Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: Bjjg6o9/s+3YGHxu78fARKAL+1yesN2XuOwn/AN/Mog=
Subject key identifier: 6D:0A:AB:33:A4:28:A3:E7:7B:56:C0:33:1A:C2:5E:B4:17:2F:98:71
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 0195E15907C935287A281276BA5713293495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 088B
Signing time: Sat 29 Mar 2025 10:01:02 +0000
Manifest this update: Sat 29 Mar 2025 10:01:02 +0000
Manifest next update: Sun 30 Mar 2025 10:01:02 +0000
Files and hashes: 1: 30qNUm4LVV2JzJAozjpjCljWLl8.roa (hash: xrG/y+AM3EYc5/EtWlaqcCc/K9J1cl96ejgIPJZYD9U=)
2: Z6_bYbvmyerAM_VgnIaDcW67oTI.roa (hash: QWDvfYg2hEe0SCxsF7DniMhJuC7NKbaUI8wFEj7S2ns=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: 8LFFn2s1C4zulf6cI2HSylKAaW1O3fMMhuIYJG65oVE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:07:c9:35:28:7a:28:12:76:ba:57:13:29:34:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Mar 29 10:01:02 2025 GMT
Not After : Mar 30 10:01:02 2025 GMT
Subject: CN=6d0aab33a428a3e77b56c0331ac25eb4172f9871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:0e:e7:e5:f7:ae:da:02:82:c7:18:3a:db:
9d:a4:c8:c8:af:b3:a6:a0:53:f2:a8:27:5c:c4:b6:
3d:51:40:5f:37:b1:ae:5a:f0:02:95:5c:1b:2a:53:
33:4c:7b:39:97:57:6b:62:04:f2:ec:f5:9a:14:98:
bf:df:6d:a2:d7:16:c5:17:a8:90:98:14:62:56:73:
bb:7b:f2:e0:82:7d:6c:0c:d9:ed:11:45:ba:08:d3:
cc:c9:e1:56:ea:be:d2:29:53:f2:04:33:91:c7:10:
98:eb:d4:e0:b2:ed:6d:07:86:54:2c:7e:94:b8:50:
2e:a2:28:c8:f2:ba:95:0e:c2:1f:30:62:c4:c6:a9:
94:0e:2b:64:f7:ce:98:ac:47:e6:46:73:8c:94:af:
3d:bd:4c:1b:31:83:55:b6:6e:c3:72:78:47:4c:c0:
ed:49:5d:09:ba:eb:9c:3e:5c:4c:cf:d2:fb:b4:52:
17:64:66:25:15:38:17:5f:df:2b:a5:70:a9:a2:ef:
cd:3a:4a:23:84:a7:8b:3e:2d:9b:8a:27:28:a5:a9:
f6:3a:b3:54:93:2c:74:c6:34:11:94:a5:b6:6a:4a:
65:4a:e7:8c:f1:53:19:6f:89:7e:05:e9:b1:2b:c1:
a3:00:3c:6f:90:e5:80:6d:0a:e3:47:6c:2e:61:24:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0A:AB:33:A4:28:A3:E7:7B:56:C0:33:1A:C2:5E:B4:17:2F:98:71
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9a:e7:a0:a3:1a:d6:32:97:19:26:83:5e:3d:d9:be:2d:4d:
f7:ee:d9:9e:91:15:76:2c:e7:f6:ab:95:77:6f:66:99:0d:86:
2d:3a:cd:49:8e:2d:bd:9c:24:a0:71:fe:0f:c2:f9:fd:42:c8:
27:33:d2:3d:24:a3:a2:0c:8b:c2:5b:6c:6f:b3:f9:9c:a3:64:
c7:c5:0c:a2:33:bf:48:fa:11:4d:74:d9:73:83:c6:8f:b6:81:
03:b7:f8:11:0c:5d:00:1f:8d:40:88:05:86:eb:2e:db:8f:45:
a0:89:9b:d2:6f:2a:ed:92:2d:9d:50:4f:67:17:36:94:99:f4:
e2:98:62:2f:68:82:a1:ca:5e:79:c2:e1:51:df:c3:1e:9d:50:
59:8d:d7:7f:7f:a0:ba:c5:50:4a:20:b1:b3:5a:3f:a8:7c:b9:
1c:d8:ca:59:68:68:75:a3:b1:b7:ca:99:f0:62:02:c0:dc:c6:
1a:0e:55:0c:cb:5d:9a:01:3d:3e:98:ae:a6:c7:aa:41:3b:f5:
68:e7:29:d6:4b:64:43:3d:a4:0a:dd:90:b8:8e:b3:15:ac:ac:
e4:3a:2b:d5:98:93:d3:db:11:cb:ea:24:35:c1:0f:13:42:9a:
05:db:98:f6:68:44:60:28:cf:8e:93:73:b3:79:2a:df:65:7f:
02:a1:49:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:15:48 2025 by rpki-client