Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
File: DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft (raw, json)
Hash identifier: zZZq/EiZhW2WXl6GCz3SE+kRRT04lZh0G4jqBtFB4EM=
Subject key identifier: 56:9B:38:92:F9:D4:40:15:5C:87:F6:A2:69:8F:52:07:DB:C1:E9:BA
Authority key identifier: 0E:03:F3:C3:CF:F6:D8:CD:4B:15:24:0F:61:72:83:6C:7B:53:EB:24
Certificate issuer: /CN=0e03f3c3cff6d8cd4b15240f6172836c7b53eb24
Certificate serial: 01966BBF69D17E62C667433DB77C50004551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgPzw8_22M1LFSQPYXKDbHtT6yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
Manifest number: 06EB
Signing time: Fri 25 Apr 2025 07:00:28 +0000
Manifest this update: Fri 25 Apr 2025 07:00:28 +0000
Manifest next update: Sat 26 Apr 2025 07:00:28 +0000
Files and hashes: 1: DgPzw8_22M1LFSQPYXKDbHtT6yQ.crl (hash: WY3jPVvfM9wI4pfY0mE73FghJjxc2F8CR5hfsEEK37g=)
2: tn341Lzi5MPGO9EUcmk0M7cXZxM.roa (hash: FFlSPwmOxmVm+VW9zVZtaZMl/pgjePvamNa1bTrjlRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:bf:69:d1:7e:62:c6:67:43:3d:b7:7c:50:00:45:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e03f3c3cff6d8cd4b15240f6172836c7b53eb24
Validity
Not Before: Apr 25 07:00:28 2025 GMT
Not After : Apr 26 07:00:28 2025 GMT
Subject: CN=569b3892f9d440155c87f6a2698f5207dbc1e9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:d8:0d:a9:ab:35:35:1d:dc:9a:42:3b:6a:
a3:a3:f6:b7:94:da:eb:a3:a6:e6:b6:0e:de:c7:d1:
9d:70:05:2e:54:4f:d8:cb:87:54:63:64:0a:cb:87:
85:49:11:20:4b:d7:6b:e0:35:c3:fb:55:0d:2b:23:
ef:82:2c:30:0b:8a:32:ec:df:31:3e:3d:c9:58:d3:
c4:e0:5e:13:6e:0f:26:35:44:13:8c:38:d1:02:08:
b4:92:5d:d2:13:79:f2:58:2f:da:8c:27:e5:be:4c:
92:1f:c1:c8:e6:ad:fd:f5:b5:e6:0b:56:ea:dd:c3:
24:4f:3d:82:1f:b7:e5:16:67:68:b5:d1:c8:6d:24:
dc:e4:27:5d:4b:e1:84:ed:31:db:9b:2b:4b:1d:34:
e4:2a:3f:bd:3e:1e:bf:f5:f7:a6:2d:38:38:e2:27:
16:70:f2:bc:39:48:50:a1:36:f3:95:a3:bc:f3:2e:
d3:3a:96:47:c9:57:8f:6e:85:f7:82:ad:ad:43:f1:
03:38:0e:8d:b3:d9:20:0d:96:1e:05:db:21:fe:17:
7e:62:e5:be:eb:9b:01:cc:8d:3f:fb:f9:0c:e7:76:
3e:53:d1:87:e3:88:2b:b1:41:9e:12:96:50:7c:a6:
d9:0d:8e:f6:f7:36:57:1a:3e:53:38:0d:dc:71:16:
aa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9B:38:92:F9:D4:40:15:5C:87:F6:A2:69:8F:52:07:DB:C1:E9:BA
X509v3 Authority Key Identifier:
keyid:0E:03:F3:C3:CF:F6:D8:CD:4B:15:24:0F:61:72:83:6C:7B:53:EB:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgPzw8_22M1LFSQPYXKDbHtT6yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:28:29:27:2e:13:b0:77:9a:03:b6:04:ea:04:5b:99:e1:da:
9c:03:aa:87:27:78:c5:ff:43:1e:44:57:a3:cd:3f:08:45:70:
47:5f:1a:28:e4:7f:cb:77:72:24:5c:9c:6d:8f:67:cb:92:e8:
c1:44:c2:2d:83:70:ea:11:48:7f:96:dc:5f:f2:6c:9a:fe:c1:
65:80:9e:ba:6d:24:ae:42:4c:04:05:d4:94:10:39:4b:99:a1:
13:3d:de:92:bf:22:c0:0e:f2:ad:0e:6e:19:48:36:f9:9a:84:
57:03:ea:3f:ea:75:47:87:12:d5:c6:b9:7b:57:46:1f:c8:a6:
b3:fd:70:d4:7c:74:a9:8d:03:a7:de:65:01:17:0a:60:c8:b5:
e3:9f:46:f7:0e:af:48:02:45:a6:36:4b:5e:c4:7f:30:00:ee:
b7:77:57:a8:67:25:9f:14:ff:f8:8b:37:13:4f:e1:d6:2c:d3:
68:f7:7d:e7:e5:9d:8d:e1:f0:fa:2d:f7:a0:e2:b2:fe:2f:a9:
48:17:34:35:9d:43:6c:5e:4b:b6:0c:ea:bb:12:59:60:7b:be:
63:d7:82:68:55:2e:bb:dd:fb:b7:e2:79:ca:31:3d:29:d4:45:
54:fe:a2:ef:d3:24:50:77:96:2f:bc:29:8d:30:d6:23:cb:4c:
e1:8f:f6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:02:00 2025 by rpki-client