
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
File: Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft (raw, json)
Hash identifier: tt35MImgM8id/Rps2Bt2TDWX4UFCoo+z1zznOIN3aos=
Subject key identifier: 9F:C9:EA:58:B0:37:1D:C1:D4:44:F2:66:06:2E:97:C7:DD:BD:A8:1C
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Certificate issuer: /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial: 0195E158EBFDDCD8316F5BC5160C61A05F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
Manifest number: 03DA
Signing time: Sat 29 Mar 2025 10:00:55 +0000
Manifest this update: Sat 29 Mar 2025 10:00:55 +0000
Manifest next update: Sun 30 Mar 2025 10:00:55 +0000
Files and hashes: 1: NJlcB7hUDRR-RE3xb80LxJnz-u0.roa (hash: J0hfLalGgnRXjghX77NW/arld10JPRhRmjZmERlfBMg=)
2: Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl (hash: 2MpBX3a4gPvdwcLJ/DMF/qjxyLHzFGmJgjHxIvRBlZw=)
3: SEKUolAV0iu3R-IgPv3RZKJdkfk.roa (hash: I0/mJpzn8H5+HldryccT4hrHNERf/SEflySzK0d1dmo=)
4: sML__Fo9oC0CJq9DVvM3qYNEEFk.roa (hash: wiTYcMvZWhUBrdIa0E5SXixwTb4p3XeI6Z0qWmGIxAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:eb:fd:dc:d8:31:6f:5b:c5:16:0c:61:a0:5f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Validity
Not Before: Mar 29 10:00:55 2025 GMT
Not After : Mar 30 10:00:55 2025 GMT
Subject: CN=9fc9ea58b0371dc1d444f266062e97c7ddbda81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:a9:8e:95:50:21:7a:41:2e:0a:51:4a:a5:
7b:9c:ed:cf:97:f5:01:36:a2:7e:25:79:1b:3f:e1:
5b:d2:4d:2e:47:30:f1:47:b8:0a:b8:f3:a2:4d:df:
69:f5:0d:d1:d2:c9:48:9b:d9:ae:da:a1:c4:69:ad:
02:7d:e4:8f:dc:46:c2:75:01:8c:1d:4f:83:82:6e:
52:f6:cd:c4:8c:22:e9:4e:f5:3a:37:7d:03:79:68:
a7:91:af:4c:82:c6:b9:07:3f:10:6e:09:d3:f2:25:
08:71:c7:c8:84:87:9b:1d:57:0c:b5:3b:e3:be:54:
d1:03:65:11:a0:5c:e0:2b:42:1d:6f:d9:e5:75:aa:
30:53:96:73:3f:df:40:d0:1b:69:fd:ce:9a:04:62:
15:3d:20:1d:43:20:81:53:12:39:15:8e:42:99:e8:
d8:94:b0:cb:b2:4a:8e:1e:a7:01:53:54:67:bd:c1:
c5:5e:2b:3a:63:47:fe:bd:9c:32:90:f5:e7:bf:7b:
c7:8f:bf:b4:f4:be:14:2d:94:22:29:5f:42:db:c0:
dd:2b:a6:4f:ca:3a:dd:bf:21:a0:89:2b:68:f8:49:
a9:f9:d9:03:7b:a3:4b:90:5f:2b:7b:77:ed:4d:60:
a5:c6:b9:00:05:5f:31:7c:d8:67:90:80:ff:32:54:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C9:EA:58:B0:37:1D:C1:D4:44:F2:66:06:2E:97:C7:DD:BD:A8:1C
X509v3 Authority Key Identifier:
keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:da:63:cb:3e:d1:f6:e8:07:47:78:ba:9e:89:b2:85:a9:3d:
44:c9:30:7a:8a:c3:30:ec:d8:84:59:e6:49:bc:04:c5:76:ed:
1d:07:cc:aa:19:42:3b:85:c3:ac:17:11:eb:8d:75:61:35:64:
05:ee:ed:06:0e:90:35:a4:09:bb:17:d5:88:50:95:39:1b:1c:
f2:fe:6e:a2:b0:5f:e1:95:4f:fc:17:3b:8f:5d:07:16:98:b8:
d2:91:23:a1:a1:8d:06:c0:eb:ee:ae:84:00:2f:84:9c:42:72:
b8:b6:da:17:04:7a:38:24:7d:bc:0a:a3:2f:b8:f2:52:94:d4:
f8:40:1c:94:59:a7:84:2f:3d:d2:38:56:bb:d1:34:84:ba:65:
a9:d7:8a:96:48:2f:de:99:f1:c0:ab:29:3c:80:78:a9:88:1e:
7e:b4:1a:70:0c:e9:f1:a9:01:f3:97:1f:9f:10:06:48:71:e1:
24:23:c9:e3:bc:1a:1b:39:68:1a:9c:d2:f7:ae:18:3a:5b:76:
23:0f:96:e1:d4:a1:c8:1f:35:9c:cd:76:76:18:b6:e6:96:42:
d7:2c:f3:1e:d8:84:42:49:b0:8c:64:5b:d9:34:51:27:49:19:
ed:f5:50:2f:17:55:50:38:df:4a:ed:88:13:ea:fa:5a:81:38:
bc:70:f2:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWOv93Ngxb1vFFgxhoF8cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZWZmZTk4YzI0YzNkNmQ2MDg3YzhkMWQzZjkwMWI4Y2Nk
NDAwODgwHhcNMjUwMzI5MTAwMDU1WhcNMjUwMzMwMTAwMDU1WjAzMTEwLwYDVQQD
Eyg5ZmM5ZWE1OGIwMzcxZGMxZDQ0NGYyNjYwNjJlOTdjN2RkYmRhODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hWpjpVQIXpBLgpRSqV7nO3Pl/UB
NqJ+JXkbP+Fb0k0uRzDxR7gKuPOiTd9p9Q3R0slIm9mu2qHEaa0CfeSP3EbCdQGM
HU+Dgm5S9s3EjCLpTvU6N30DeWinka9Mgsa5Bz8QbgnT8iUIccfIhIebHVcMtTvj
vlTRA2URoFzgK0Idb9nldaowU5ZzP99A0Btp/c6aBGIVPSAdQyCBUxI5FY5CmejY
lLDLskqOHqcBU1RnvcHFXis6Y0f+vZwykPXnv3vHj7+09L4ULZQiKV9C28DdK6ZP
yjrdvyGgiSto+Emp+dkDe6NLkF8re3ftTWClxrkABV8xfNhnkID/MlQfowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/J6liwNx3B1ETyZgYul8fdvagcMB8GA1UdIwQY
MBaAFEXv/pjCTD1tYIfI0dP5AbjM1ACIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xZTRhNjQtN2FhMC00Yzk0LTliYjAt
ZGViN2I5MTg5MTY5LzEvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8xZTRhNjQtN2FhMC00Yzk0LTliYjAtZGViN2I5MTg5MTY5
LzEvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9pjyz7R
9ugHR3i6nomyhak9RMkweorDMOzYhFnmSbwExXbtHQfMqhlCO4XDrBcR6411YTVk
Be7tBg6QNaQJuxfViFCVORsc8v5uorBf4ZVP/Bc7j10HFpi40pEjoaGNBsDr7q6E
AC+EnEJyuLbaFwR6OCR9vAqjL7jyUpTU+EAclFmnhC890jhWu9E0hLplqdeKlkgv
3pnxwKspPIB4qYgefrQacAzp8akB85cfnxAGSHHhJCPJ47waGzloGpzS964YOlt2
Iw+W4dShyB81nM12dhi25pZC1yzzHtiEQkmwjGRb2TRRJ0kZ7fVQLxdVUDjfSu2I
E+r6WoE4vHDyug==
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:42:03 2025 by rpki-client