
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: N4KXN/ykKm0EVBpJ+W9ZIkPX/USAvCTx1rvZwIsjMFU=
Subject key identifier: CF:FE:87:2C:0B:F5:FA:5D:60:40:5A:96:F7:BD:F1:68:BF:43:10:B2
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 01962F7455637C88BB89E7B65C205BCCEE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0A61
Signing time: Sun 13 Apr 2025 14:01:15 +0000
Manifest this update: Sun 13 Apr 2025 14:01:15 +0000
Manifest next update: Mon 14 Apr 2025 14:01:15 +0000
Files and hashes: 1: KNngLPUEeJfGeGvW_sjNLwrjlmo.roa (hash: VdgpRYVhUpsamPtzdnV+HbncE6iEYGQS6JyumMp2yn8=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: Ic8nKgvYwl8JUCHTRxZMUOnwbDu95isA4RKVynUD2EY=)
3: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (hash: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=)
4: aJuKlK4Eyd-5-SWqzCamWBjJAOA.roa (hash: JqxrD9CIJNSFvb9h8lx5ybgaqxfxBBfuz3mHyoez/iE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:55:63:7c:88:bb:89:e7:b6:5c:20:5b:cc:ee:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Apr 13 14:01:15 2025 GMT
Not After : Apr 14 14:01:15 2025 GMT
Subject: CN=cffe872c0bf5fa5d60405a96f7bdf168bf4310b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4d:ec:ae:b0:d5:b8:c5:79:6e:19:66:36:22:
40:60:79:34:34:e1:23:ff:ce:e6:37:8e:69:a4:3d:
f1:6d:6e:f4:eb:8e:c3:2c:99:b2:fa:39:ba:12:a4:
b5:99:46:b5:ca:88:b1:85:1a:da:b9:6c:96:33:64:
79:bd:fd:40:be:64:bd:80:77:f6:bb:c8:63:1b:88:
16:57:f6:4a:d0:8a:71:e6:e2:ae:54:9e:ee:f7:aa:
74:05:85:20:20:19:10:cc:71:0a:76:3a:64:2e:89:
9c:8a:7e:1c:54:16:37:04:56:3d:65:b3:7b:db:0b:
5d:f2:ca:f4:82:ed:14:14:e9:a1:79:14:55:d1:61:
89:00:c2:80:ee:32:19:94:ae:61:8b:0f:c3:ea:97:
82:aa:79:c0:13:15:53:32:60:e6:14:72:0f:30:d4:
79:14:2c:10:9c:98:c0:78:d1:59:bd:97:d9:fa:c6:
27:c5:f1:7e:4c:ae:db:93:0b:6e:60:25:bc:2f:a0:
f2:09:e0:9c:ff:2c:b3:51:05:f6:3a:fe:5d:d0:ba:
aa:56:4d:d8:2a:18:b5:41:1d:fe:49:ae:e8:f1:7c:
85:ac:e3:7f:8f:b2:29:15:cc:14:38:13:2e:54:89:
9c:51:28:51:74:63:5c:70:db:06:61:e8:27:31:72:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FE:87:2C:0B:F5:FA:5D:60:40:5A:96:F7:BD:F1:68:BF:43:10:B2
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bf:d1:5d:61:79:4d:be:48:ff:5e:2d:c3:88:81:a1:27:3b:
06:70:e7:97:0f:6c:01:35:c8:d6:18:6a:db:b1:74:2e:81:82:
e4:f7:2d:3c:b1:7f:2d:c7:9c:ae:65:10:60:42:7b:7d:f3:cb:
3b:7c:53:0c:4c:ff:f6:3a:54:01:b1:cb:84:f7:ca:af:f9:d2:
a3:ed:75:06:4b:f7:f5:d2:58:f6:00:3e:08:96:f1:54:83:b8:
c9:3e:e7:be:25:dd:07:e3:d1:e9:43:46:fe:66:e5:da:74:fb:
8f:05:58:74:0a:47:10:fa:31:61:13:1a:58:55:0e:ff:07:f5:
82:e5:44:14:ef:8b:a0:32:0e:d2:16:78:5b:8e:f9:66:c6:4b:
ab:1a:64:89:58:e9:b5:64:7c:ca:02:94:59:f9:d6:7c:d8:66:
4b:34:91:16:6f:20:1e:64:cb:27:a3:86:82:f0:12:dd:bb:d2:
6b:e9:21:cf:66:1e:d7:2f:51:ad:cc:b0:cb:f5:fd:1a:ce:6e:
ae:64:1f:18:19:ec:e1:65:ed:40:f1:de:45:2c:fb:c8:bd:cb:
62:4e:bc:7a:d8:5f:20:f5:23:32:74:4f:aa:44:31:fd:e6:dc:
de:01:b2:7b:dd:87:62:51:29:52:ce:71:04:a4:fc:55:ee:a0:
a0:06:74:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net