Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json)
Hash identifier: 15eoqlzsFbc3GczvmDgckBaLb0njI/qotQf/1pDacJg=
Subject key identifier: 10:4A:08:6A:FE:EF:CF:F5:04:4F:67:6C:3B:75:0B:BD:26:11:29:0C
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 0195E07DBF413A8AC37A467D7DC3837A11EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
Manifest number: 0725
Signing time: Sat 29 Mar 2025 06:01:31 +0000
Manifest this update: Sat 29 Mar 2025 06:01:31 +0000
Manifest next update: Sun 30 Mar 2025 06:01:31 +0000
Files and hashes: 1: BEVOt5Hu7SlSOUV5TBn_pg8-Bq4.roa (hash: nEzdIf15rxzhFQC8rcsKrtOrx8pALRaykpAEEi2uLpo=)
2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: pB5/fQkxEZtlxUWTe9R/hdjTFsQvYj1o5WlxHFQ9n9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:bf:41:3a:8a:c3:7a:46:7d:7d:c3:83:7a:11:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: Mar 29 06:01:31 2025 GMT
Not After : Mar 30 06:01:31 2025 GMT
Subject: CN=104a086afeefcff5044f676c3b750bbd2611290c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:18:1d:e4:62:f3:2c:77:5f:b1:47:1a:7b:
d1:cb:18:d0:84:44:cd:84:fb:72:ce:f1:e0:71:0c:
75:e2:d2:40:31:f0:b4:5e:4e:c3:39:94:a0:ea:9f:
c5:db:bf:d2:8e:19:79:b9:87:ec:3c:12:c2:b2:c9:
ca:79:51:28:ea:88:77:49:b0:98:41:f4:54:b6:22:
c1:45:c1:e7:57:b4:60:24:20:b6:e3:5d:53:38:85:
35:19:ae:e7:30:fc:1c:df:a3:52:64:5a:26:bb:d7:
0e:5f:50:01:42:b9:65:c4:8f:98:3d:19:f4:7a:1e:
a4:3e:82:5c:60:3d:58:ba:8a:02:f9:df:dc:d4:6e:
28:28:14:5b:00:37:92:20:96:2c:52:77:ca:f7:ef:
3e:7a:70:ee:74:29:32:cb:e6:01:59:8b:23:a9:a5:
f7:d6:07:e0:4d:b3:d2:df:3e:59:9c:7e:93:b2:19:
16:dc:c2:4a:5a:4d:8d:0e:6c:78:dc:e2:39:9d:d0:
12:7d:01:72:7a:3d:be:c7:e0:7a:a3:a7:40:3a:c3:
e1:e1:8c:c6:48:9d:38:1a:af:0b:04:4f:20:b4:38:
fc:e3:73:1d:09:41:06:cb:a0:e1:80:ce:26:a4:d5:
5c:84:17:5f:2c:b4:4c:3c:26:d1:6c:3a:dd:bb:04:
d6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4A:08:6A:FE:EF:CF:F5:04:4F:67:6C:3B:75:0B:BD:26:11:29:0C
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f9:18:ff:90:11:85:5f:69:c2:e6:fd:d5:76:66:f8:f9:e0:
6c:4f:82:e2:5e:a6:19:f6:b3:17:6a:20:b6:64:be:4a:93:a7:
ba:e9:2e:b9:5e:61:dd:bc:be:e0:8d:c4:51:55:9a:4c:64:02:
02:ae:25:73:e1:f5:b3:8e:c1:26:86:8c:ba:f4:07:0d:5c:ca:
b3:1a:b9:ba:52:02:92:a0:c6:ed:d9:ba:49:59:50:ea:94:90:
64:38:5c:18:57:66:e2:e9:f4:4c:ed:16:7e:bb:d1:da:69:3e:
ec:a0:26:7b:8e:98:de:bd:25:d8:4b:4c:24:1d:0d:f7:52:4e:
74:11:db:7c:d1:11:3a:b3:ae:b7:72:f0:65:16:3a:6a:10:cf:
35:fb:4a:78:7d:aa:05:5b:5b:8d:da:05:5d:1b:96:13:66:cc:
ce:07:d6:e0:31:c0:6e:1c:d7:78:e3:88:fe:08:a9:30:f9:23:
12:48:10:00:8f:22:63:32:c9:de:83:5d:de:ca:a1:aa:09:e5:
6f:dd:93:9a:38:b7:31:95:09:45:fd:b1:95:9f:db:88:f3:47:
79:16:10:0b:db:93:c5:32:ff:d3:08:b9:f6:1e:8d:b8:0d:35:
e2:eb:4a:02:04:80:60:29:80:77:f1:b8:0b:8d:04:5c:05:ab:
42:fd:18:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:37 2025 by rpki-client