Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
File: OXh5r_LENp0GxPEZpv16WhPbhpc.mft (raw, json)
Hash identifier: 3KTemCfvyl0fkquZksQmg1Kula2zrya3aMpmoUJ9ftY=
Subject key identifier: 1B:C2:A0:A4:C7:F7:82:2C:E2:2A:6D:09:B7:A9:EA:94:F7:3B:F1:9A
Authority key identifier: 39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
Certificate issuer: /CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Certificate serial: 01979B977A1D44B6F219A7DC47C13553C6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
Manifest number: 15A7
Signing time: Mon 23 Jun 2025 07:01:25 +0000
Manifest this update: Mon 23 Jun 2025 07:01:25 +0000
Manifest next update: Tue 24 Jun 2025 07:01:25 +0000
Files and hashes: 1: OXh5r_LENp0GxPEZpv16WhPbhpc.crl (hash: 4ByErK863kn8CeL7ldUpB3PFfuPl3kFDrwIt3y4dTaA=)
2: WSWkyM6MFxA1ZA-zAVUSwdgeJWI.roa (hash: 5tkFh2eMBLLpaXb8k6oCA+R1YYUjz+3ZjunAdpKVKWo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:97:7a:1d:44:b6:f2:19:a7:dc:47:c1:35:53:c6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Validity
Not Before: Jun 23 07:01:25 2025 GMT
Not After : Jun 24 07:01:25 2025 GMT
Subject: CN=1bc2a0a4c7f7822ce22a6d09b7a9ea94f73bf19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:1a:c8:6d:61:ce:04:99:8e:72:72:53:3f:
b7:d7:fd:25:ed:a5:66:ef:a6:ac:ca:80:36:3f:e6:
d0:99:b5:9b:ad:45:3a:a4:d0:7f:04:0e:e5:1d:57:
18:ea:70:91:43:ae:61:e1:35:cf:b3:60:91:1f:93:
7c:7a:0f:73:11:63:1d:37:db:21:78:c0:05:4a:3a:
6e:07:98:e3:8b:e8:62:db:0a:05:40:71:a0:58:16:
07:0f:39:10:4b:82:e1:40:b5:0b:f0:2f:bc:2f:33:
16:b8:1d:55:f1:95:61:79:b4:63:36:87:56:ab:22:
99:a6:6b:ed:2f:07:cb:b5:64:1f:f2:54:a3:60:2e:
d4:0b:67:a3:a9:1a:df:17:17:18:34:70:36:84:00:
c2:cf:64:42:93:33:39:b0:16:09:df:89:23:f5:2a:
fc:e2:96:bc:79:a9:51:91:38:6c:5f:1c:b9:a2:11:
90:37:4a:6d:c2:b4:ae:16:47:36:f3:b8:41:fc:ed:
f8:e9:80:58:6e:d8:c7:e4:2c:75:99:80:d6:a1:bb:
fd:b0:58:1d:01:ed:86:2b:ae:c3:17:59:12:99:64:
bc:86:0c:0a:0a:28:a7:1c:27:7f:8d:fc:2e:af:bd:
66:f0:14:37:d3:ec:a8:ad:48:82:20:2c:22:0b:bc:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C2:A0:A4:C7:F7:82:2C:E2:2A:6D:09:B7:A9:EA:94:F7:3B:F1:9A
X509v3 Authority Key Identifier:
keyid:39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:43:8e:9e:9f:72:e4:f6:6e:2a:90:fd:a9:ed:72:e2:24:05:
34:27:bf:7f:46:23:ba:d8:b6:92:9a:d8:31:4f:4a:58:f7:f2:
46:35:ed:8c:9c:99:a4:68:9c:f2:b5:5f:ba:9a:be:d0:33:fc:
81:2e:02:2a:80:e3:c7:64:da:32:f6:1b:e8:0e:94:36:f3:d3:
e7:69:fd:25:17:b5:6b:72:40:ac:9c:1a:c4:86:d3:84:6c:35:
ab:a1:66:f7:1a:80:de:69:8b:70:da:d8:8b:fd:4a:57:6d:75:
01:f4:e8:2f:d6:d4:23:b7:bc:ed:d5:6d:a3:e6:3d:67:6f:66:
89:56:ea:73:d1:95:33:a5:19:4c:d6:34:e2:88:3f:00:d6:f1:
d1:a6:a3:e7:ff:91:ef:09:86:9a:5b:ed:4d:3a:ce:15:04:80:
2a:a3:94:e8:a9:f5:31:c3:7f:4a:ce:ae:5d:b7:74:4a:54:c4:
15:41:f6:73:1d:2c:42:33:13:9c:90:57:f8:72:22:86:28:c6:
14:e6:8a:8f:6c:4f:ee:90:82:6b:91:a9:9c:e5:00:47:4a:35:
50:e9:7a:d1:ea:0f:97:27:24:ba:62:b7:6d:63:f1:63:c4:d5:
11:5c:3d:88:3c:f9:5c:22:21:f4:46:82:1d:6e:7c:df:3c:5a:
75:14:21:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 16:03:19 2025 by rpki-client