Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
File: BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft (raw, json)
Hash identifier: nd5p5e9hkn3C52w1Vrurmc5uP17h+URovgaOfK3qaNA=
Subject key identifier: 80:C2:ED:C7:3C:87:1F:85:A5:20:93:E2:3D:8F:23:63:FE:8E:6F:DA
Authority key identifier: 04:0C:64:23:E9:80:B2:89:76:5A:AD:92:42:35:F4:6D:2E:20:C0:1C
Certificate issuer: /CN=040c6423e980b289765aad924235f46d2e20c01c
Certificate serial: 01975D5C812B26F35EE9448A3E90678C1155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
Manifest number: 0611
Signing time: Wed 11 Jun 2025 05:00:32 +0000
Manifest this update: Wed 11 Jun 2025 05:00:32 +0000
Manifest next update: Thu 12 Jun 2025 05:00:32 +0000
Files and hashes: 1: BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl (hash: uPf2UKpODN+QXqMhcuBznjCA329B/20hk9IWoOtUTL0=)
2: M8AiCxgMSSUgBuVdFRu7pkvGtCo.roa (hash: pnvkZHQqProNXp2Y06uxspQQFP7772iRU8HPzD5Li1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5c:81:2b:26:f3:5e:e9:44:8a:3e:90:67:8c:11:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040c6423e980b289765aad924235f46d2e20c01c
Validity
Not Before: Jun 11 05:00:32 2025 GMT
Not After : Jun 12 05:00:32 2025 GMT
Subject: CN=80c2edc73c871f85a52093e23d8f2363fe8e6fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:43:07:26:83:09:a2:30:d7:e4:7a:b4:78:
1d:49:c1:dc:8e:0b:40:83:11:a4:bc:99:65:30:3d:
eb:fd:f8:20:8e:87:ff:29:7a:5a:88:ac:14:95:5e:
a9:42:48:15:b6:b6:96:b0:3b:41:7a:63:74:1a:ee:
29:81:0e:81:1e:52:f7:8b:2a:3f:d9:a5:97:4e:e7:
c3:53:6c:c3:d7:da:af:80:64:7e:bf:5b:75:96:96:
89:94:35:2a:73:4c:90:37:0d:59:b8:9b:e8:33:6a:
2f:aa:f5:78:f8:6f:54:43:27:bd:de:cf:76:0b:f9:
f6:49:74:0f:2b:27:47:b1:18:21:79:a6:69:0e:88:
05:ef:72:59:63:f0:fd:1c:60:29:0b:e8:42:1c:9d:
9c:e0:07:e1:8f:04:f6:4a:e7:fd:9d:b2:ed:1e:f5:
8f:55:2e:5a:a8:a1:23:78:6b:95:ff:e5:3c:41:93:
b7:ce:a2:4b:4b:08:5b:aa:0b:5b:de:a9:b1:4e:28:
78:5d:b2:4b:ff:58:a6:70:f2:02:07:04:1c:f2:d9:
6d:cb:61:b3:fe:14:57:04:7e:f7:4f:6c:c7:63:2c:
69:fb:39:53:3d:8b:b3:8d:cc:11:63:7b:69:39:a5:
ab:69:86:7f:81:8a:cd:25:e6:5b:7b:07:1e:92:6d:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C2:ED:C7:3C:87:1F:85:A5:20:93:E2:3D:8F:23:63:FE:8E:6F:DA
X509v3 Authority Key Identifier:
keyid:04:0C:64:23:E9:80:B2:89:76:5A:AD:92:42:35:F4:6D:2E:20:C0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:08:83:22:d3:2d:ef:ec:ea:71:03:e2:5d:b1:2e:92:6b:00:
23:57:c4:a2:01:7f:16:30:82:dd:81:62:8c:3e:96:11:63:48:
39:ed:3d:08:33:46:f9:98:c7:ea:e7:00:a7:3f:5a:00:14:93:
9d:a4:86:39:77:9f:a8:4a:96:e1:a1:08:79:7b:a4:9f:a4:13:
b2:61:60:07:ed:d2:37:d6:69:0f:59:82:4c:bd:7b:3b:81:01:
a9:71:34:df:ee:67:3a:86:6e:40:dd:00:a8:de:26:78:af:97:
b9:81:5a:5c:aa:2e:55:f0:c8:01:52:14:9c:99:4b:e5:c3:e6:
13:93:18:f5:cb:1f:e9:2f:06:44:2c:74:30:7a:a3:e6:69:c7:
ab:4f:bc:de:d4:25:ac:20:20:b2:a2:4c:c1:ca:7e:6a:63:a5:
e7:2d:fb:4b:5a:2f:44:d0:99:af:64:d5:ae:82:a1:f1:0b:c8:
ed:fe:1e:24:8a:b8:fa:90:e4:9d:03:78:81:74:73:e9:14:d8:
dd:6c:90:04:8a:35:17:9c:0f:1d:26:f2:bf:c5:41:d7:26:f0:
6a:93:e1:06:5f:12:6a:0a:96:94:c7:92:52:39:c0:1c:ad:1d:
f9:54:6c:62:44:76:0a:5a:c9:40:e1:83:06:34:34:22:94:f0:
36:8c:f1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:08:50 2025 by rpki-client