Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File: V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier: 3k3O1voOQ9pW2ARm4HHk1YjiprUksHqBtR/yheXiVn0=
Subject key identifier: CC:FB:BA:11:B7:C1:81:86:1D:3F:BA:A3:AD:30:8F:3A:26:A9:39:38
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer: /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial: 0195E0B46E8D9EC52DB6AA58F476C17088F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number: 32
Signing time: Sat 29 Mar 2025 07:01:15 +0000
Manifest this update: Sat 29 Mar 2025 07:01:15 +0000
Manifest next update: Sun 30 Mar 2025 07:01:15 +0000
Files and hashes: 1: IwKSwRXA9Ph0qRohZhJ0WEYVgOM.roa (hash: RFNUKmFIpsyvimoGalaE9V72k6NP7c6/ODYYIyEjkmE=)
2: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: pcvdOaafWOSwbt2EKBwVCtb2oaeSCrBsTMIQAE+B1qU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:6e:8d:9e:c5:2d:b6:aa:58:f4:76:c1:70:88:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Validity
Not Before: Mar 29 07:01:15 2025 GMT
Not After : Mar 30 07:01:15 2025 GMT
Subject: CN=ccfbba11b7c181861d3fbaa3ad308f3a26a93938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:fa:b7:71:43:75:8d:5c:3a:c1:a7:53:c8:
1c:7e:c5:4d:bf:8d:77:f2:7e:2a:1e:6c:3c:37:45:
8a:50:90:3c:2f:7a:18:81:dd:9b:2f:a7:46:bb:bc:
de:7e:e2:f6:8a:62:4d:91:b4:c9:b7:cf:82:64:93:
bd:41:eb:84:d6:e7:26:36:6f:ee:4e:f6:5e:35:da:
53:4d:b0:d7:b4:b3:9d:f3:33:f9:70:61:3a:78:3f:
57:97:0a:a6:6d:97:a5:c8:06:14:e1:68:95:3d:34:
87:4c:a2:c1:a3:b5:3a:78:ce:02:ab:93:dd:b1:02:
62:cd:9c:02:a7:50:3b:84:30:93:04:b3:92:c2:25:
06:46:67:fc:44:02:3b:65:a6:be:cd:a4:33:c7:29:
31:b4:50:f5:ad:f0:06:cf:c4:cd:06:3d:7b:c0:81:
ca:5d:c9:2d:30:8d:f0:d5:68:7b:6f:90:27:8f:62:
05:6f:c5:8a:fd:57:a4:0f:c6:b8:a5:36:3b:4e:b9:
09:dc:a3:5e:d1:ff:00:89:7c:8a:2f:25:d9:1b:a5:
45:85:f7:c0:47:64:22:8c:06:70:a7:5a:b2:fb:6f:
a1:85:a6:82:be:99:f2:2d:87:3a:54:bf:6c:2f:3a:
10:62:37:50:ce:d7:24:c0:a5:21:a1:06:ea:a8:b3:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FB:BA:11:B7:C1:81:86:1D:3F:BA:A3:AD:30:8F:3A:26:A9:39:38
X509v3 Authority Key Identifier:
keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e9:cd:28:be:a7:e5:15:4a:fb:cd:99:c6:56:d0:37:9e:16:
71:e8:c9:12:c9:d2:76:62:45:25:20:ac:08:70:02:83:80:cb:
0a:97:fb:66:0a:b4:0c:19:8e:46:b4:e2:f0:4b:4a:18:ca:78:
42:c7:51:40:20:90:ff:b2:79:b9:26:6a:83:43:5e:97:d5:96:
06:4c:d0:f2:e3:6c:59:fa:cf:48:35:0b:57:14:a6:f4:e8:92:
11:a2:04:a6:08:66:b0:36:c0:02:17:8c:c8:98:fd:3e:2b:29:
49:59:c9:c2:fe:aa:07:45:0f:19:49:eb:b0:07:43:71:40:6c:
82:b7:db:e1:f5:dd:a6:71:cc:47:a8:1e:e0:6f:21:58:d3:0a:
09:b0:f5:bd:05:1f:33:5b:da:2e:f6:94:d2:0e:af:44:91:53:
71:bc:3b:74:a5:bb:c1:f3:f9:67:6f:e3:a6:26:52:87:f0:60:
29:9c:3e:d3:30:95:7a:8e:49:39:b7:33:90:e5:d5:71:9a:f2:
83:c7:d6:34:6a:f5:fb:79:5b:d0:cf:a9:a0:05:8f:3a:b5:4a:
86:c8:17:f2:16:9d:87:4f:6e:8f:e5:c7:a7:07:25:fc:03:bb:
b4:b1:f1:23:9f:e0:e1:11:d8:f7:10:79:05:ad:6a:53:f8:e4:
0b:cd:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:44:59 2025 by rpki-client