1c:7b:d0:81:b1:25:31:d4:e7:d5:90:50:1e:
01:12:97:bb:2d:f3:ad:f6:58:d0:61:74:5d:14:76:d6:25:aa:
00:07:e4:a1:b6:42:cb:94:d0:a6:62:b2:dc:d4:fa:31:f4:b9:
c1:8a:e5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:13 2025 by rpki-client