
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
File: tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json)
Hash identifier: iBLGJpEjm2ip8RSzICtL1Xx1iGeqKwUMasJemWCVv8A=
Subject key identifier: 19:64:A2:FB:C8:B7:F5:A8:E5:8E:BD:45:DD:17:EA:F5:26:3F:A6:2F
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial: 0195E00F56619FE70C9A34B8105E809CA768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
Manifest number: 1304
Signing time: Sat 29 Mar 2025 04:00:56 +0000
Manifest this update: Sat 29 Mar 2025 04:00:56 +0000
Manifest next update: Sun 30 Mar 2025 04:00:56 +0000
Files and hashes: 1: 28g4Blr7nuSyJeVmwy4cGLK9eb8.roa (hash: Q3uRjW4ymMVkt8l5TduM8mGnhXb4GzyvEHZ5j93is8c=)
2: psNnDsOb3MJQFpyT8HfsVNSnwog.roa (hash: KJkUgz1VxvV5lZj00xJ9seKTuebHbMbR6MJlSYq/h5Q=)
3: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: hpb5lXsa1eHa+wTEa2rxzv+5ShxLTiBO5VIGIwGxE9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:56:61:9f:e7:0c:9a:34:b8:10:5e:80:9c:a7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Validity
Not Before: Mar 29 04:00:56 2025 GMT
Not After : Mar 30 04:00:56 2025 GMT
Subject: CN=1964a2fbc8b7f5a8e58ebd45dd17eaf5263fa62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:85:d4:92:76:07:ca:d1:33:db:ed:6e:f7:
9e:ad:57:ef:f1:a1:c3:d1:f1:a1:74:75:6e:8a:bb:
a0:77:2a:8f:14:a1:92:99:1f:3a:f9:b8:1d:02:22:
e4:f4:b1:64:32:fa:81:dc:cd:0d:38:19:46:20:87:
3f:d9:cc:7b:ff:8c:87:5b:dd:0e:73:6d:1b:1a:68:
16:e9:00:19:4e:80:d5:a9:c8:2b:36:df:c0:ac:7a:
ae:b7:07:5f:84:1c:b6:a9:94:78:3f:06:7e:43:64:
45:7d:d3:6c:dc:d2:7f:d9:b1:dc:3e:d4:d0:08:9f:
50:8d:a2:c5:db:4e:a8:08:92:79:ba:87:cb:0b:40:
a6:3d:a0:1d:84:30:75:e0:fa:a4:dd:dd:06:53:0f:
66:2c:0e:76:5f:36:51:f1:97:33:6b:80:4d:a2:2e:
e4:6f:ed:53:5f:66:b5:da:b4:44:34:79:7d:f9:15:
bc:e5:a0:f9:6e:58:16:4a:8a:55:77:5a:a5:89:49:
64:03:10:cf:42:77:ab:3d:b9:ba:99:ff:3e:d1:01:
2f:ca:b7:05:c6:88:90:32:73:d4:40:f3:a6:f2:c6:
db:4f:37:e4:83:0f:fc:a3:df:8b:4f:26:e4:8a:ea:
1e:99:d9:cd:d9:24:f2:0f:b9:5e:be:0a:93:3b:a3:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:64:A2:FB:C8:B7:F5:A8:E5:8E:BD:45:DD:17:EA:F5:26:3F:A6:2F
X509v3 Authority Key Identifier:
keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:55:26:64:8a:0f:fe:45:30:b1:5e:b4:8a:35:85:e4:70:5a:
0d:48:a2:2b:84:17:50:8c:a6:fc:21:7f:cb:0e:05:6d:97:dc:
7b:bf:a9:fc:b9:3c:fb:ed:74:59:83:0d:69:b1:e1:c8:0f:c8:
b9:ed:46:2d:35:7a:4a:ae:9b:0b:c0:08:23:98:6f:7f:a0:17:
b8:93:3f:e0:a6:1f:70:6a:7d:dc:5f:7d:ba:8c:b5:53:cd:95:
39:8a:b8:c3:57:79:6b:62:18:83:b5:30:0c:69:0b:07:9e:fd:
16:4d:44:a6:3d:96:4b:dd:d7:f1:e6:62:8b:9c:65:3e:d9:9d:
c7:3e:49:be:2b:91:12:49:84:59:09:4c:5c:76:74:97:af:93:
c4:67:3a:84:9e:45:e1:ef:6a:d2:15:16:7e:c7:c2:4d:5d:1c:
ca:33:de:a9:51:d2:da:2d:d1:0d:59:6e:7c:2f:be:2a:cb:5f:
1b:25:d5:1f:b7:09:a5:cc:c6:4f:ff:54:da:7e:e2:ba:16:59:
1b:6e:df:5c:8a:e1:49:40:86:77:5e:e5:9e:7b:fd:14:72:d5:
91:6f:48:b5:df:4f:68:55:98:68:81:d8:36:91:30:61:ae:b7:
46:da:b7:93:f8:dc:af:26:e3:2e:86:ad:58:5f:a0:46:6f:ae:
61:54:a2:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD1Zhn+cMmjS4EF6AnKdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzI1OGExOGNmNGQxMjI4ZTVjNzkwNzBkZmE2MzMxMTY4
MzIwYzUwHhcNMjUwMzI5MDQwMDU2WhcNMjUwMzMwMDQwMDU2WjAzMTEwLwYDVQQD
EygxOTY0YTJmYmM4YjdmNWE4ZTU4ZWJkNDVkZDE3ZWFmNTI2M2ZhNjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6SF1JJ2B8rRM9vtbveerVfv8aHD
0fGhdHVuirugdyqPFKGSmR86+bgdAiLk9LFkMvqB3M0NOBlGIIc/2cx7/4yHW90O
c20bGmgW6QAZToDVqcgrNt/ArHqutwdfhBy2qZR4PwZ+Q2RFfdNs3NJ/2bHcPtTQ
CJ9QjaLF206oCJJ5uofLC0CmPaAdhDB14Pqk3d0GUw9mLA52XzZR8Zcza4BNoi7k
b+1TX2a12rRENHl9+RW85aD5blgWSopVd1qliUlkAxDPQnerPbm6mf8+0QEvyrcF
xoiQMnPUQPOm8sbbTzfkgw/8o9+LTybkiuoemdnN2STyD7levgqTO6OR9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlkovvIt/Wo5Y69Rd0X6vUmP6YvMB8GA1UdIwQY
MBaAFLQyWKGM9NEijlx5Bw36YzEWgyDFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMt
NTcyOGZiMjRiZjBlLzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMtNTcyOGZiMjRiZjBl
LzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFUmZIoP
/kUwsV60ijWF5HBaDUiiK4QXUIym/CF/yw4FbZfce7+p/Lk8++10WYMNabHhyA/I
ue1GLTV6Sq6bC8AII5hvf6AXuJM/4KYfcGp93F99uoy1U82VOYq4w1d5a2IYg7Uw
DGkLB579Fk1Epj2WS93X8eZii5xlPtmdxz5JviuREkmEWQlMXHZ0l6+TxGc6hJ5F
4e9q0hUWfsfCTV0cyjPeqVHS2i3RDVlufC++KstfGyXVH7cJpczGT/9U2n7iuhZZ
G27fXIrhSUCGd17lnnv9FHLVkW9Itd9PaFWYaIHYNpEwYa63Rtq3k/jcrybjLoat
WF+gRm+uYVSikQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:32 2025 by rpki-client