Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
File: 0SO41GITRmfsap0eFU5cfwWWZiw.mft (raw, json)
Hash identifier: ewjvstRZmSy1zeBWI6O/B0F1X0ihGPmMVCx6l5bRufw=
Subject key identifier: C6:B5:48:F8:E2:FA:F3:7F:90:30:3B:76:C9:57:76:93:E7:72:D6:BA
Authority key identifier: D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
Certificate issuer: /CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Certificate serial: 0197E9446E99A7C490F8519225487E6ABC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
Manifest number: 15D0
Signing time: Tue 08 Jul 2025 09:01:05 +0000
Manifest this update: Tue 08 Jul 2025 09:01:05 +0000
Manifest next update: Wed 09 Jul 2025 09:01:05 +0000
Files and hashes: 1: 0SO41GITRmfsap0eFU5cfwWWZiw.crl (hash: 8Tc1I5GzipXiILVKldFGcx8XXBglR2rMLRQPv0HMHjw=)
2: ydYjDF75mH7bfqoCwNzPOqna2dk.roa (hash: sywFQUytXwSuvYG2++Bqw/RDZKafPOlycszuwNNtgdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:44:6e:99:a7:c4:90:f8:51:92:25:48:7e:6a:bc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Validity
Not Before: Jul 8 09:01:05 2025 GMT
Not After : Jul 9 09:01:05 2025 GMT
Subject: CN=c6b548f8e2faf37f90303b76c9577693e772d6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:c0:39:a0:e8:81:ba:6c:35:94:ad:5e:16:
21:a7:9f:f6:9f:c0:78:d6:07:2a:7f:32:1e:e1:cf:
7f:94:b0:54:d4:01:ab:4b:36:61:79:5b:14:e7:5c:
f1:9f:75:f0:4c:45:f2:34:4b:c4:06:98:3b:f9:39:
80:9c:79:c1:c9:9f:59:ed:69:b9:08:27:c0:2b:f9:
9e:02:c8:88:95:c6:6b:27:b8:56:91:f3:c6:cc:a1:
d1:a5:87:f4:df:5b:7f:07:4b:40:b2:a3:1b:ed:99:
82:91:24:80:d3:f8:a3:eb:c0:3c:ef:6e:9b:c1:db:
b8:33:df:06:c5:41:87:2c:73:c1:77:73:82:3a:15:
a9:bc:53:1f:6a:e8:67:34:bf:70:b5:02:a2:a4:d8:
48:0f:b1:f0:96:2f:ac:c1:c2:95:e7:19:34:29:bd:
a5:aa:f1:c2:51:a1:31:d1:cc:85:07:b4:00:c1:34:
df:39:4a:10:d8:1c:da:ec:ab:66:95:5d:37:ee:c5:
89:88:89:6f:b8:60:a2:7d:6b:d2:07:af:e3:ee:fa:
a8:a7:50:83:f7:a9:05:3b:51:2c:cd:72:3c:a6:d1:
5c:da:38:22:b2:a7:27:e0:89:c4:4a:88:b6:f7:2e:
19:1e:16:12:cb:ad:82:fe:f4:29:00:d4:db:00:52:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B5:48:F8:E2:FA:F3:7F:90:30:3B:76:C9:57:76:93:E7:72:D6:BA
X509v3 Authority Key Identifier:
keyid:D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:73:10:80:45:a9:ea:2b:1e:69:29:b4:af:40:7c:e0:9d:14:
ee:33:06:12:ab:6c:8b:8b:10:72:b0:94:4a:94:4b:4b:05:07:
06:47:75:e0:63:a8:a3:58:c2:ac:cb:fd:ec:ba:07:98:25:95:
5d:44:f3:b8:70:88:a9:94:be:7c:f8:2e:d0:4e:7b:86:61:53:
fb:09:aa:88:dd:04:4f:24:36:87:ee:e0:00:c3:89:89:b6:e8:
87:d7:70:c2:f0:bf:30:5f:3a:d8:0e:f1:20:67:cb:68:ec:a4:
33:05:ee:60:be:80:2a:62:ba:5b:5d:ed:ae:81:53:b5:04:ae:
23:3a:30:f0:3b:8a:45:7e:86:ae:07:0b:2d:13:9a:cf:11:7a:
c6:ee:9c:c4:9d:98:1a:bf:7c:68:1d:6d:66:80:82:57:3d:ef:
55:b8:ef:46:c3:68:6c:85:4b:b4:69:eb:aa:cd:7e:2d:8a:12:
90:22:31:0f:ed:0a:8a:6e:c4:a0:d3:2a:2d:8d:5c:5e:41:ef:
83:07:6b:58:9b:44:47:ba:3a:4c:72:5b:8e:f3:5d:a8:15:5c:
29:ed:c1:ff:a7:9e:4e:91:dd:45:be:dc:1a:e3:b3:2e:04:a7:
f8:41:8f:a0:a7:da:af:a6:b7:7c:ef:76:70:0c:e7:ad:6b:a8:
e7:1f:52:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:43:31 2025 by rpki-client