Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: VLx5kCN8HcR3T99LUi7xKlIP0AsJgJ69geVR6PM68UY=
Subject key identifier: 11:63:6B:E7:99:D5:78:76:40:DD:AF:71:80:45:B2:B6:80:B3:25:7D
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 0195E07D955CDE1A962BD07C2C252C146C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 06:01:21 +0000
Manifest this update: Sat 29 Mar 2025 06:01:21 +0000
Manifest next update: Sun 30 Mar 2025 06:01:21 +0000
Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: sFZGNg8gUGDPhTGOy4nApDNwuxjzQK5jyPBji5fUSF0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:95:5c:de:1a:96:2b:d0:7c:2c:25:2c:14:6c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Mar 29 06:01:21 2025 GMT
Not After : Mar 30 06:01:21 2025 GMT
Subject: CN=11636be799d5787640ddaf718045b2b680b3257d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:61:d8:2c:00:f6:1b:09:4e:f3:a9:24:aa:
a0:7d:1b:7c:fc:2c:9c:5e:86:aa:d5:03:f4:e7:ab:
37:ee:01:b4:54:ac:30:a5:21:98:af:5e:aa:b1:ee:
af:6d:7d:51:e6:c1:8f:3c:44:fc:11:97:c1:a5:59:
a5:13:7d:18:81:19:af:7b:a8:6c:f2:38:e7:9b:43:
bb:c1:b3:ce:7a:32:79:9e:2d:a4:ee:e8:76:b4:d5:
10:d9:38:35:3b:6f:2e:df:a5:41:c5:5a:95:e2:14:
f6:3a:01:77:6c:69:14:bb:84:c6:1d:e2:24:2f:97:
8c:88:df:11:05:dc:b4:e4:b1:6e:a0:28:78:e8:be:
e5:80:d5:f8:cb:95:56:f6:b0:7a:b4:93:b3:a9:05:
e2:ae:9d:f8:82:68:0c:07:c2:03:25:79:02:3c:7e:
a4:02:1d:6b:f0:22:1e:59:84:88:b0:a2:dd:18:79:
91:5a:c3:51:05:ec:6e:6a:4a:34:8c:8e:ac:96:2b:
36:09:64:88:1b:a7:b2:ab:6c:4f:cd:0c:d5:46:74:
f7:fd:06:e9:53:5c:0e:73:44:a1:27:e2:28:a5:ca:
dc:1c:0d:f5:89:a2:2a:d0:75:7b:0a:eb:00:cd:8c:
c6:08:e3:ae:cc:3d:6c:42:64:08:34:0c:a5:7c:80:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:63:6B:E7:99:D5:78:76:40:DD:AF:71:80:45:B2:B6:80:B3:25:7D
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ec:91:37:6b:45:af:af:3f:b9:d3:a1:e8:53:7d:a6:c0:99:
a5:bf:9b:c0:b2:62:8b:a4:f9:f1:1b:18:bf:8f:4b:1b:21:ae:
bc:11:fe:66:92:2b:56:10:55:e4:d3:1d:c7:3e:b5:4f:50:0a:
c7:53:a5:84:c8:88:13:4c:93:4e:46:0a:79:0e:57:56:ba:40:
d8:e6:8f:84:06:2b:1c:54:35:59:51:bb:f4:4b:7e:d7:14:a2:
a8:0f:26:34:89:6b:8a:aa:b3:a0:0a:dc:a0:96:65:5e:f5:58:
8f:c6:2f:ce:c2:e0:ff:e8:07:88:b5:3b:8e:d2:4a:80:97:15:
f1:ae:78:4b:83:5a:97:54:89:e5:5c:f5:55:3a:f0:8f:b1:4c:
e7:51:21:49:ee:6c:a9:a3:d8:7f:c9:47:6c:a2:c4:11:03:f0:
6d:38:2b:08:e6:68:0c:7d:4f:27:dc:c5:0b:97:79:df:5b:3b:
17:b1:35:1f:10:b0:dc:5a:09:bd:50:cc:b2:df:18:36:06:86:
3b:c8:80:99:b4:cd:24:fc:df:b8:34:88:86:ae:57:d7:d2:e0:
c0:55:3b:43:72:83:8e:fe:9c:11:34:da:f4:ba:3d:53:b8:ef:
ff:8b:56:a3:89:b3:3b:7f:6d:58:5d:56:2e:49:ff:f4:03:c9:
fc:df:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:47:28 2025 by rpki-client