Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
File: gJXgzG5Kjeis07B8zl6gwEDEf_E.mft (raw, json)
Hash identifier: Uei4H2bR0JIKvOFRylxIVAunZhArSw46WheQ/mfTj8Q=
Subject key identifier: 40:1A:D0:87:CB:96:D7:5E:8E:4B:DA:78:87:D7:0D:9F:3E:93:2D:F1
Authority key identifier: 80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
Certificate issuer: /CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Certificate serial: 019A05C8DC5A5C028140AE2358AD4A24B00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
Manifest number: 16EA
Signing time: Tue 21 Oct 2025 08:00:40 +0000
Manifest this update: Tue 21 Oct 2025 08:00:40 +0000
Manifest next update: Wed 22 Oct 2025 08:00:40 +0000
Files and hashes: 1: 5BEa602wZYpMxTuh3zw8qo0mrK4.roa (hash: +ORzsbOhqz/jkJrclx5p3HM7N8Z+T1SUhWKkKSdLD+M=)
2: gJXgzG5Kjeis07B8zl6gwEDEf_E.crl (hash: 5OGMyc9prOTLshBTLjGSmD+fvZXYtvrOQn9eaD03z3k=)
3: jWNTJ1FpKEnE4-XV0f-LwaNjgGw.roa (hash: uelleaLEyblsE/O04BBgVrwIcj9C3h4Y81oJVkNhBzM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:c8:dc:5a:5c:02:81:40:ae:23:58:ad:4a:24:b0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Validity
Not Before: Oct 21 08:00:40 2025 GMT
Not After : Oct 22 08:00:40 2025 GMT
Subject: CN=401ad087cb96d75e8e4bda7887d70d9f3e932df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1c:44:3c:c6:4c:fc:aa:93:8a:a8:c8:a8:60:
9c:89:56:f5:ef:81:b1:ef:c3:55:26:2d:aa:3e:bd:
9c:fa:a7:a2:29:b6:f5:b8:aa:56:ae:05:b1:57:07:
9e:61:8e:46:f8:d3:db:12:95:ef:a2:b0:f3:1f:a7:
cd:0e:22:af:5b:00:86:50:e9:83:0f:3a:02:29:a2:
72:6e:56:e4:7c:88:45:c0:a9:22:aa:8c:a2:9b:b7:
4d:93:fc:a4:14:98:fb:49:93:8d:ac:fa:75:30:9a:
96:77:b8:29:59:41:f3:e9:f9:17:4f:da:93:d8:a5:
3d:2f:22:52:dd:0a:82:29:dc:01:95:32:46:36:ea:
57:84:1e:3f:ac:74:ee:c9:13:3a:63:74:0b:fb:24:
a5:5b:bb:3e:b1:4f:2d:7c:73:7e:d4:41:7e:54:56:
a4:82:83:76:19:85:56:7a:13:ab:f4:6e:a7:4f:17:
7f:96:35:14:c2:15:47:e6:1d:7f:b2:e1:ac:87:09:
ed:a8:91:2d:77:04:13:0c:48:de:ae:8c:0b:2c:20:
ce:63:49:f0:b8:e6:11:e4:73:46:bd:a5:99:78:fd:
f3:5e:88:44:48:0c:1f:fd:1f:f0:89:23:a5:e5:b3:
c0:9f:d4:cc:9f:5f:23:92:1e:82:46:9a:c4:43:30:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1A:D0:87:CB:96:D7:5E:8E:4B:DA:78:87:D7:0D:9F:3E:93:2D:F1
X509v3 Authority Key Identifier:
keyid:80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7f:80:45:7c:56:5f:1f:09:82:b2:13:58:ac:f2:f0:2e:e8:
82:51:c4:8c:a5:bb:71:e5:f9:f0:32:95:55:86:8b:4b:3d:ab:
e6:af:53:d6:5d:b4:cb:56:a5:3e:8e:47:94:d5:95:b9:a9:02:
c6:54:1f:1b:99:51:20:86:b2:1a:b6:9e:d0:98:f5:e5:9b:9f:
bd:15:94:80:ee:9d:db:62:8b:9d:bc:13:13:15:41:d9:37:3e:
b8:0a:03:8f:f7:a6:34:7d:d2:b4:4a:22:57:b9:a1:14:8d:74:
d3:62:22:4b:73:ff:8c:ea:a8:ad:8a:b4:6b:a5:df:07:de:8e:
69:bf:56:a8:31:ba:07:8e:3d:9c:bc:6f:df:b8:8c:77:1b:84:
e6:21:b5:85:7e:9e:23:45:0a:47:26:57:9e:01:77:16:21:87:
ee:76:f5:24:d5:b3:70:f9:db:54:1d:d7:f1:0f:92:85:5b:05:
15:30:af:e1:f9:81:d6:0b:e7:66:ee:f4:3c:76:71:cf:df:44:
2b:9e:aa:26:13:ff:7e:e7:17:93:60:61:02:1c:de:d4:fd:87:
ef:ed:4e:b7:0c:14:96:c4:72:26:80:ba:5a:63:9d:40:d1:3f:
a0:58:22:72:79:c0:b9:f7:6f:e3:84:65:8f:dd:8b:21:8d:a0:
30:f2:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:36 2025 by rpki-client