Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
File: L1SHXb4wvk9_xEoEaLUbF47fZOY.mft (raw, json)
Hash identifier: +IyEb2gnPiTX7bBm89afNJKtVDFkzZZCEf3Afb4KSQ8=
Subject key identifier: 62:52:13:2E:61:98:1C:EE:F2:DC:4B:BE:A2:17:C8:24:BE:3F:36:98
Authority key identifier: 2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
Certificate issuer: /CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Certificate serial: 019A4D741D1995EB7D9226301C811060FA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
Manifest number: 1317
Signing time: Tue 04 Nov 2025 06:00:46 +0000
Manifest this update: Tue 04 Nov 2025 06:00:46 +0000
Manifest next update: Wed 05 Nov 2025 06:00:46 +0000
Files and hashes: 1: Db8JmQFrHbrslQy_0_sI8qPfsLc.roa (hash: h9edWzGv+GirDt6SdrQhWfZqKoYQaPxuFx4R8MWBJlc=)
2: L1SHXb4wvk9_xEoEaLUbF47fZOY.crl (hash: ZDyZbPBGjj+cWYN6m7mdGyOqGLkehRRdCOQXxu3JZ5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:1d:19:95:eb:7d:92:26:30:1c:81:10:60:fa:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Validity
Not Before: Nov 4 06:00:46 2025 GMT
Not After : Nov 5 06:00:46 2025 GMT
Subject: CN=6252132e61981ceef2dc4bbea217c824be3f3698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:ce:58:b7:70:73:9e:f3:51:9e:0d:cb:f6:
60:7c:6f:47:b8:95:2d:91:ac:58:de:fc:5a:f1:18:
89:2c:59:6f:df:90:06:1d:5d:60:55:d7:70:14:c9:
e5:2e:d2:99:2c:06:d6:db:a0:8b:0e:3d:00:1c:d1:
c8:1f:54:49:5f:35:4f:dd:f2:16:2e:e1:5b:68:4f:
9b:bc:ea:ae:e1:71:8c:6e:8d:92:b1:fe:47:8b:65:
66:62:eb:ae:72:b6:3c:3c:83:8a:b5:2a:5f:ba:d4:
55:d8:77:12:8f:04:b3:00:e3:9b:72:96:e1:73:51:
07:56:4e:86:a5:7b:5e:83:c6:15:2d:66:08:bf:85:
13:f2:bd:de:83:73:dc:95:7d:0d:b1:94:6a:c0:db:
04:e0:e3:a2:71:4d:08:3b:2d:1c:92:60:9a:03:43:
50:76:5d:3c:0a:76:db:00:56:d1:a0:d9:0a:51:3b:
dd:43:c4:09:e6:35:45:ab:e9:cc:b8:5f:14:76:ad:
ab:35:3d:3e:c2:a1:4a:ae:e7:1a:bb:c9:a8:e6:e8:
7b:f5:a5:a7:3e:68:9a:63:4b:d5:be:91:0c:bf:ed:
c9:2a:8b:15:2b:d9:c1:59:82:a1:74:99:50:0a:cc:
29:cb:79:09:95:14:42:9d:e7:d9:d6:d0:c4:15:7d:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:52:13:2E:61:98:1C:EE:F2:DC:4B:BE:A2:17:C8:24:BE:3F:36:98
X509v3 Authority Key Identifier:
keyid:2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0e:ff:f0:ba:bc:e3:fa:2b:91:2d:3d:3f:de:96:9c:d6:4a:
2e:05:81:d8:5d:aa:3c:a4:da:5f:4a:4d:3a:57:f9:f6:25:de:
b8:da:f2:40:9c:7f:f2:26:26:f2:5a:5b:5a:00:1a:67:2a:3c:
23:71:33:92:c5:6a:8e:32:e8:20:a6:b3:c3:4c:d8:c5:e7:7c:
1f:1c:08:d3:19:83:4e:9a:e9:2f:b6:8f:af:f8:38:e4:d8:d2:
79:f9:b7:23:2f:8d:e4:2f:db:8a:d4:27:3f:81:91:36:a4:6e:
01:4b:88:d8:79:ff:9b:e3:d2:fc:c2:90:ae:54:17:cb:25:d8:
14:98:69:7a:35:65:d0:38:1d:41:fd:40:cf:af:89:0a:46:68:
20:09:7f:bc:2d:33:1d:9b:26:9a:2a:01:25:9c:39:81:2f:ff:
f5:8e:eb:6c:70:07:54:c8:0d:a3:ad:71:6e:89:45:62:88:5a:
9e:59:7b:84:50:c9:2f:03:28:84:bb:87:d0:1d:95:e0:a5:e8:
82:01:48:cf:e2:9b:ac:fe:86:56:22:9f:93:d3:e0:20:2a:bc:
7e:49:3f:a0:2e:9e:df:6e:bc:75:c8:1a:7a:31:18:aa:43:fc:
6d:f5:ef:0a:f9:e2:56:30:a5:f0:81:f6:12:1d:38:dc:3c:6c:
c8:47:65:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:24 2025 by rpki-client