Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: L7D2r2YK7VJDSu0NKeoPqhbjxY4+w2SD/bKio1PE9g0=
Subject key identifier: 5B:D3:CC:16:46:D7:60:CF:DF:44:1F:88:AF:69:C4:3F:64:05:04:69
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 0195E1902AAC07C5924092C8D2D3408F67DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 11:01:16 +0000
Manifest this update: Sat 29 Mar 2025 11:01:16 +0000
Manifest next update: Sun 30 Mar 2025 11:01:16 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: bXzZoOgT6hgP1b8KCcfbAUItTmv+SRfgEblZgUoEXqY=)
2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=)
3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:2a:ac:07:c5:92:40:92:c8:d2:d3:40:8f:67:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Mar 29 11:01:16 2025 GMT
Not After : Mar 30 11:01:16 2025 GMT
Subject: CN=5bd3cc1646d760cfdf441f88af69c43f64050469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:66:3d:61:7e:03:d3:61:24:24:c4:4a:20:
24:21:9b:9d:6d:7b:9f:2a:37:d6:21:bf:28:1a:d8:
fb:de:b9:37:f8:70:84:0f:48:3f:83:c9:b2:4b:c8:
01:47:95:57:8d:f9:f3:de:f9:f5:04:12:fa:e0:32:
32:4b:25:fd:cd:9e:27:41:ba:9a:0f:0d:6a:b3:a0:
4e:c6:1e:21:dd:f8:1c:5d:e6:54:0e:96:5d:68:77:
fc:1f:98:60:d0:e5:a4:e2:2e:3c:4c:6e:45:28:f9:
5f:4b:e5:82:0d:b2:bb:6a:99:a9:9f:85:cf:5b:0e:
2a:dd:94:5b:8d:14:66:3c:0d:88:8f:d3:d7:9a:4f:
06:63:a0:66:64:39:88:2a:6e:ae:43:91:c7:e7:a9:
a0:cb:15:75:a7:06:7d:04:17:e6:38:5c:24:c1:58:
10:07:64:a0:32:94:9b:c5:8b:d0:05:ff:dc:d2:33:
74:94:2c:c4:53:82:3c:d8:26:07:63:6f:87:23:b1:
cb:77:be:aa:79:77:f3:d8:80:72:be:0d:28:7f:de:
80:33:fe:57:54:3b:f3:27:c8:8a:23:13:3f:a7:d0:
2f:05:2d:4d:64:75:74:c9:cb:c6:90:72:aa:8e:da:
b7:24:91:fc:0d:ad:a4:c8:79:7a:20:b8:8e:b1:61:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D3:CC:16:46:D7:60:CF:DF:44:1F:88:AF:69:C4:3F:64:05:04:69
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4f:c5:e1:8c:e8:94:49:32:51:7b:41:28:b7:7e:1d:3a:31:
ef:0c:fa:80:7d:0b:ea:3f:7c:31:5a:9e:ed:0e:d6:ec:c2:bf:
57:3e:ad:d0:1f:2f:b1:7e:a7:ad:7a:05:1c:1f:be:b9:71:28:
76:85:48:52:ee:ab:7b:73:eb:dd:f8:c1:22:a3:c3:e8:f7:52:
e5:a3:01:88:80:87:dc:ae:7d:b3:44:95:6b:28:9a:3d:67:d9:
e1:90:97:09:7a:b4:69:8f:5d:70:5f:7f:8a:cc:11:33:72:a6:
01:09:38:0c:25:ab:58:9b:24:de:32:22:de:79:9c:e8:22:7a:
71:53:65:e7:51:6e:d6:e6:dd:39:c6:40:85:fd:10:2a:29:95:
41:61:a3:e1:92:fa:88:2f:d0:b5:41:d6:25:76:c2:f2:98:4c:
04:3d:b6:fd:d0:c7:e9:13:49:dc:e7:46:ba:3c:62:4b:8a:9b:
16:12:e5:10:bd:53:ee:7b:cb:37:5c:90:f5:17:9c:fb:04:7b:
5a:b3:ea:47:19:2b:0b:5a:5a:de:c1:e6:01:11:f9:de:b8:c6:
17:e8:83:45:c9:63:fa:f7:67:98:23:a0:bc:77:fc:8e:da:82:
c5:6d:f0:29:4f:02:8d:a1:25:2b:02:9c:b6:87:88:e6:9c:01:
fa:1b:00:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkCqsB8WSQJLI0tNAj2fbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZjc3NDFjZDFhZjJiYjM0Yzg2YzczZWEzYmQ2Yzc2ZDk5
NjhkMGQwHhcNMjUwMzI5MTEwMTE2WhcNMjUwMzMwMTEwMTE2WjAzMTEwLwYDVQQD
Eyg1YmQzY2MxNjQ2ZDc2MGNmZGY0NDFmODhhZjY5YzQzZjY0MDUwNDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviFmPWF+A9NhJCTESiAkIZudbXuf
KjfWIb8oGtj73rk3+HCED0g/g8myS8gBR5VXjfnz3vn1BBL64DIySyX9zZ4nQbqa
Dw1qs6BOxh4h3fgcXeZUDpZdaHf8H5hg0OWk4i48TG5FKPlfS+WCDbK7apmpn4XP
Ww4q3ZRbjRRmPA2Ij9PXmk8GY6BmZDmIKm6uQ5HH56mgyxV1pwZ9BBfmOFwkwVgQ
B2SgMpSbxYvQBf/c0jN0lCzEU4I82CYHY2+HI7HLd76qeXfz2IByvg0of96AM/5X
VDvzJ8iKIxM/p9AvBS1NZHV0ycvGkHKqjtq3JJH8Da2kyHl6ILiOsWEM3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvTzBZG12DP30QfiK9pxD9kBQRpMB8GA1UdIwQY
MBaAFBD3dBzRryuzTIbHPqO9bHbZlo0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUt
MWE2NGNmMjFhNjA0LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUtMWE2NGNmMjFhNjA0
LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0/F4Yzo
lEkyUXtBKLd+HTox7wz6gH0L6j98MVqe7Q7W7MK/Vz6t0B8vsX6nrXoFHB++uXEo
doVIUu6re3Pr3fjBIqPD6PdS5aMBiICH3K59s0SVayiaPWfZ4ZCXCXq0aY9dcF9/
iswRM3KmAQk4DCWrWJsk3jIi3nmc6CJ6cVNl51Fu1ubdOcZAhf0QKimVQWGj4ZL6
iC/QtUHWJXbC8phMBD22/dDH6RNJ3OdGujxiS4qbFhLlEL1T7nvLN1yQ9Rec+wR7
WrPqRxkrC1pa3sHmARH53rjGF+iDRclj+vdnmCOgvHf8jtqCxW3wKU8CjaElKwKc
toeI5pwB+hsALw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:00:39 2025 by rpki-client