Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
File: X89dJaNmGj5y0nKUVPf_gEtDvbk.mft (raw, json)
Hash identifier: toi+cWOSYy7zt9VHzSE1bPujNH3h7JchUo6JncAdz3M=
Subject key identifier: 39:70:E8:1B:7F:6E:8E:6B:58:33:12:54:D8:91:77:31:52:B7:9B:E9
Authority key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Certificate issuer: /CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Certificate serial: 0198C1593183FCDC0738B9888EF360BEBFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
Manifest number: 0A2F
Signing time: Tue 19 Aug 2025 08:01:44 +0000
Manifest this update: Tue 19 Aug 2025 08:01:44 +0000
Manifest next update: Wed 20 Aug 2025 08:01:44 +0000
Files and hashes: 1: SFEaLCcaSPqW-NAacKDtjgx58ew.roa (hash: OMHSr2CJgaO8nulVRKhQLnfgujY5dtYfYIWPqUiWupI=)
2: X89dJaNmGj5y0nKUVPf_gEtDvbk.crl (hash: DrSRR7Y16cIXZxgQinVR6Kx4Tn4u73bH8bj11Mu4Q20=)
3: XiX2H6KV22GA3qGzZguRskRxlFM.roa (hash: vDk26PHouRJN4yP1V97RLW7KQYk0VPaf7UJ2taG9B6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c1:59:31:83:fc:dc:07:38:b9:88:8e:f3:60:be:bf:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Validity
Not Before: Aug 19 08:01:44 2025 GMT
Not After : Aug 20 08:01:44 2025 GMT
Subject: CN=3970e81b7f6e8e6b58331254d891773152b79be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:79:a3:a8:bb:41:cd:96:05:e2:69:b3:9d:
81:37:73:dd:d3:5f:ff:cc:ff:db:10:d0:7f:13:66:
6d:c4:ed:2a:2c:8d:f1:e0:c8:31:46:75:b4:ee:f3:
5d:66:11:7d:c3:77:6d:0c:43:1d:6d:bc:2d:c7:33:
15:cf:20:8a:2d:02:1d:68:e9:c6:01:71:bb:be:8b:
ec:74:85:fd:cd:f4:ff:e1:32:16:de:d4:5a:16:a0:
d0:74:e0:97:eb:66:43:1c:4d:bc:6a:2b:4c:23:e4:
42:17:68:b9:08:27:5b:bb:06:27:51:95:c7:3d:6b:
05:b0:38:9d:b4:fc:32:43:63:7c:63:45:7e:a9:9c:
81:91:25:ca:f5:fc:63:59:a2:49:a7:2d:5f:9d:1a:
51:b3:da:b7:40:7c:a8:91:28:5f:1e:0d:45:96:30:
32:66:a4:f5:7b:e4:28:ab:b2:b9:17:f3:a0:67:38:
23:26:41:e6:d9:0c:b3:b5:c0:86:c6:a6:c5:3e:5e:
cd:fd:a9:d9:53:48:3b:fe:39:37:46:da:7c:fd:7b:
2d:b8:07:bf:19:db:fc:07:6a:40:cd:ef:7f:32:03:
4d:60:0e:7d:fa:b1:0b:13:f2:fd:fe:4b:48:8e:1d:
28:89:85:4e:99:52:09:3b:1a:91:b9:c5:e9:54:7e:
7e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:70:E8:1B:7F:6E:8E:6B:58:33:12:54:D8:91:77:31:52:B7:9B:E9
X509v3 Authority Key Identifier:
keyid:5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b2:32:02:1d:c9:49:1d:85:2d:30:cb:46:32:f2:9b:7c:82:
47:6f:a1:ef:7f:21:d6:5b:29:41:08:a6:61:90:c7:b5:19:54:
d6:51:02:87:13:e3:71:03:2e:b6:0b:d7:26:8b:26:ab:1c:b3:
d1:0f:6c:06:3c:d5:11:c4:14:61:69:8e:92:39:59:c2:28:a2:
9f:8d:ca:7e:15:54:73:ce:22:7e:e8:52:a7:37:3a:14:57:a0:
05:8e:b0:43:3e:b0:61:7f:84:8a:40:ed:f7:57:0b:c8:71:ff:
54:f6:5d:e2:6b:11:32:32:d0:92:55:75:33:d5:73:f0:a2:4b:
96:bc:20:76:f4:66:87:4b:41:1a:a3:76:d2:d1:03:82:32:bd:
39:93:54:0c:2c:cb:44:c0:9d:6e:71:5e:05:0b:ec:ea:34:a4:
dd:0c:98:6a:a7:68:30:d3:b6:80:2c:80:af:09:f9:89:92:38:
6d:ee:a7:af:f6:ff:60:d7:97:7b:d1:5f:18:04:0d:88:66:98:
0b:71:ad:d5:ac:98:8b:73:5c:be:68:e7:af:e1:cc:29:67:18:
a4:09:20:85:dd:ca:c6:48:ef:2c:63:98:75:5c:29:b8:1f:53:
b5:60:28:ea:10:10:e3:b3:36:14:43:36:de:ef:b1:76:34:6b:
64:27:d7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:48 2025 by rpki-client