Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
File: XnKDhygnB8uQxfqebs30S2IGJdg.mft (raw, json)
Hash identifier: EQpJDfjMM2sOfgqO4iU2AZXJml50hW9Y2TCPxaALn/U=
Subject key identifier: A1:33:E4:B0:1E:0F:D1:D4:17:33:77:2A:DD:F1:F2:23:3B:06:D4:D8
Authority key identifier: 5E:72:83:87:28:27:07:CB:90:C5:FA:9E:6E:CD:F4:4B:62:06:25:D8
Certificate issuer: /CN=5e728387282707cb90c5fa9e6ecdf44b620625d8
Certificate serial: 019614D9087CC6A3FBE545DDE28CAB85B205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnKDhygnB8uQxfqebs30S2IGJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
Manifest number: 06D2
Signing time: Tue 08 Apr 2025 10:01:29 +0000
Manifest this update: Tue 08 Apr 2025 10:01:29 +0000
Manifest next update: Wed 09 Apr 2025 10:01:29 +0000
Files and hashes: 1: XnKDhygnB8uQxfqebs30S2IGJdg.crl (hash: WonUPt93igxlF6HH+z/AQU9BTBIwvg164MvsDnkvw78=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:d9:08:7c:c6:a3:fb:e5:45:dd:e2:8c:ab:85:b2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e728387282707cb90c5fa9e6ecdf44b620625d8
Validity
Not Before: Apr 8 10:01:29 2025 GMT
Not After : Apr 9 10:01:29 2025 GMT
Subject: CN=a133e4b01e0fd1d41733772addf1f2233b06d4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:93:06:18:05:f5:d7:fe:7f:df:82:e6:a6:
eb:7b:e7:7c:87:24:f6:4d:cc:62:52:55:a6:dd:f9:
ee:13:3b:83:28:f1:da:4e:42:79:1a:b8:af:41:69:
e6:03:c0:a1:f3:2a:bf:de:73:46:25:ca:17:bd:8d:
ff:11:c5:e8:bd:0e:a4:cd:5e:60:25:3a:4f:d4:fc:
1e:cf:6c:58:8f:41:b6:c1:b0:93:65:f5:40:65:ac:
24:2d:25:92:3a:fb:ae:e2:22:fb:e5:34:91:3c:4c:
b1:17:c2:30:46:44:ed:77:09:14:88:b5:50:13:a7:
b2:05:69:e5:cb:e6:2f:d4:4d:e0:83:eb:4c:f1:66:
ca:cd:af:7b:e0:e9:d3:8a:57:39:85:47:5f:be:49:
3b:e1:26:82:fe:9d:aa:8c:10:48:ad:40:fa:f4:54:
45:6d:ef:c9:54:c6:8e:a9:37:33:79:95:bf:a2:ab:
a1:d4:61:d8:f4:fe:69:42:6b:37:11:3a:ab:8f:70:
f7:d1:ac:aa:45:89:f9:d5:fa:be:8c:0e:20:e4:b3:
54:91:0c:5d:87:b7:40:d8:23:b2:88:ee:2f:b2:20:
b5:f8:a4:11:22:a1:7a:29:e7:7c:a2:26:da:45:6c:
93:b8:9b:ea:14:de:ff:bb:d3:39:05:f7:5a:1d:9e:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:33:E4:B0:1E:0F:D1:D4:17:33:77:2A:DD:F1:F2:23:3B:06:D4:D8
X509v3 Authority Key Identifier:
keyid:5E:72:83:87:28:27:07:CB:90:C5:FA:9E:6E:CD:F4:4B:62:06:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnKDhygnB8uQxfqebs30S2IGJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:63:ba:47:00:1d:4a:34:8d:ad:e9:6f:b6:08:2d:7c:56:61:
20:af:6b:c2:62:ae:e0:a7:fe:4e:bf:9d:f4:17:a0:b4:84:02:
d1:6f:bb:ec:07:e5:fd:e9:48:c7:c0:0a:e8:0a:0e:9f:fa:9c:
b9:07:f1:46:2c:89:bd:cf:20:7a:79:8b:47:bb:ea:9d:4a:38:
00:1a:fc:93:80:6a:62:9e:26:e6:29:5c:a1:d7:a9:3e:87:75:
d2:ec:22:03:2f:0d:54:34:7d:25:c8:f1:7e:10:ce:d8:36:6e:
d6:5e:bc:07:52:0e:91:d7:fd:3b:34:a6:5d:33:cc:52:88:0f:
85:16:4e:ed:be:94:05:6c:24:70:ae:ad:89:91:9c:d1:42:73:
f0:ae:41:aa:10:72:72:0c:03:40:19:19:45:06:ae:42:79:0f:
c6:44:68:a7:c4:1a:81:14:cd:db:c1:e8:a5:76:05:01:66:ef:
3e:0a:e2:68:f8:3f:e7:ea:66:cc:77:a9:f9:5c:98:65:6e:42:
58:fc:75:1a:a0:41:c0:32:9f:f8:27:7a:2b:75:6b:1e:31:ca:
c8:9d:e9:16:85:f6:16:6b:d1:42:f4:55:53:34:a1:a7:7a:61:
0d:11:01:2d:eb:13:5c:9d:fb:3b:ba:c9:58:53:02:e3:93:73:
8f:74:3f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 17:19:47 2025 by rpki-client