Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
File: rxfon-6kxRdLi_2Ud2xRk0HZems.mft (raw, json)
Hash identifier: QHhgTGNjF1v59FGIAyK3AB5KIyFA4esYW/aLdjbwET0=
Subject key identifier: 8D:A1:D3:15:BC:15:79:6F:08:48:40:32:E1:B9:CA:50:D0:A7:1B:BE
Authority key identifier: AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
Certificate issuer: /CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Certificate serial: 019A473A99CAAEA49B07F841754696DBBCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
Manifest number: 16D5
Signing time: Mon 03 Nov 2025 01:00:13 +0000
Manifest this update: Mon 03 Nov 2025 01:00:13 +0000
Manifest next update: Tue 04 Nov 2025 01:00:13 +0000
Files and hashes: 1: rxfon-6kxRdLi_2Ud2xRk0HZems.crl (hash: Ov/oMt5p/ReOP55xpCtYgh+gIAqbFzbiyggXsZm7AQk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:47:3a:99:ca:ae:a4:9b:07:f8:41:75:46:96:db:bc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Validity
Not Before: Nov 3 01:00:13 2025 GMT
Not After : Nov 4 01:00:13 2025 GMT
Subject: CN=8da1d315bc15796f08484032e1b9ca50d0a71bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:53:51:78:a2:a7:73:62:c5:dc:63:24:17:
9b:61:6c:d9:2a:ae:d5:be:3c:23:71:9c:89:18:16:
9f:d2:de:e8:b5:67:54:c8:d0:cb:3b:c2:b7:af:3d:
b8:32:86:64:14:1b:91:2d:3d:e6:32:6b:e3:b9:f6:
e0:32:4e:81:65:f0:b7:1a:ce:b0:e7:05:1d:7f:79:
77:c8:aa:dc:1a:c5:bf:46:18:b2:5f:e4:bf:25:f4:
4d:57:6a:b8:34:35:17:e6:df:8b:8e:0c:df:f3:ba:
47:b5:9e:a9:13:d4:a0:1e:4f:c0:40:61:d6:11:b9:
1f:66:68:9c:de:c6:63:d2:f5:a8:d5:0e:66:c5:0b:
24:eb:47:9e:56:e1:58:52:5d:5c:12:8b:9a:bf:b5:
b6:49:0c:08:27:c2:9e:d6:c7:12:c3:f3:77:d1:b3:
a0:a8:c8:c1:35:bc:0e:14:0a:43:de:57:a6:63:94:
85:b9:3c:33:29:3e:66:1e:c4:ef:b8:72:96:01:21:
d7:64:dd:39:d0:ed:2c:7f:a7:d5:63:74:36:71:64:
aa:c4:31:11:0b:a0:98:da:a0:26:d3:0c:f2:e3:26:
e9:cc:95:47:55:70:48:ae:3f:35:d9:8e:09:cd:0a:
29:2d:91:56:e1:4e:5f:3d:b9:4c:d1:ff:21:6f:f0:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A1:D3:15:BC:15:79:6F:08:48:40:32:E1:B9:CA:50:D0:A7:1B:BE
X509v3 Authority Key Identifier:
keyid:AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:86:12:71:dd:97:49:23:56:7c:e0:d9:78:53:94:c0:1f:59:
2f:2f:46:76:e2:e6:46:c6:ce:74:50:30:f8:30:7f:8d:e8:d4:
f1:5f:b5:60:54:4b:03:15:d6:34:20:41:fa:1e:96:9c:4e:a0:
a2:9a:96:5a:23:52:cf:1b:86:4d:34:ec:06:4c:79:86:ce:bd:
6e:6e:a1:f5:fa:88:94:5c:bf:39:51:49:0c:d1:84:d6:54:df:
28:f4:f7:be:72:15:ac:2c:00:fc:e8:dc:6f:7b:37:b7:38:a0:
3a:4c:42:6a:5c:16:24:1f:2f:2e:60:a2:ae:6d:bd:7c:0c:36:
f8:da:f9:6d:63:2f:76:ca:95:50:23:c4:46:7f:12:68:e0:14:
38:49:48:65:8f:26:4b:d5:29:46:29:99:e9:b5:f5:cd:cd:84:
59:4a:07:c9:a1:6c:06:32:1c:ac:cd:9b:b4:9d:97:68:24:5f:
2d:54:85:bc:80:38:12:a0:22:56:fb:77:ed:a3:d7:81:51:ed:
76:c0:f5:6e:9f:bd:a9:0f:bb:4f:ec:b9:5e:61:aa:c2:69:89:
7a:23:08:3e:d4:f3:b2:e8:8b:b7:3d:be:14:98:7b:8c:08:ba:
5c:43:29:b6:3d:87:30:c5:5a:9c:7d:72:83:ca:82:91:e4:bd:
39:05:b6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:37 2026 by rpki-client