Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: VJkGhylb5rOJyhjnLIQ890hIP5P6kGIvGkogFxLmcCA=
Subject key identifier: F3:C6:C7:76:F0:60:E5:97:E7:D3:DC:1B:D9:2D:89:EE:61:D1:C3:00
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 0195E07D5AC6AE9F6AFADC95D39B315FD232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 06:01:06 +0000
Manifest this update: Sat 29 Mar 2025 06:01:06 +0000
Manifest next update: Sun 30 Mar 2025 06:01:06 +0000
Files and hashes: 1: VRs8CShO6bRg5uI1JwT1RKe3PrI.roa (hash: fbnkM+ZXK5PucV+W/pV7w3InLQ8yhq+sy8zU5D/9V1k=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: GkNzFPi87UB8EfJBSw3zw0GQZ2zwcPKWsxniDCakVo4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:5a:c6:ae:9f:6a:fa:dc:95:d3:9b:31:5f:d2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Mar 29 06:01:06 2025 GMT
Not After : Mar 30 06:01:06 2025 GMT
Subject: CN=f3c6c776f060e597e7d3dc1bd92d89ee61d1c300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:a7:df:61:36:6f:b4:13:e1:f6:31:aa:c6:
cc:84:06:20:01:44:6e:4f:a5:7c:a2:55:1c:4e:ed:
56:be:35:cf:6c:de:9e:de:a5:6c:11:66:49:66:04:
b7:0b:e7:98:67:2c:de:59:ad:cb:a8:9e:49:25:c3:
23:30:4e:f3:36:05:a7:79:03:75:b6:75:5c:ff:00:
dc:3a:09:1d:2a:66:3c:b1:71:05:0a:73:18:b0:9e:
02:e8:61:97:a3:79:54:dc:50:5b:6b:b4:55:00:9d:
c0:05:8d:59:0d:70:c6:7f:b8:51:a1:28:7f:e5:4c:
25:ef:c9:4e:07:05:75:1a:61:ac:d2:d6:a7:f7:33:
82:d7:ae:54:ac:d5:36:2e:af:d0:d7:86:2d:0c:62:
6d:1e:91:1f:ab:49:b3:07:a5:70:73:9d:24:8a:27:
ba:83:6e:ed:38:74:4a:7c:9c:0c:2e:4a:72:25:5d:
69:04:e6:d3:f5:10:64:5e:ee:a6:67:9d:88:16:fb:
18:55:89:f3:ab:ca:db:48:2a:b4:eb:2f:20:fd:6b:
a6:96:18:28:07:c0:a3:90:ca:75:fc:25:58:30:e4:
46:a6:33:af:8f:a9:17:02:1f:a7:6e:76:26:28:d1:
51:a5:51:86:91:ac:f6:2a:b6:aa:8a:50:a1:4c:f0:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C6:C7:76:F0:60:E5:97:E7:D3:DC:1B:D9:2D:89:EE:61:D1:C3:00
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:86:08:80:75:50:d1:00:0b:61:01:0f:67:d1:8d:bc:48:b3:
29:64:33:3a:a2:0b:37:67:c5:6d:18:c8:c9:52:d9:e6:10:1b:
52:13:9d:56:30:84:09:1b:24:c7:ef:3c:64:93:de:4a:36:b1:
af:f6:9f:95:26:b9:5a:47:d5:44:bf:bd:c4:a9:ed:95:71:66:
fd:03:51:b6:47:9e:d1:5e:ef:9a:a6:34:2c:cf:5c:40:27:9d:
2f:fc:09:52:02:d5:c6:69:c7:9b:77:a3:b9:7b:fa:30:a1:31:
44:95:13:24:17:6e:cc:72:ad:2a:9b:5d:84:c0:67:4b:bd:5d:
cf:e8:f0:80:95:a3:7b:a4:86:79:a2:7b:c6:6c:22:35:cd:e7:
ae:42:03:e6:bc:43:4c:39:d8:5a:3b:b1:ec:4f:f6:34:f6:2e:
a6:65:d8:1c:de:7b:28:f9:71:b7:9b:bc:d3:1a:c1:39:10:52:
ac:51:3e:e9:8d:8c:45:3e:8b:28:33:40:88:3b:b8:67:de:a6:
da:5a:5b:e4:d7:d8:28:77:de:e0:d3:13:83:2a:a4:7c:4b:8f:
f5:00:09:d6:cf:5a:13:1c:fb:b8:ed:86:72:de:24:1d:cb:f0:
64:d0:92:8e:34:7a:20:b2:5f:df:7a:a3:04:c0:fa:84:e9:b9:
a4:fd:fb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:54:34 2025 by rpki-client