Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
File: XoEWTOOIJZGG-6AVrMSw60i-tVI.mft (raw, json)
Hash identifier: HQw7+/zWkbxbhCYZKFCYMFHAJvVb732QN17XGqIpmGM=
Subject key identifier: 30:EC:A1:53:1A:27:64:A5:CD:4D:71:0B:48:97:49:2E:C8:FF:63:23
Authority key identifier: 5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
Certificate issuer: /CN=5e81164ce388259186fba015acc4b0eb48beb552
Certificate serial: 019A059302ADCA3F1903805B4327788A1D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
Manifest number: 16E4
Signing time: Tue 21 Oct 2025 07:01:51 +0000
Manifest this update: Tue 21 Oct 2025 07:01:51 +0000
Manifest next update: Wed 22 Oct 2025 07:01:51 +0000
Files and hashes: 1: XoEWTOOIJZGG-6AVrMSw60i-tVI.crl (hash: 4FSh1lQaDFiA0geBhoKm0r4Oh7al6HZ4OB7BxelDl7w=)
2: ewmzu1c5hlX5WEsUAJJ_EBHHe8c.roa (hash: LqYC06a3Uz9AaZO7Y0iTGjC5jKrTveBVSDvC1hJ3I8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:93:02:ad:ca:3f:19:03:80:5b:43:27:78:8a:1d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e81164ce388259186fba015acc4b0eb48beb552
Validity
Not Before: Oct 21 07:01:51 2025 GMT
Not After : Oct 22 07:01:51 2025 GMT
Subject: CN=30eca1531a2764a5cd4d710b4897492ec8ff6323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:53:45:97:85:fa:02:3c:9e:e3:11:8e:84:
7b:1c:9d:85:80:d1:dc:56:99:35:d6:a4:34:7a:9d:
21:87:c8:1e:25:33:ee:2c:10:63:4c:17:ee:33:6c:
71:42:ba:3b:ab:8a:6f:0c:56:4c:96:a1:e5:31:eb:
bc:0e:25:50:cd:db:d7:e9:a0:48:fd:74:e0:04:c6:
be:56:a2:98:bb:ba:85:5c:34:2e:87:b3:bc:5d:f7:
c9:67:5d:b5:29:51:68:3a:4d:ba:f3:44:5a:85:a7:
31:94:e4:6c:72:7f:9b:72:7a:8d:46:df:bd:33:7c:
af:a2:4f:d8:e4:58:01:5c:a0:9d:8c:aa:ce:07:fe:
92:c7:a8:8b:4c:5b:67:e6:f1:62:95:db:7c:79:8d:
e0:1f:8c:d5:3e:3c:79:cf:f0:01:f4:c1:68:9c:e0:
35:c6:9f:9c:3a:64:62:47:8b:26:61:8a:d0:85:23:
51:67:0a:ca:b8:48:a2:d8:76:4f:ca:d4:70:cc:0f:
e9:03:a0:a6:ab:aa:8b:c3:f3:fe:e2:78:7d:11:6f:
00:6c:6b:19:73:5d:63:51:d0:8e:d1:30:9e:3f:56:
4b:d3:8a:94:9a:2d:90:7c:19:23:8e:e3:b0:f0:45:
e9:86:ae:d2:84:78:1a:9c:b4:67:48:2c:b5:f9:f1:
f2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:A1:53:1A:27:64:A5:CD:4D:71:0B:48:97:49:2E:C8:FF:63:23
X509v3 Authority Key Identifier:
keyid:5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fe:d6:51:11:34:df:e1:c7:eb:0a:77:8f:89:72:89:f5:56:
cb:8e:c4:df:eb:62:1a:01:b7:00:38:ae:4c:75:0d:f9:c0:76:
ef:51:3a:f7:bd:58:53:18:ee:75:4a:38:25:20:fe:36:e0:55:
f0:8d:20:d6:2f:27:66:7c:db:d9:82:f8:75:eb:3f:90:1c:3f:
2d:b6:76:63:d8:da:47:0b:73:ea:5e:b7:8f:a2:96:a4:a2:0f:
43:08:6b:48:e6:8e:b5:37:44:fb:a4:59:03:b9:bc:c0:80:84:
09:a5:a5:ec:bd:5b:74:80:29:36:09:0c:f0:79:a6:97:dc:3a:
15:04:55:66:7b:aa:fc:2f:38:0f:aa:07:07:74:bd:01:f0:e8:
c1:71:93:7c:96:71:ae:02:69:0d:4c:94:75:37:37:3d:30:cf:
66:13:3a:55:8d:eb:f8:69:08:05:4f:9c:cb:a6:37:d3:9d:45:
b8:88:fc:d2:d2:b5:94:6e:7e:5f:c8:38:78:15:52:66:43:57:
bc:fa:e9:15:a9:ec:9b:aa:03:e5:93:5a:f8:d8:c9:19:c4:e3:
27:6c:16:65:2c:c0:07:37:06:bd:e4:0f:a0:71:0f:a4:60:0a:
4b:70:98:ca:f7:c7:34:3f:fa:20:16:4c:7a:de:a6:2d:5a:d6:
7b:cf:9f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:44 2025 by rpki-client