Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
File: TphKWkt4CLtOoy0xC90H7MlXURM.mft (raw, json)
Hash identifier: LEmbSwHyZABWKGR72vYfPi559lw9DHdrE3yHxdMq03g=
Subject key identifier: EB:BE:CA:09:53:C3:21:B8:C0:A0:FF:E7:29:5D:3B:3A:F2:50:19:FF
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial: 0195E0B4C1B052D59C1EAB428AD36914E9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 07:01:37 +0000
Manifest this update: Sat 29 Mar 2025 07:01:37 +0000
Manifest next update: Sun 30 Mar 2025 07:01:37 +0000
Files and hashes: 1: 8ZKbnPniu913SnjXvn3kXFXoTm0.roa (hash: 5HixzWr+kvtOLRKOe0GySJFEoBIN8n7Szdz/SR3iCoA=)
2: TphKWkt4CLtOoy0xC90H7MlXURM.crl (hash: ipHNKw9Q9t8XL3pTlU8Ka90EovusrcXXlf6S7P0Bq+A=)
3: c5p1cEEnGb5RFBRHp7Sxm_tjKvM.roa (hash: M29Br9NKk77+hhhlGq1bhWv7l0daFqIJWaEI7ntt2wY=)
4: iDLcfc6aCabj7RN8rRXRQoXvHeA.roa (hash: UvXUgafoqKLsjB+HeAD02OLRE2t5kuX7jZTUuLZ1nRA=)
5: u6tKtCCW-Dj0-HkdzJ6yaeEuRAI.roa (hash: dfQrij6E/OioNCwBaUVfNrimg1NkdqgGbAXbWqoJr0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:c1:b0:52:d5:9c:1e:ab:42:8a:d3:69:14:e9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Validity
Not Before: Mar 29 07:01:37 2025 GMT
Not After : Mar 30 07:01:37 2025 GMT
Subject: CN=ebbeca0953c321b8c0a0ffe7295d3b3af25019ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:41:25:65:5e:f1:bd:6f:54:e3:5e:2d:96:
2e:d2:90:72:e4:dd:dc:35:42:e4:f8:1a:77:04:2c:
54:b0:8b:b8:37:b2:fe:0d:37:92:f2:52:0e:81:38:
f0:ec:31:a9:b3:3c:21:7f:31:f7:50:32:d7:d9:fc:
49:f0:9d:66:cb:a7:a8:66:95:4a:c7:30:fd:e4:40:
e4:c6:ba:9c:24:74:16:ef:0f:93:ce:04:5b:2a:b5:
99:56:eb:e0:e1:df:e9:c2:c5:47:1d:ff:70:f4:e8:
a3:43:41:31:dd:36:b4:43:05:e1:8b:29:b0:87:77:
41:65:6a:a7:ed:8a:db:a6:d0:b8:84:af:e8:ef:9c:
af:72:bd:b0:ba:ae:92:0e:fe:5b:43:e9:f8:40:4b:
f7:86:92:db:2d:02:cf:fe:cb:80:18:fb:1d:b2:64:
53:82:96:12:2b:34:f9:03:97:ba:4f:4a:c2:17:64:
7b:b6:69:07:60:85:28:2a:81:56:2a:ed:ac:68:04:
b2:e3:2f:38:5c:cd:ff:0a:30:e7:b5:f7:c1:b9:b7:
4a:74:6d:6e:c0:06:f8:fa:f5:b8:ce:9a:f5:64:b1:
3e:07:b4:a3:50:04:2c:87:c8:41:69:e3:ba:9f:d6:
29:d0:a2:f6:5c:be:1a:bd:1e:d7:8b:43:49:96:41:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BE:CA:09:53:C3:21:B8:C0:A0:FF:E7:29:5D:3B:3A:F2:50:19:FF
X509v3 Authority Key Identifier:
keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:78:89:64:c8:9b:e9:e7:49:81:eb:ff:b2:15:f4:22:8d:39:
3a:3b:f1:62:2e:df:2f:b4:5e:44:47:64:ba:67:1b:97:3e:10:
26:db:90:b5:44:9c:4f:80:da:62:5c:77:2b:75:76:e3:9a:62:
93:d8:4f:97:87:e2:4f:cf:b6:12:c2:bb:4b:53:c6:a6:e9:71:
e2:84:37:51:7b:5e:b5:99:66:40:69:59:76:44:4c:eb:3d:1a:
7e:20:42:7c:f0:25:6e:86:37:3e:41:58:70:f5:a8:77:8f:3e:
16:4d:99:75:72:fe:99:0d:82:76:80:df:a9:62:fe:0c:d6:b0:
63:26:00:21:2b:78:94:2d:90:c0:62:67:06:b2:ce:01:a6:81:
06:50:15:f1:33:76:44:3b:36:c7:59:19:6e:1e:ee:e0:43:23:
2b:c8:82:96:7c:54:ae:17:b6:42:d8:19:ba:a3:88:99:c1:cc:
d5:b4:de:42:f6:c3:89:52:8a:eb:7c:ba:40:7f:47:12:b3:c7:
48:75:59:a2:14:dc:2b:67:ef:1f:94:bc:0f:48:3b:f4:00:70:
96:2f:76:5b:f3:3b:e0:8f:d6:1c:d6:fa:39:a6:2f:54:7e:0d:
74:f1:2f:5d:47:06:7f:a5:15:f1:7d:2f:3f:3c:8a:fa:42:f3:
1a:10:63:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:23 2025 by rpki-client