Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
File: ydpiiCTNWbFCcrQFiolkLktHvdw.mft (raw, json)
Hash identifier: euuryUqxb4U+zNMIcWIlpxNqUrww85CefuTqtfT1DV8=
Subject key identifier: AF:B6:B6:4B:6C:CA:D4:CF:07:59:76:E3:8F:1B:EB:8F:3C:9E:0E:28
Authority key identifier: C9:DA:62:88:24:CD:59:B1:42:72:B4:05:8A:89:64:2E:4B:47:BD:DC
Certificate issuer: /CN=c9da628824cd59b14272b4058a89642e4b47bddc
Certificate serial: 0195EDCAF09D3DD43CC61E5DDA4A35BAEEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
Manifest number: 14C9
Signing time: Mon 31 Mar 2025 20:00:54 +0000
Manifest this update: Mon 31 Mar 2025 20:00:54 +0000
Manifest next update: Tue 01 Apr 2025 20:00:54 +0000
Files and hashes: 1: OHyz0yCihOyYZELcx_eXaVTeTj8.roa (hash: hh10KBiSSdE2vx4cx18arLN2/pV/Y4yXBQ4rOBuQMKc=)
2: O_iQtcfGegqJT45Rax7efqPp2Jk.roa (hash: BUrfaVohuc/Gdz/TrWFm+d3l6jKAoDirWJgzHBScGZY=)
3: ydpiiCTNWbFCcrQFiolkLktHvdw.crl (hash: fduwQ6E7q48IgKlhoimBu/TGiTQrjSsUz1KIB4nFLzw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ed:ca:f0:9d:3d:d4:3c:c6:1e:5d:da:4a:35:ba:ee:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da628824cd59b14272b4058a89642e4b47bddc
Validity
Not Before: Mar 31 20:00:54 2025 GMT
Not After : Apr 1 20:00:54 2025 GMT
Subject: CN=afb6b64b6ccad4cf075976e38f1beb8f3c9e0e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:ea:38:3b:3e:f6:a2:f4:3b:ab:6b:52:c7:
d9:6e:e4:c5:d5:38:7d:d0:73:77:ff:2d:08:d4:49:
fc:3f:84:5e:40:ed:de:e8:b3:96:65:27:2a:a4:ca:
a1:5d:84:3a:b5:4e:d2:79:12:03:86:a4:4e:cb:64:
f3:4b:d3:e7:4e:e1:82:c3:65:19:0c:60:03:8c:69:
5b:8b:aa:25:3a:12:6a:36:af:77:b6:c8:28:23:6e:
6d:ce:0f:5a:37:0e:2d:f0:01:5e:8f:00:75:13:c3:
a1:cb:e2:f0:b9:5c:98:26:94:75:68:6b:38:c5:28:
c6:6c:6a:f5:45:6d:db:19:f2:bf:0e:5a:16:5b:d4:
2c:bf:07:ba:97:10:7c:06:ac:07:f8:f9:60:71:c8:
c3:8d:b6:7d:77:a8:99:6d:6e:a3:20:e2:cf:53:5d:
90:78:a5:67:de:bf:27:66:a7:ff:1d:46:5e:af:9a:
5d:5d:df:f3:d2:35:8e:40:6b:4d:2f:a8:e3:9b:c7:
9f:2c:dc:d5:e6:b7:fd:ca:c9:ba:ae:e4:08:1b:29:
b9:a5:87:83:ed:f7:73:b9:09:1f:94:1d:47:77:b3:
5f:93:34:72:3f:2c:62:14:3e:21:5d:40:29:14:e5:
de:b1:4e:df:f0:b6:b8:cb:44:cb:45:81:50:2d:c6:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B6:B6:4B:6C:CA:D4:CF:07:59:76:E3:8F:1B:EB:8F:3C:9E:0E:28
X509v3 Authority Key Identifier:
keyid:C9:DA:62:88:24:CD:59:B1:42:72:B4:05:8A:89:64:2E:4B:47:BD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8b:c8:ff:db:10:62:da:1d:26:ba:e1:56:37:f3:4a:85:45:
af:44:55:31:c9:1a:cf:07:fd:ae:b4:7e:d9:1c:83:f0:4a:72:
b4:70:85:42:a4:a0:7e:54:b2:98:68:f7:77:dd:b2:16:52:e4:
13:b5:26:80:c2:48:78:00:90:a4:9e:b6:db:e3:4f:44:1e:fc:
3c:1c:f4:a9:22:b3:85:8b:cf:d7:75:21:8c:ce:80:5b:a8:d3:
c3:a5:a9:49:a9:55:e4:16:f3:76:81:be:0a:25:0e:34:26:57:
24:44:8c:b2:a3:50:91:ca:57:0d:82:93:ae:b0:3a:fe:2c:5e:
56:79:07:ae:eb:04:20:f9:9b:51:d5:93:4b:a4:e0:62:76:e5:
2b:93:6e:eb:9a:31:53:a8:94:e5:f2:e4:a4:c4:4b:4b:21:1a:
14:38:6b:c2:76:b0:78:87:ad:5c:be:db:d7:9e:fd:65:3e:27:
c7:3c:0b:68:e9:a5:56:61:52:1d:33:ba:3e:87:14:59:90:6d:
34:c9:ce:0a:bb:53:b3:25:4e:c2:aa:b1:3c:50:cd:e6:44:b8:
a8:6e:68:23:1c:79:fc:a5:6e:63:5d:65:c7:b8:91:af:5e:19:
13:8a:0e:4d:c5:e1:e9:ae:2d:8c:07:e1:14:b5:b5:4f:fc:3a:
8f:72:0a:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXtyvCdPdQ8xh5d2ko1uu7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGE2Mjg4MjRjZDU5YjE0MjcyYjQwNThhODk2NDJlNGI0
N2JkZGMwHhcNMjUwMzMxMjAwMDU0WhcNMjUwNDAxMjAwMDU0WjAzMTEwLwYDVQQD
EyhhZmI2YjY0YjZjY2FkNGNmMDc1OTc2ZTM4ZjFiZWI4ZjNjOWUwZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuzqODs+9qL0O6trUsfZbuTF1Th9
0HN3/y0I1En8P4ReQO3e6LOWZScqpMqhXYQ6tU7SeRIDhqROy2TzS9PnTuGCw2UZ
DGADjGlbi6olOhJqNq93tsgoI25tzg9aNw4t8AFejwB1E8Ohy+LwuVyYJpR1aGs4
xSjGbGr1RW3bGfK/DloWW9Qsvwe6lxB8BqwH+PlgccjDjbZ9d6iZbW6jIOLPU12Q
eKVn3r8nZqf/HUZer5pdXd/z0jWOQGtNL6jjm8efLNzV5rf9ysm6ruQIGym5pYeD
7fdzuQkflB1Hd7NfkzRyPyxiFD4hXUApFOXesU7f8La4y0TLRYFQLcaQkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+2tktsytTPB1l2448b6488ng4oMB8GA1UdIwQY
MBaAFMnaYogkzVmxQnK0BYqJZC5LR73cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRwaWlDVE5XYkZDY3JRRmlvbGtMa3RIdmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kNzNmYzYtYzQ5OC00YjIwLWE5MWMt
NjU2ZmM3ZjcwMjNjLzEveWRwaWlDVE5XYkZDY3JRRmlvbGtMa3RIdmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9kNzNmYzYtYzQ5OC00YjIwLWE5MWMtNjU2ZmM3ZjcwMjNj
LzEveWRwaWlDVE5XYkZDY3JRRmlvbGtMa3RIdmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYovI/9sQ
YtodJrrhVjfzSoVFr0RVMckazwf9rrR+2RyD8EpytHCFQqSgflSymGj3d92yFlLk
E7UmgMJIeACQpJ622+NPRB78PBz0qSKzhYvP13UhjM6AW6jTw6WpSalV5BbzdoG+
CiUONCZXJESMsqNQkcpXDYKTrrA6/ixeVnkHrusEIPmbUdWTS6TgYnblK5Nu65ox
U6iU5fLkpMRLSyEaFDhrwnaweIetXL7b1579ZT4nxzwLaOmlVmFSHTO6PocUWZBt
NMnOCrtTsyVOwqqxPFDN5kS4qG5oIxx5/KVuY11lx7iRr14ZE4oOTcXh6a4tjAfh
FLW1T/w6j3IK0w==
-----END CERTIFICATE-----
Generated at Tue Apr 1 23:55:16 2025 by rpki-client on console.sobornost.net