Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: z7/dJbiHT9jZo/QMO4RHqytUL5im/r/ty4AHKbbq2U0=
Subject key identifier: 04:9C:26:0D:FB:60:68:A9:A5:24:1A:BD:51:B7:81:89:D5:8A:20:65
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 0195E1224C3B9D743529F414F060D161D15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 0413
Signing time: Sat 29 Mar 2025 09:01:16 +0000
Manifest this update: Sat 29 Mar 2025 09:01:16 +0000
Manifest next update: Sun 30 Mar 2025 09:01:16 +0000
Files and hashes: 1: CPESOVR7NuUuiT1fk3xOj3g1BJ4.roa (hash: 94N98AuoHMwP3zuYxAtYTYC9OnoRJx4KYvMXL1js6yw=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: M/nch2yuWcvpHk8z9ZPbDeWS5LBy193tQsfug8YVwWw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:4c:3b:9d:74:35:29:f4:14:f0:60:d1:61:d1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Mar 29 09:01:16 2025 GMT
Not After : Mar 30 09:01:16 2025 GMT
Subject: CN=049c260dfb6068a9a5241abd51b78189d58a2065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:ca:d8:83:a7:29:6a:ce:0c:f5:b7:30:de:
7f:38:41:28:f4:34:a5:16:9b:fb:87:3d:13:2b:b2:
44:2a:d2:55:53:31:e3:56:6d:2c:81:e3:99:37:a6:
c1:8e:4a:12:c1:52:49:cb:11:3b:52:b8:8a:cf:77:
2b:35:d4:9e:db:d5:59:29:f9:06:f3:a8:eb:54:7a:
10:10:85:8e:0e:9a:04:95:81:1d:e5:9b:e3:9d:46:
f7:f9:5c:a2:d9:79:80:18:d9:74:10:5f:06:68:29:
f1:24:cd:50:b7:ad:0b:82:11:fd:f5:29:7c:06:99:
69:f0:d2:86:67:d1:4b:64:54:1d:58:70:ff:08:81:
87:57:b3:29:f6:29:a1:20:ca:ba:e6:44:d6:2a:ef:
b9:e7:34:5e:f1:7e:b6:2b:df:3d:c2:28:d0:9a:72:
97:f3:1a:75:b0:99:b8:09:5b:46:f0:05:99:a8:af:
b7:a7:db:58:d2:1b:ac:88:45:30:7e:e4:5a:28:15:
33:97:b2:c6:bb:bb:9c:c6:a5:9d:c3:a1:35:0a:d5:
73:56:70:a4:1b:03:00:96:5f:94:ed:8d:48:cc:1a:
73:dd:99:1a:e5:ce:86:51:60:94:10:76:d3:30:e7:
9c:2f:08:e3:f0:d9:03:b9:7f:90:44:32:21:45:af:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9C:26:0D:FB:60:68:A9:A5:24:1A:BD:51:B7:81:89:D5:8A:20:65
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f7:6a:ca:09:d7:fc:36:79:6e:7e:08:1b:35:72:1a:19:49:
ac:e2:70:5c:64:9e:42:cd:41:e2:93:68:2e:7c:89:87:90:6b:
6b:3a:50:48:48:33:36:a2:be:80:f1:c4:12:4f:91:aa:e0:a0:
c2:f0:36:cb:36:9a:f0:90:41:9d:a2:7e:c5:2b:44:15:32:22:
b5:57:19:2e:39:37:32:ee:d7:0a:27:4e:ab:e5:35:11:a2:bf:
a6:3f:e2:12:5e:18:b6:77:22:f7:90:b0:5a:78:56:ee:c1:58:
15:7a:a1:77:70:39:65:b1:fe:e9:94:d7:cb:b9:1a:a8:5b:75:
9d:22:cc:04:88:88:84:87:68:c4:3d:f8:d3:0a:0a:a1:21:1c:
7f:ba:0f:22:fd:98:60:2e:96:1a:3b:8b:f3:4c:57:b4:ea:33:
01:c4:30:d2:6d:ac:b3:44:d4:6a:af:63:67:9f:60:05:9d:7f:
15:8d:32:4d:40:5b:3c:c5:6b:78:05:f7:9c:6a:17:31:3f:bb:
8e:47:99:fc:05:cf:fd:2b:85:79:2c:d5:dd:5a:85:52:bc:74:
1f:4e:f4:fb:cd:55:56:75:1d:f0:be:ae:96:90:90:7b:80:81:
50:86:c3:6f:f6:7b:4c:b3:17:44:97:c7:ed:80:7f:f8:70:4d:
ed:66:f0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:39:17 2025 by rpki-client