Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
File: XjPdpt78k8-CUWSU2fNIjWxK2dw.mft (raw, json)
Hash identifier: 9j9i8fH7ctkR/Lw7d3HLndHNrjwdFgNlYhxRLSLGH74=
Subject key identifier: 54:FB:D7:99:DA:3A:E1:BD:97:84:9E:BC:2C:84:E9:AF:B1:D8:E7:43
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Certificate issuer: /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial: 019B6DA17752DA57DE370F4D13C1CD891858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
Manifest number: 0A08
Signing time: Tue 30 Dec 2025 05:00:56 +0000
Manifest this update: Tue 30 Dec 2025 05:00:56 +0000
Manifest next update: Wed 31 Dec 2025 05:00:56 +0000
Files and hashes: 1: XjPdpt78k8-CUWSU2fNIjWxK2dw.crl (hash: jbe3UYHXyjpEmtk9w7YzNuKAS9lbUqhOLEoC2O2O6Ck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6d:a1:77:52:da:57:de:37:0f:4d:13:c1:cd:89:18:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Validity
Not Before: Dec 30 05:00:56 2025 GMT
Not After : Dec 31 05:00:56 2025 GMT
Subject: CN=54fbd799da3ae1bd97849ebc2c84e9afb1d8e743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:54:22:ba:3c:ca:e5:4e:d2:ba:2e:32:2f:
bc:5c:8a:9c:3c:a1:e4:c0:9a:e2:97:a8:0a:7a:70:
de:10:eb:c2:22:e1:be:43:12:73:c7:35:99:2b:45:
8e:e8:80:b3:b8:87:fb:60:fb:ce:e2:23:4b:98:1c:
f0:34:23:6f:91:17:d5:4d:f5:f3:10:d3:db:f8:7f:
94:84:98:6a:c0:62:83:cc:ae:4c:78:45:8d:7e:ff:
1d:37:ad:db:c4:5b:68:3a:ea:1a:08:eb:04:af:5d:
af:7d:b0:10:61:97:18:f4:b3:29:8a:3d:d4:a0:2e:
5c:8b:d8:b8:17:0c:03:eb:57:e1:d8:ca:7f:89:b2:
ae:2e:fb:4b:bc:98:6f:9a:3f:dc:89:95:6b:93:11:
bb:aa:7f:47:76:b2:1a:c1:d7:77:3a:a4:8a:38:86:
6f:81:63:82:5c:ce:3d:29:94:37:96:b8:1f:50:53:
93:75:44:5b:29:10:6e:5b:d0:ad:ce:a2:ca:10:2d:
b6:13:7a:83:2e:d9:1f:ef:c6:58:9b:a5:df:31:d8:
04:44:7e:7c:00:27:c7:2a:2c:89:6a:96:96:9b:48:
1e:ab:ed:9c:b6:87:74:28:05:66:a9:96:08:ce:21:
ea:56:26:97:44:80:b3:c6:6a:04:29:7e:56:39:f1:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FB:D7:99:DA:3A:E1:BD:97:84:9E:BC:2C:84:E9:AF:B1:D8:E7:43
X509v3 Authority Key Identifier:
keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b6:79:05:ec:d3:56:3e:95:11:88:40:b3:5b:01:65:e5:84:
d0:0a:fc:12:c4:89:60:12:b4:35:d7:b3:e6:70:ff:a4:99:db:
b4:b2:8b:1d:b9:a3:30:70:d4:cb:79:8a:d2:da:92:a3:d8:88:
2f:91:a4:b9:87:69:cf:b3:cd:d4:03:10:4b:2a:c9:11:e1:22:
b1:ab:fb:05:81:78:54:51:af:d7:02:e7:97:fc:a3:5f:99:22:
4f:31:91:1f:dd:f2:9f:57:fa:ef:d0:72:77:07:5b:70:18:0b:
51:72:24:d5:7f:b1:c6:a0:26:e0:96:4b:e4:65:e6:01:6e:91:
3c:b0:d5:e4:eb:bb:b8:f9:f4:93:82:33:00:8e:d2:99:4b:8a:
46:9b:dd:a4:94:0c:7e:46:b3:ed:d0:b3:bc:53:10:64:ff:9b:
58:75:8f:ea:e6:83:26:f4:5a:39:75:cd:0f:fe:f4:f7:4a:14:
33:3f:86:6d:ee:f4:c6:51:3d:f0:c9:da:ff:4d:31:ee:18:2b:
76:bc:71:2b:47:c5:cd:12:a5:bb:0d:4e:76:37:74:99:c6:59:
c5:55:bb:c3:35:59:67:be:d1:39:14:a2:cf:2a:c5:62:2f:24:
7c:38:36:82:3e:c9:a2:f3:01:90:14:03:cc:ab:f8:29:cd:ad:
6c:5e:99:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:11 2026 by rpki-client