Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft
File: tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft (raw, json)
Hash identifier: WLUo1cQuCwu7SGK/8Qj9y9Cq4lYn46ic1whvkx2bJ6M=
Subject key identifier: 78:C0:09:9A:38:3A:54:E5:F1:81:A0:F2:AF:26:73:6C:6E:F5:DE:41
Authority key identifier: B6:4E:10:0C:90:3D:85:C9:66:1F:21:B4:1F:64:19:94:90:3A:45:CC
Certificate issuer: /CN=b64e100c903d85c9661f21b41f641994903a45cc
Certificate serial: 0197BF6C981970A076C54A593DA2783FF0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tk4QDJA9hclmHyG0H2QZlJA6Rcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft
Manifest number: 021D
Signing time: Mon 30 Jun 2025 06:00:54 +0000
Manifest this update: Mon 30 Jun 2025 06:00:54 +0000
Manifest next update: Tue 01 Jul 2025 06:00:54 +0000
Files and hashes: 1: kAdUvhi0iuHRl8HdWVSAKlJD5u0.roa (hash: 2XhzY5ktX3xFgvAerywPE4VwkhUGoOOVHNmD/7mSh84=)
2: tk4QDJA9hclmHyG0H2QZlJA6Rcw.crl (hash: XDojMx2SfzqBqmVqGofge9sHYkA7sBj/026bJ8tV58U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:6c:98:19:70:a0:76:c5:4a:59:3d:a2:78:3f:f0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64e100c903d85c9661f21b41f641994903a45cc
Validity
Not Before: Jun 30 06:00:54 2025 GMT
Not After : Jul 1 06:00:54 2025 GMT
Subject: CN=78c0099a383a54e5f181a0f2af26736c6ef5de41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:24:f3:aa:3c:2e:05:eb:3a:7e:96:da:1a:4f:
fc:d7:32:cb:7e:ce:5c:e4:22:21:79:24:ea:14:9f:
3c:f1:83:a8:ea:c0:95:88:15:e4:99:b9:03:86:b5:
d7:5c:23:16:6b:79:f1:80:d1:99:a1:a5:99:18:21:
c1:e5:ed:04:4d:2a:37:33:3e:1c:30:ab:ae:d5:28:
bb:31:bb:94:d3:e9:73:a2:20:48:77:36:ec:38:2b:
d2:cf:b3:bf:7d:8c:ee:1b:c3:a7:42:72:34:76:02:
a6:aa:11:61:9f:27:32:ff:72:10:26:5e:1e:a8:52:
d6:bb:1e:71:10:b1:bb:e9:78:d3:e3:00:e5:aa:47:
96:de:c3:2b:43:ff:82:cd:b0:2e:e8:2a:69:42:39:
c3:d2:5f:5e:29:10:1b:73:c8:9c:90:db:80:ef:80:
fb:bd:bc:23:9c:64:47:71:d7:5a:30:8e:6d:00:a7:
3c:48:4c:c7:a2:49:fa:bf:7b:49:60:97:14:86:ca:
f9:95:da:41:62:77:ed:2c:b2:78:ee:c3:48:62:67:
62:4f:73:40:fa:83:dc:5d:6f:6b:27:21:fa:d5:62:
3c:6e:95:a1:3b:d0:61:f6:c7:0b:f7:75:b6:5d:82:
2e:cd:13:0e:a7:a6:ba:bb:66:7d:7f:b2:70:bd:eb:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C0:09:9A:38:3A:54:E5:F1:81:A0:F2:AF:26:73:6C:6E:F5:DE:41
X509v3 Authority Key Identifier:
keyid:B6:4E:10:0C:90:3D:85:C9:66:1F:21:B4:1F:64:19:94:90:3A:45:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tk4QDJA9hclmHyG0H2QZlJA6Rcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9d:79:16:ee:39:a2:bf:fc:60:5f:e2:cb:81:7f:0e:3a:44:
d8:e3:50:b7:46:2d:19:37:97:bf:96:0d:a9:35:32:b2:dc:a1:
2b:39:3d:1a:c1:fc:79:58:72:df:05:1f:5c:3c:54:fd:b6:69:
92:10:fc:78:ab:fe:a2:52:95:25:fe:70:75:ee:05:af:6d:8c:
b2:4f:e3:75:62:00:46:88:f2:98:ea:e5:15:49:e3:06:e4:5f:
37:36:79:b0:87:b8:e9:4a:ca:f8:96:03:6d:7d:3c:24:3a:d8:
2e:c2:6c:47:0a:f2:1f:f6:f8:2b:c7:74:50:95:3c:09:de:c9:
75:3e:97:9b:59:27:2c:7e:a7:f4:41:f8:6b:77:a7:c9:ce:3d:
7b:c8:18:5f:ce:c5:17:ad:18:e0:42:b1:15:4c:b7:a3:f5:91:
4a:7a:03:66:e1:1a:80:39:14:cb:a7:ba:b5:05:45:d1:ef:82:
25:e0:5e:1e:b9:38:a5:a6:b0:3f:94:a3:e9:95:7a:06:db:80:
a4:5c:b0:eb:bf:96:b0:80:b1:8f:ed:7e:0d:1a:d0:b3:13:a6:
5a:52:a6:5e:81:31:52:4e:53:88:a3:27:78:d4:87:4c:33:d7:
35:ad:31:8c:42:dc:81:64:1d:5b:0d:c5:93:a0:8d:fc:61:34:
45:c2:57:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:02:20 2025 by rpki-client