Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
File: Xozn6kHZTYedYkvDFUaZni23w-U.mft (raw, json)
Hash identifier: dxpL/J2+swh4rt0cc57VXHdI4akhUCW3wRpv11YqHQA=
Subject key identifier: CF:21:61:FD:EC:7A:E0:17:8B:68:FB:DB:BF:8D:D9:46:51:B2:D3:DE
Authority key identifier: 5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
Certificate issuer: /CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Certificate serial: 019B4A0438D30606D3DAC292AE1AE85780CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
Manifest number: 0390
Signing time: Tue 23 Dec 2025 07:02:29 +0000
Manifest this update: Tue 23 Dec 2025 07:02:29 +0000
Manifest next update: Wed 24 Dec 2025 07:02:29 +0000
Files and hashes: 1: Xozn6kHZTYedYkvDFUaZni23w-U.crl (hash: fJbcx8SsiSqmzSEsIWuvWqBgAD5NjtQEgvr6Z5Smk4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4a:04:38:d3:06:06:d3:da:c2:92:ae:1a:e8:57:80:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Validity
Not Before: Dec 23 07:02:29 2025 GMT
Not After : Dec 24 07:02:29 2025 GMT
Subject: CN=cf2161fdec7ae0178b68fbdbbf8dd94651b2d3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:7b:63:21:e1:07:e4:8c:50:46:45:0d:81:
5a:e5:1b:62:7e:c3:06:0c:68:da:23:0e:1b:ff:86:
82:36:ce:da:60:57:79:97:81:18:ff:4d:7e:92:28:
ae:e6:20:42:2d:91:38:81:51:2e:a7:b0:e4:56:14:
08:1c:34:65:0f:6f:05:69:4c:e4:41:75:24:9e:f0:
f0:db:f6:90:1f:42:bc:01:41:4e:61:94:ec:2e:0f:
5e:bd:e8:6f:41:b5:63:ff:51:5b:d4:86:80:79:9e:
d1:f6:ce:bd:ec:33:34:ce:a0:24:62:9c:8b:68:3d:
2d:56:f6:ec:6f:ba:81:3c:09:33:dd:c5:7c:bb:e1:
ab:8a:2e:06:16:d4:de:1e:8b:b0:a6:22:ee:0e:f2:
64:0c:78:1a:7c:5a:0d:ec:49:a4:9c:ba:a7:c2:81:
8c:2f:9b:a8:55:ab:eb:50:10:c5:e8:5e:8f:15:12:
65:3e:db:36:67:46:d1:a2:ed:c1:bd:a8:a0:bf:fb:
e0:c4:89:8f:64:52:db:9c:c6:c6:6c:b2:5e:b6:62:
96:ba:ad:e3:4a:06:f0:43:67:3f:2c:14:ae:7f:04:
89:dd:b1:39:a3:03:5f:96:04:87:c8:5c:40:67:4d:
41:83:df:29:59:97:8d:2e:ad:24:72:12:85:32:96:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:21:61:FD:EC:7A:E0:17:8B:68:FB:DB:BF:8D:D9:46:51:B2:D3:DE
X509v3 Authority Key Identifier:
keyid:5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bf:25:62:e2:c1:20:df:1b:5a:a8:47:aa:fe:40:da:39:8b:
3a:ae:2d:86:f2:01:de:8a:19:ab:4b:2b:c2:73:47:ea:ca:1c:
59:1e:66:ec:20:99:ce:c3:60:a6:6c:f1:0c:c7:25:bb:6b:a8:
5f:f0:e9:8e:00:f5:39:76:b3:d6:64:ae:e2:ae:7b:ff:6a:30:
4e:c9:68:87:98:cf:90:97:ac:b5:bd:b4:95:7e:6a:db:dd:40:
c5:32:71:67:8e:39:b6:aa:6f:06:f3:1e:15:22:ba:1f:0e:3c:
d0:49:7f:d6:11:68:bb:78:d9:99:1a:fb:15:5d:dd:5f:8e:38:
10:b9:0f:55:2f:1f:5a:9f:c2:f2:29:76:a0:dc:f0:21:3f:a5:
a2:a3:5c:14:06:3a:6d:f7:01:8d:3c:da:2c:b9:2c:f7:9f:4a:
58:01:82:5a:9f:66:1f:8b:a9:a9:a2:28:b7:05:4e:7b:00:9a:
cf:c0:3e:e6:0c:46:7d:e0:d7:84:24:cb:30:92:38:66:c3:3b:
30:51:51:cd:f8:9f:93:11:fa:1e:68:cc:bc:ff:fd:44:1a:ba:
e0:0e:8a:52:07:99:86:2f:3c:e4:60:ea:ab:40:a8:35:d4:a5:
27:93:c3:e3:26:3c:ed:f4:2d:38:7c:57:65:dc:19:60:2f:97:
ff:0e:10:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtKBDjTBgbT2sKSrhroV4DKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGNlN2VhNDFkOTRkODc5ZDYyNGJjMzE1NDY5OTllMmRi
N2MzZTUwHhcNMjUxMjIzMDcwMjI5WhcNMjUxMjI0MDcwMjI5WjAzMTEwLwYDVQQD
EyhjZjIxNjFmZGVjN2FlMDE3OGI2OGZiZGJiZjhkZDk0NjUxYjJkM2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr17YyHhB+SMUEZFDYFa5RtifsMG
DGjaIw4b/4aCNs7aYFd5l4EY/01+kiiu5iBCLZE4gVEup7DkVhQIHDRlD28FaUzk
QXUknvDw2/aQH0K8AUFOYZTsLg9evehvQbVj/1Fb1IaAeZ7R9s697DM0zqAkYpyL
aD0tVvbsb7qBPAkz3cV8u+Grii4GFtTeHouwpiLuDvJkDHgafFoN7EmknLqnwoGM
L5uoVavrUBDF6F6PFRJlPts2Z0bRou3Bvaigv/vgxImPZFLbnMbGbLJetmKWuq3j
SgbwQ2c/LBSufwSJ3bE5owNflgSHyFxAZ01Bg98pWZeNLq0kchKFMpadSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8hYf3seuAXi2j727+N2UZRstPeMB8GA1UdIwQY
MBaAFF6M5+pB2U2HnWJLwxVGmZ4tt8PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81MDk3MTAtODgxNS00YTIwLThjMmUt
Mjg2YWRiZGRlNmQzLzEvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81MDk3MTAtODgxNS00YTIwLThjMmUtMjg2YWRiZGRlNmQz
LzEvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXr8lYuLB
IN8bWqhHqv5A2jmLOq4thvIB3ooZq0srwnNH6socWR5m7CCZzsNgpmzxDMclu2uo
X/DpjgD1OXaz1mSu4q57/2owTsloh5jPkJestb20lX5q291AxTJxZ445tqpvBvMe
FSK6Hw480El/1hFou3jZmRr7FV3dX444ELkPVS8fWp/C8il2oNzwIT+loqNcFAY6
bfcBjTzaLLks959KWAGCWp9mH4upqaIotwVOewCaz8A+5gxGfeDXhCTLMJI4ZsM7
MFFRzfifkxH6HmjMvP/9RBq64A6KUgeZhi885GDqq0CoNdSlJ5PD4yY87fQtOHxX
ZdwZYC+X/w4Qyg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:36 2026 by rpki-client