Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
File: zcmBSoLMto9Rw3v4OubPV4JEyho.mft (raw, json)
Hash identifier: 87XGeWbWQpDRbRb/8mFUXtVyXrb95fjvENzwnxidlnQ=
Subject key identifier: 3E:44:2F:83:CE:9F:82:16:75:EE:F5:0C:57:D4:51:FF:1B:C3:AF:50
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 0195E190723994785A62DB1EB49B01283C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
Manifest number: 13C7
Signing time: Sat 29 Mar 2025 11:01:34 +0000
Manifest this update: Sat 29 Mar 2025 11:01:34 +0000
Manifest next update: Sun 30 Mar 2025 11:01:34 +0000
Files and hashes: 1: LenxSXNvYUG0PNAIsxLHW6t8Gig.roa (hash: 2tRf/A4+PlvxT/fJxe1ZYsaChcE92rdvTlPk4uzM12k=)
2: RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa (hash: Pc/AiM+TyshIYca3WAF87A9bUXB/n7CNYqhspT/vd/c=)
3: zcmBSoLMto9Rw3v4OubPV4JEyho.crl (hash: wgx8gxPbacoX0r2vhQ56vSh4zWIQnM+QIcq9zp9ZaKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:72:39:94:78:5a:62:db:1e:b4:9b:01:28:3c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Mar 29 11:01:34 2025 GMT
Not After : Mar 30 11:01:34 2025 GMT
Subject: CN=3e442f83ce9f821675eef50c57d451ff1bc3af50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a1:61:bc:3d:22:db:3a:f1:fd:c0:d0:f4:78:
2e:17:2e:33:97:38:a9:73:cc:38:14:b8:6f:e4:54:
d7:3d:3b:83:f1:3d:1a:b1:d4:71:fe:9f:5f:43:fa:
e6:65:dd:03:19:60:75:b4:6d:8b:89:f6:cc:a5:d1:
d6:fd:4a:35:47:be:18:9b:be:d5:c9:6e:d9:5f:21:
89:b2:74:51:28:ff:64:96:09:9b:1a:05:cf:30:fd:
53:bc:cb:a6:49:4b:8f:c5:ee:5f:b6:6c:ad:88:90:
af:06:c2:d5:b6:65:e7:52:23:d2:e9:99:b2:62:cc:
89:dc:73:0f:ed:2f:3d:89:2f:35:3f:c8:17:44:ad:
85:54:b6:76:ee:76:48:5c:6a:ef:cf:84:ce:49:25:
b9:25:d5:46:1d:fd:bd:e8:4e:a9:52:8e:a8:2f:74:
a2:d3:78:19:fa:1e:1a:28:23:0c:60:ae:51:b8:56:
90:99:6a:69:e7:b2:c5:47:4f:18:d2:90:99:29:cb:
a6:bc:b9:8c:d0:92:bb:0c:b6:7e:37:b1:b5:0d:f0:
83:1c:2e:d0:8e:7e:71:fc:21:f9:6e:4b:1d:e3:10:
cb:92:7d:a3:fd:29:24:82:5e:06:14:ed:e2:b6:eb:
9f:d3:e6:14:f4:d9:18:22:88:a4:3f:3e:aa:32:22:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:44:2F:83:CE:9F:82:16:75:EE:F5:0C:57:D4:51:FF:1B:C3:AF:50
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:65:cd:5e:6e:97:a6:1a:f4:fb:8d:9c:3c:51:dc:02:27:ab:
fc:5d:9b:b8:fe:76:6f:49:fa:94:87:5c:dc:d9:0b:dc:da:f8:
b2:9e:d1:e7:bd:e6:ef:49:7c:87:b6:1b:97:f2:96:d9:92:88:
3c:a1:d5:80:d1:1f:44:1c:1b:34:dc:4d:ca:63:4f:72:3f:f8:
80:8f:e1:b4:8f:c3:69:d6:d5:c5:96:46:53:c3:a8:91:d1:04:
99:49:cb:c1:f1:8e:61:a1:7d:49:26:50:4f:5c:1b:ee:77:65:
b0:9a:e3:3a:93:96:57:e5:66:0b:af:59:db:5c:a1:8e:fa:b7:
9a:ef:88:13:92:a2:3d:0f:bc:05:30:08:81:38:d5:22:57:a4:
f5:3c:96:4a:17:7f:14:46:10:f4:6b:a2:34:a3:33:df:fa:66:
73:68:7e:6a:3b:a3:cc:1e:7b:58:bf:2b:0b:eb:9f:50:31:e0:
6c:22:b3:f7:e7:42:19:fa:91:9e:6f:ec:eb:d3:7f:c0:ff:a8:
c8:76:4b:4a:d2:c7:f0:69:1c:bd:18:2b:44:43:70:5b:c9:5e:
9f:76:22:99:5b:5a:0a:bc:66:c1:1c:6a:2f:cd:47:4e:07:37:
d0:11:f9:3e:59:40:94:cc:6d:2f:11:81:20:4b:13:fb:49:30:
ad:64:7a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:41:14 2025 by rpki-client