Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: AEH9xE/goKwbmuW19RMcW8NZ3mDckaHIYmpnZFXQo1k=
Subject key identifier: 71:99:7E:BB:B4:43:09:B9:65:67:17:E0:99:2F:98:2C:EF:F8:8E:71
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 0195E1597022A943808D25F41F6FCAC31928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0B56
Signing time: Sat 29 Mar 2025 10:01:29 +0000
Manifest this update: Sat 29 Mar 2025 10:01:29 +0000
Manifest next update: Sun 30 Mar 2025 10:01:29 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: 2wwZemlu1JcesljlZVk8qrmm9+QrApAaQet3Ha6AOVk=)
2: 8miIDeBQxB0aKJY-TlsIuuJ2hww.roa (hash: mQmM8Cjnfx5WSvhPSj11m+hm6JvBiNUtIRExWbof9J8=)
3: IRGnT1eQmUBmgR6_xtusELr-83s.roa (hash: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=)
4: aw3P8V17V992wZUulFnFkkVrMmo.roa (hash: O9AIELr13JUWTjKqPnJ8lbjYgl5+VRQqDU69j3HTMwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:70:22:a9:43:80:8d:25:f4:1f:6f:ca:c3:19:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Mar 29 10:01:29 2025 GMT
Not After : Mar 30 10:01:29 2025 GMT
Subject: CN=71997ebbb44309b9656717e0992f982ceff88e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6b:32:0c:b7:ea:eb:40:c0:cf:e8:a9:58:fd:
21:e3:c8:c5:be:46:40:4c:89:b5:ab:91:5d:ea:82:
ca:3f:cf:9f:30:d8:2e:09:41:94:a2:63:f5:2b:aa:
8b:9a:8f:a3:23:b2:98:4e:6c:5a:31:35:98:55:ba:
7e:83:f7:61:3a:8a:e8:25:5c:54:2e:06:97:92:ff:
85:66:05:a9:9c:e8:fc:f6:90:09:84:a9:63:26:c6:
22:a4:7a:e6:a9:e9:25:55:50:a5:97:9d:d6:6c:2b:
45:af:63:c0:2e:fa:6b:f9:87:66:e8:39:6b:35:78:
bb:f2:aa:ad:c7:46:bb:20:2b:ff:ca:2a:3e:4b:ad:
cb:2c:56:6c:99:5b:6d:e4:6c:d4:16:1b:87:17:ef:
4e:e4:7c:49:9c:7f:20:f8:9a:a1:22:6f:3b:2b:0c:
b3:0f:8c:1a:63:e9:e9:ff:d8:3d:ac:c7:be:ae:21:
7a:e1:18:56:15:c8:24:d7:cb:da:15:b6:9c:18:87:
da:74:ab:6d:19:d2:13:c3:79:74:71:79:d4:69:bd:
ce:25:58:15:07:f2:4c:53:7a:7b:2c:26:62:14:fd:
40:8c:f1:11:45:bd:68:3a:5a:eb:49:2e:6e:52:27:
b6:77:bd:8f:35:b1:14:cc:7a:67:9f:3b:17:05:59:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:99:7E:BB:B4:43:09:B9:65:67:17:E0:99:2F:98:2C:EF:F8:8E:71
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1b:3b:10:4b:47:d9:49:e8:37:40:f9:36:d7:ad:f1:ca:53:
cf:e4:b1:3c:12:e1:dc:38:0c:ec:5a:7f:36:69:10:37:b8:7d:
1b:d7:be:e9:06:7b:58:f6:be:b3:c4:e9:2c:ff:e2:ab:bf:ac:
49:88:61:13:cd:27:25:59:33:98:1d:1c:01:03:9c:af:07:b7:
ef:b6:b7:62:6b:82:85:8c:a4:d1:fb:b6:2d:bd:d2:b9:46:27:
4f:2a:88:8a:96:db:0d:8e:c0:19:09:25:6c:2e:32:10:b3:c3:
b2:cc:3d:24:f8:38:3d:8a:8d:05:45:e6:f1:eb:27:b0:a3:73:
66:c2:27:2c:e1:8d:b0:39:5d:f7:7b:97:de:e7:ce:71:2d:e0:
37:1d:14:ba:57:bd:dc:05:23:6e:02:c2:b7:07:c7:b8:e0:c5:
f9:29:55:d8:7a:4f:c2:c1:c6:4a:a7:27:81:a5:ad:9f:31:e7:
05:c7:e0:96:59:a5:ab:17:83:00:78:0e:c6:ac:5a:b3:e5:6f:
c1:92:cd:d5:21:40:1b:fe:c3:58:56:9c:a4:75:ae:c8:3a:5d:
33:89:b8:a1:3e:2d:ac:4b:f5:73:70:e6:b0:87:73:75:aa:60:
f6:57:27:cc:17:f7:f9:58:c3:95:d5:eb:21:a2:21:01:30:ef:
6c:2f:7c:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWXAiqUOAjSX0H2/KwxkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJi
NWJlZWUwHhcNMjUwMzI5MTAwMTI5WhcNMjUwMzMwMTAwMTI5WjAzMTEwLwYDVQQD
Eyg3MTk5N2ViYmI0NDMwOWI5NjU2NzE3ZTA5OTJmOTgyY2VmZjg4ZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GsyDLfq60DAz+ipWP0h48jFvkZA
TIm1q5Fd6oLKP8+fMNguCUGUomP1K6qLmo+jI7KYTmxaMTWYVbp+g/dhOoroJVxU
LgaXkv+FZgWpnOj89pAJhKljJsYipHrmqeklVVCll53WbCtFr2PALvpr+Ydm6Dlr
NXi78qqtx0a7ICv/yio+S63LLFZsmVtt5GzUFhuHF+9O5HxJnH8g+JqhIm87Kwyz
D4waY+np/9g9rMe+riF64RhWFcgk18vaFbacGIfadKttGdITw3l0cXnUab3OJVgV
B/JMU3p7LCZiFP1AjPERRb1oOlrrSS5uUie2d72PNbEUzHpnnzsXBVmwQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGZfru0Qwm5ZWcX4JkvmCzv+I5xMB8GA1UdIwQY
MBaAFN23FHE3O7BgPDVu7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgt
NjIxMmFjNDljYTNiLzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNi
LzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShs7EEtH
2UnoN0D5Ntet8cpTz+SxPBLh3DgM7Fp/NmkQN7h9G9e+6QZ7WPa+s8TpLP/iq7+s
SYhhE80nJVkzmB0cAQOcrwe377a3YmuChYyk0fu2Lb3SuUYnTyqIipbbDY7AGQkl
bC4yELPDssw9JPg4PYqNBUXm8esnsKNzZsInLOGNsDld93uX3ufOcS3gNx0Uule9
3AUjbgLCtwfHuODF+SlV2HpPwsHGSqcngaWtnzHnBcfgllmlqxeDAHgOxqxas+Vv
wZLN1SFAG/7DWFacpHWuyDpdM4m4oT4trEv1c3DmsIdzdapg9lcnzBf3+VjDldXr
IaIhATDvbC98hQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:14 2025 by rpki-client