Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
File: XKiGCq68SoHT0ibUI4c-M8OICqo.mft (raw, json)
Hash identifier: 3sMjJUcM007eRAWYAjTKaF3j8Yl7mL1/FvPUYEGsJKE=
Subject key identifier: D4:31:4D:9D:15:9F:87:44:A2:4E:22:94:85:1F:36:3D:AE:58:5F:DB
Authority key identifier: 5C:A8:86:0A:AE:BC:4A:81:D3:D2:26:D4:23:87:3E:33:C3:88:0A:AA
Certificate issuer: /CN=5ca8860aaebc4a81d3d226d423873e33c3880aaa
Certificate serial: 0198E3E5198E422B9F55EAFD36D4AED15125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKiGCq68SoHT0ibUI4c-M8OICqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
Manifest number: 0AC9
Signing time: Tue 26 Aug 2025 01:01:38 +0000
Manifest this update: Tue 26 Aug 2025 01:01:38 +0000
Manifest next update: Wed 27 Aug 2025 01:01:38 +0000
Files and hashes: 1: XKiGCq68SoHT0ibUI4c-M8OICqo.crl (hash: ysNtymJj3gsNSJo8UnSylp+VrZ3oVPgEG1qoAntZBBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e3:e5:19:8e:42:2b:9f:55:ea:fd:36:d4:ae:d1:51:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca8860aaebc4a81d3d226d423873e33c3880aaa
Validity
Not Before: Aug 26 01:01:38 2025 GMT
Not After : Aug 27 01:01:38 2025 GMT
Subject: CN=d4314d9d159f8744a24e2294851f363dae585fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:41:ba:dd:98:be:33:cc:cb:c7:2e:1d:4e:
76:f7:7d:81:11:11:8b:42:de:35:75:d3:4d:4d:95:
1a:4b:82:4f:9e:c4:23:fd:66:f6:49:f5:7f:fb:74:
23:de:79:d5:5d:8c:8b:06:27:80:06:5b:71:0a:a7:
c0:62:48:05:8d:d9:cd:2a:88:e1:80:c8:c8:de:21:
d7:87:df:a3:63:c1:15:b3:c6:24:aa:a3:38:d1:98:
6f:bb:d6:25:73:a6:b3:5b:b6:a0:ed:d5:48:a2:be:
0e:e1:0a:a6:cf:38:d7:df:5d:fe:ee:10:29:59:2b:
77:54:f5:56:60:7b:2b:f4:57:a7:b8:73:6a:80:47:
5f:a2:49:8b:d0:c1:74:81:c8:f5:11:17:a5:1e:a9:
bb:1f:15:ce:0f:7a:9b:53:76:64:a3:3a:7c:19:28:
ad:f9:25:a6:87:a9:a5:6b:56:79:3c:1d:f9:49:d5:
a8:54:ff:43:59:1e:d1:e7:71:34:ff:c4:c9:86:94:
6d:30:b1:97:b0:73:f9:0c:ee:cd:37:5b:5f:83:98:
8a:04:13:cb:59:d5:23:e4:68:5f:af:7f:15:96:0f:
b4:af:99:43:5e:e9:82:29:ea:1b:af:a5:19:15:f2:
4e:63:d3:9f:2a:1f:39:28:20:ca:2b:15:53:bb:a7:
0f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:4D:9D:15:9F:87:44:A2:4E:22:94:85:1F:36:3D:AE:58:5F:DB
X509v3 Authority Key Identifier:
keyid:5C:A8:86:0A:AE:BC:4A:81:D3:D2:26:D4:23:87:3E:33:C3:88:0A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKiGCq68SoHT0ibUI4c-M8OICqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f6:4e:12:4e:71:30:71:d3:86:8e:3c:8e:b6:4b:e2:54:e0:
e3:29:f2:90:20:e7:18:ed:21:b5:02:09:6e:80:1a:f0:b5:79:
32:da:50:93:55:c2:6a:73:eb:12:cd:c4:32:8a:47:e9:e3:08:
c3:98:86:9d:f1:01:ae:f4:c6:9d:02:42:e7:a3:10:15:da:13:
74:cb:be:00:66:9f:46:f3:fe:bb:90:15:ce:d5:b1:44:ee:6f:
f7:10:60:96:b0:eb:9d:2d:f4:8e:3e:6d:ea:b4:16:a6:db:42:
1c:72:e9:d4:fe:d4:e3:7f:52:b1:ad:74:a3:c2:25:a6:4e:93:
98:fc:e9:a1:d2:bc:eb:e3:49:56:e4:83:7a:98:66:14:f2:8a:
cb:dc:d5:de:52:44:ca:c8:66:d4:37:73:5f:33:c8:3d:af:59:
c4:cb:51:27:06:ca:81:ee:93:0c:5b:f7:b1:7b:a3:c7:ab:e1:
38:da:39:56:2b:9c:0f:dc:f3:aa:40:e5:70:a6:6b:08:b4:e0:
db:e9:65:ea:4d:75:c6:b5:c5:60:5a:bf:e6:af:39:24:bd:97:
3e:ff:2c:93:60:76:94:c9:7d:5f:73:67:51:b7:45:ea:31:ae:
1a:e6:7a:46:d9:43:36:73:d7:1c:6a:ae:ce:39:7e:87:41:b8:
a1:1c:49:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjj5RmOQiufVer9NtSu0VElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYTg4NjBhYWViYzRhODFkM2QyMjZkNDIzODczZTMzYzM4
ODBhYWEwHhcNMjUwODI2MDEwMTM4WhcNMjUwODI3MDEwMTM4WjAzMTEwLwYDVQQD
EyhkNDMxNGQ5ZDE1OWY4NzQ0YTI0ZTIyOTQ4NTFmMzYzZGFlNTg1ZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vZBut2YvjPMy8cuHU52932BERGL
Qt41ddNNTZUaS4JPnsQj/Wb2SfV/+3Qj3nnVXYyLBieABltxCqfAYkgFjdnNKojh
gMjI3iHXh9+jY8EVs8YkqqM40Zhvu9Ylc6azW7ag7dVIor4O4QqmzzjX313+7hAp
WSt3VPVWYHsr9FenuHNqgEdfokmL0MF0gcj1ERelHqm7HxXOD3qbU3Zkozp8GSit
+SWmh6mla1Z5PB35SdWoVP9DWR7R53E0/8TJhpRtMLGXsHP5DO7NN1tfg5iKBBPL
WdUj5Ghfr38Vlg+0r5lDXumCKeobr6UZFfJOY9OfKh85KCDKKxVTu6cPLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQxTZ0Vn4dEok4ilIUfNj2uWF/bMB8GA1UdIwQY
MBaAFFyohgquvEqB09Im1COHPjPDiAqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEtpR0NxNjhTb0hUMGliVUk0Yy1NOE9JQ3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83OTgwYjQtY2Q0NC00NTk3LTg1N2Qt
NjJkMTNiMDMxNDE5LzEvWEtpR0NxNjhTb0hUMGliVUk0Yy1NOE9JQ3FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83OTgwYjQtY2Q0NC00NTk3LTg1N2QtNjJkMTNiMDMxNDE5
LzEvWEtpR0NxNjhTb0hUMGliVUk0Yy1NOE9JQ3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvfZOEk5x
MHHTho48jrZL4lTg4ynykCDnGO0htQIJboAa8LV5MtpQk1XCanPrEs3EMopH6eMI
w5iGnfEBrvTGnQJC56MQFdoTdMu+AGafRvP+u5AVztWxRO5v9xBglrDrnS30jj5t
6rQWpttCHHLp1P7U439Ssa10o8Ilpk6TmPzpodK86+NJVuSDephmFPKKy9zV3lJE
yshm1DdzXzPIPa9ZxMtRJwbKge6TDFv3sXujx6vhONo5ViucD9zzqkDlcKZrCLTg
2+ll6k11xrXFYFq/5q85JL2XPv8sk2B2lMl9X3NnUbdF6jGuGuZ6RtlDNnPXHGqu
zjl+h0G4oRxJ2A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:30:11 2025 by rpki-client