Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2b285d-d6da-4bbb-a93a-b78760334ebd/1/aWJitj5jRkqk8QRmKPpCXbruPOs.mft
File: aWJitj5jRkqk8QRmKPpCXbruPOs.mft (raw, json)
Hash identifier: D/gdryGVM9ckbgUOnW9OcUN7N5OwvjCCCx2+C3jgsog=
Subject key identifier: 97:B4:B8:38:9A:31:6D:4C:A7:DA:3B:E6:21:57:9C:84:28:AE:53:E1
Authority key identifier: 69:62:62:B6:3E:63:46:4A:A4:F1:04:66:28:FA:42:5D:BA:EE:3C:EB
Certificate issuer: /CN=696262b63e63464aa4f1046628fa425dbaee3ceb
Certificate serial: 0190BAC5CDD2068AB793CDFC9410E62902F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWJitj5jRkqk8QRmKPpCXbruPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2b285d-d6da-4bbb-a93a-b78760334ebd/1/aWJitj5jRkqk8QRmKPpCXbruPOs.mft
Manifest number: 116E
Signing time: Tue 16 Jul 2024 09:00:43 +0000
Manifest this update: Tue 16 Jul 2024 09:00:43 +0000
Manifest next update: Wed 17 Jul 2024 09:00:43 +0000
Files and hashes: 1: a03zm1vmtQ330Msfz3OCgJqNrWI.roa (hash: m12SGEwbTvhPstFx57kW64ukuWWW8X8BvAD30Fp3m48=)
2: aWJitj5jRkqk8QRmKPpCXbruPOs.crl (hash: UCBuQcs1W0zilu+V5s2vKxlAx2x9pRUL1fSdr5WHU6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:c5:cd:d2:06:8a:b7:93:cd:fc:94:10:e6:29:02:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696262b63e63464aa4f1046628fa425dbaee3ceb
Validity
Not Before: Jul 16 09:00:43 2024 GMT
Not After : Jul 17 09:00:43 2024 GMT
Subject: CN=97b4b8389a316d4ca7da3be621579c8428ae53e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:df:99:b0:bb:1a:51:df:e3:6f:08:bc:f8:
63:08:66:51:55:32:ee:94:be:e9:a7:12:fa:66:84:
40:d0:8d:f8:34:2d:7f:52:f8:39:d0:cc:b9:a6:62:
65:54:35:e6:f7:71:b3:8c:58:3f:d9:d8:f3:e1:47:
f4:91:ab:05:fd:36:b3:3b:4a:6a:4c:fe:bf:79:d6:
c9:9c:cb:a9:ec:d9:c1:0c:a6:3f:47:a9:da:a8:52:
20:a3:7c:79:59:67:c9:03:d2:bf:c4:d0:13:b9:ed:
50:45:b6:bc:88:86:73:c7:b2:a9:f1:42:f5:42:fb:
64:83:b6:60:10:35:54:8d:7c:f6:b3:3b:ca:ec:d6:
04:87:cb:1a:61:cc:ec:65:65:7e:dd:ea:36:a0:fb:
c5:4a:71:91:e7:1d:d2:a0:5b:60:bb:ca:fe:2e:a0:
c3:17:10:de:6f:8a:cd:bb:10:e6:96:5c:a2:ca:99:
a2:55:18:ee:44:4b:08:1c:57:67:cb:26:b7:6d:4e:
c1:29:10:1a:f2:0b:98:72:41:b1:49:66:d5:99:8f:
4c:df:c2:7c:ca:35:c2:2e:5b:73:6e:52:4d:01:81:
7f:f8:e2:ba:f6:ef:4a:5d:d7:64:57:a0:1c:30:ef:
03:70:39:59:fe:ac:eb:53:19:ac:bc:60:43:2f:da:
9c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B4:B8:38:9A:31:6D:4C:A7:DA:3B:E6:21:57:9C:84:28:AE:53:E1
X509v3 Authority Key Identifier:
keyid:69:62:62:B6:3E:63:46:4A:A4:F1:04:66:28:FA:42:5D:BA:EE:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWJitj5jRkqk8QRmKPpCXbruPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2b285d-d6da-4bbb-a93a-b78760334ebd/1/aWJitj5jRkqk8QRmKPpCXbruPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2b285d-d6da-4bbb-a93a-b78760334ebd/1/aWJitj5jRkqk8QRmKPpCXbruPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8b:cb:aa:c4:d0:c8:66:c4:9d:fd:db:7d:78:ef:b6:bc:2a:
b1:f4:0c:87:96:a5:43:46:43:e1:c6:14:25:ee:0b:08:5f:28:
b8:67:e8:8f:7e:7f:7e:c6:1b:3d:e2:07:60:82:8d:27:42:72:
5b:80:c0:4a:8d:a8:bb:5d:80:c2:fb:d8:cd:bb:54:c1:2a:69:
8f:bd:ad:87:cf:bd:f3:84:b8:d2:f0:57:6a:f6:78:cb:cd:ee:
9f:a4:a6:9b:77:9b:ee:28:84:0f:0f:f2:b6:e5:fa:a3:ca:00:
52:3f:d6:40:39:83:33:d2:5a:30:b0:c4:b2:9c:dd:e6:07:ab:
67:10:25:31:e6:d7:09:fc:99:a8:5d:9e:86:9c:2f:02:12:ce:
f3:18:35:d3:98:60:85:1f:96:37:4d:3a:39:82:df:d1:bf:49:
19:d7:5d:0d:df:d9:74:44:d0:ee:09:46:08:c2:90:d7:7a:b2:
c0:9b:bc:cf:19:f6:95:7b:4c:29:21:b9:84:9d:d2:23:da:33:
f2:ec:8e:ac:f3:00:52:23:a7:a5:50:4c:1f:16:73:a5:b1:28:
d6:82:88:de:be:2e:0d:6c:26:9c:35:b1:47:8d:2a:55:ea:88:
45:89:f8:dc:4e:ce:57:3c:a3:d7:b9:e0:47:71:80:25:ae:01:
30:9a:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:13:14 2025 by rpki-client