Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
File: hcNSXWi2ERZWThbh3U5WywNcnIU.mft (raw, json)
Hash identifier: 7cKCRvPiWpjNQ025Zy7q4cVRU9Fi3imre9QzFi93WLc=
Subject key identifier: B4:CC:6F:81:FC:AC:10:FF:ED:73:63:2C:BF:24:31:ED:C8:17:90:46
Authority key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
Certificate issuer: /CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Certificate serial: 01962E2ABEBDEABF68C5699927C9A799AEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
Manifest number: 14F0
Signing time: Sun 13 Apr 2025 08:01:15 +0000
Manifest this update: Sun 13 Apr 2025 08:01:15 +0000
Manifest next update: Mon 14 Apr 2025 08:01:15 +0000
Files and hashes: 1: hEPXQgU_4RM48GU6YHvdaeu2Uew.roa (hash: Y8wvnBW02yBGPfnw7ReZF8CB9IAoGOhz+Y/sJITIMzc=)
2: hcNSXWi2ERZWThbh3U5WywNcnIU.crl (hash: ItADx9Pnc8PL+vd+G25jiLGrY4cu14ygYYl+mjTH8T0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:be:bd:ea:bf:68:c5:69:99:27:c9:a7:99:ae:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Validity
Not Before: Apr 13 08:01:15 2025 GMT
Not After : Apr 14 08:01:15 2025 GMT
Subject: CN=b4cc6f81fcac10ffed73632cbf2431edc8179046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:a1:8b:fd:4f:5c:71:6f:46:07:96:e0:56:
29:d6:46:1b:49:30:41:86:07:48:6a:df:85:58:f8:
25:6b:8b:80:14:7b:c4:89:0f:0b:19:93:29:d2:84:
93:bb:72:19:57:48:5a:25:5a:84:7f:d7:91:cc:ce:
bd:4a:ed:06:75:46:55:b7:d6:a3:57:ac:06:72:34:
d7:7a:c0:36:15:75:06:4a:a8:bc:a9:1f:6b:cb:da:
d7:0f:76:9c:c3:f0:ef:ca:ba:6c:06:0c:88:f9:db:
a6:d2:0f:54:b6:d4:7d:1d:c5:e3:b3:99:79:06:ae:
e5:3e:70:77:5d:e0:16:05:1d:fe:f7:b0:1c:9b:c8:
78:55:b0:66:98:1b:1f:43:72:1e:7c:8d:b2:e5:06:
00:23:9e:8d:ab:cf:20:d9:09:08:bb:b7:98:45:d1:
8b:d5:0b:8a:00:54:80:d4:db:cb:c5:35:ed:aa:71:
fa:3a:b2:b8:09:18:7b:38:bb:38:05:09:d6:69:c1:
32:4d:1c:7a:43:17:4d:5c:0a:06:9e:37:97:0d:ec:
21:09:4d:5e:f8:73:5c:28:1c:51:8a:ef:29:27:40:
ca:48:f3:47:d1:4f:d8:da:89:79:d6:e9:17:fb:82:
2c:c5:bb:90:55:ba:57:fe:40:0d:f2:b9:b7:0b:04:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CC:6F:81:FC:AC:10:FF:ED:73:63:2C:BF:24:31:ED:C8:17:90:46
X509v3 Authority Key Identifier:
keyid:85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e4:a1:46:80:0b:d2:2e:4e:be:43:ee:87:9a:4b:d0:2b:14:
d7:cf:0d:b9:9d:8a:a5:44:b6:14:a9:8b:f8:21:0d:90:98:42:
1b:27:c7:70:46:5c:a3:3f:8f:5a:d5:19:d5:18:f4:c8:28:2c:
94:cc:d0:dc:66:f3:96:3a:86:9e:4a:96:70:9b:87:50:ad:d0:
88:d4:12:dc:33:2e:b0:28:41:89:06:5e:bd:9b:e6:a7:09:77:
d2:66:4f:b3:07:98:05:23:61:d9:46:79:84:31:21:b7:c6:98:
24:8a:2a:5d:f4:91:6f:67:40:c3:eb:5c:eb:3e:1b:1c:f8:19:
b3:1d:7f:a6:89:41:7b:c3:4f:36:85:86:5c:40:3f:6e:19:b9:
ae:2b:10:16:0d:f2:ce:9f:9b:22:63:96:4e:0c:00:0a:6c:23:
24:d1:4a:a8:cc:9b:c2:d6:22:ab:95:15:d7:06:ed:b3:c6:ef:
06:ad:08:90:a2:e8:5b:f0:85:5f:2c:d3:0d:b7:4d:e9:cd:51:
79:4a:4b:a5:17:ae:36:6a:47:e4:71:8c:a7:67:be:e8:ca:94:
bb:c9:d7:8e:86:94:5b:12:9c:27:63:c3:1f:c7:89:e4:44:70:
f1:c8:6a:27:80:5b:fd:f5:4c:49:f4:8d:5f:b0:ba:4c:36:77:
bd:61:a5:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKr696r9oxWmZJ8mnma7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YzM1MjVkNjhiNjExMTY1NjRlMTZlMWRkNGU1NmNiMDM1
YzljODUwHhcNMjUwNDEzMDgwMTE1WhcNMjUwNDE0MDgwMTE1WjAzMTEwLwYDVQQD
EyhiNGNjNmY4MWZjYWMxMGZmZWQ3MzYzMmNiZjI0MzFlZGM4MTc5MDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9ahi/1PXHFvRgeW4FYp1kYbSTBB
hgdIat+FWPgla4uAFHvEiQ8LGZMp0oSTu3IZV0haJVqEf9eRzM69Su0GdUZVt9aj
V6wGcjTXesA2FXUGSqi8qR9ry9rXD3acw/DvyrpsBgyI+dum0g9UttR9HcXjs5l5
Bq7lPnB3XeAWBR3+97Acm8h4VbBmmBsfQ3IefI2y5QYAI56Nq88g2QkIu7eYRdGL
1QuKAFSA1NvLxTXtqnH6OrK4CRh7OLs4BQnWacEyTRx6QxdNXAoGnjeXDewhCU1e
+HNcKBxRiu8pJ0DKSPNH0U/Y2ol51ukX+4IsxbuQVbpX/kAN8rm3CwT72QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTMb4H8rBD/7XNjLL8kMe3IF5BGMB8GA1UdIwQY
MBaAFIXDUl1othEWVk4W4d1OVssDXJyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ZmJlYzEtZWJkMi00MWJhLTgzZDkt
Njk0ZGJmYWRkYjhmLzEvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85ZmJlYzEtZWJkMi00MWJhLTgzZDktNjk0ZGJmYWRkYjhm
LzEvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeShRoAL
0i5OvkPuh5pL0CsU188NuZ2KpUS2FKmL+CENkJhCGyfHcEZcoz+PWtUZ1Rj0yCgs
lMzQ3GbzljqGnkqWcJuHUK3QiNQS3DMusChBiQZevZvmpwl30mZPsweYBSNh2UZ5
hDEht8aYJIoqXfSRb2dAw+tc6z4bHPgZsx1/polBe8NPNoWGXEA/bhm5risQFg3y
zp+bImOWTgwACmwjJNFKqMybwtYiq5UV1wbts8bvBq0IkKLoW/CFXyzTDbdN6c1R
eUpLpReuNmpH5HGMp2e+6MqUu8nXjoaUWxKcJ2PDH8eJ5ERw8chqJ4Bb/fVMSfSN
X7C6TDZ3vWGl1w==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net