Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
File: xg_8qdjKCPIT5goASMF_uwv2Dnw.mft (raw, json)
Hash identifier: 3/LwTElYGjA8ns1/BDqlq3KIhwjwrfQlvy283Ul+Y7M=
Subject key identifier: D6:DC:EA:18:0A:CA:85:AD:23:9C:9B:BC:C0:E5:A1:93:5F:FB:13:8D
Authority key identifier: C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
Certificate issuer: /CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Certificate serial: 01982B922AB755F18A6BDA8DD6C62327E668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
Manifest number: 15F2
Signing time: Mon 21 Jul 2025 06:00:56 +0000
Manifest this update: Mon 21 Jul 2025 06:00:56 +0000
Manifest next update: Tue 22 Jul 2025 06:00:56 +0000
Files and hashes: 1: 11lEAhEOetLxn95SvRSXh-Lluqw.roa (hash: ReOSLE0b85HJRKU+RZhB6Hf7GgBYtQi4K1hsRO89zys=)
2: xg_8qdjKCPIT5goASMF_uwv2Dnw.crl (hash: gxTcPWwm49GC9GjiiuNYFjnOUdWJfTzQBLqxN+lEXC4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:92:2a:b7:55:f1:8a:6b:da:8d:d6:c6:23:27:e6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Validity
Not Before: Jul 21 06:00:56 2025 GMT
Not After : Jul 22 06:00:56 2025 GMT
Subject: CN=d6dcea180aca85ad239c9bbcc0e5a1935ffb138d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:83:12:48:b5:57:88:68:a1:12:d9:fd:e5:
0b:33:59:2c:4c:3b:95:fc:31:b7:e9:85:93:e5:62:
76:a7:53:19:00:c5:44:2b:30:fc:6c:c0:61:3a:bd:
fe:b0:67:b2:a5:d9:83:69:98:2d:7d:02:84:1e:52:
be:62:a0:e5:80:84:f5:39:16:59:7f:a6:07:da:de:
3e:21:a0:70:e7:87:5e:63:ad:8e:77:89:01:d7:4f:
25:f6:5f:7d:1d:1e:39:63:0d:84:3d:90:2e:07:d7:
40:61:37:b9:e3:15:48:09:1c:09:85:8c:bb:8b:58:
17:76:d2:73:37:a0:f9:9a:80:14:42:87:31:a3:df:
ec:c2:6a:07:33:1a:92:ad:18:c0:4e:34:8c:01:e6:
da:17:ba:9a:d3:ef:2a:5f:22:13:bd:4a:d8:ec:35:
56:fe:e2:7b:e2:bd:52:b7:1a:42:75:1e:ed:19:e0:
f8:a8:9a:ed:73:20:c7:6e:87:8d:58:6a:7c:b5:29:
a4:51:89:ff:8c:d4:18:fe:2e:7b:54:1c:85:7b:b6:
67:07:a7:c8:22:2c:40:9d:03:6d:05:f9:21:0f:a4:
ed:5e:d5:94:d6:ba:48:34:6b:c3:0e:fb:a0:c9:ba:
86:5e:fb:14:da:26:76:85:3e:e7:d9:8c:56:fb:1f:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DC:EA:18:0A:CA:85:AD:23:9C:9B:BC:C0:E5:A1:93:5F:FB:13:8D
X509v3 Authority Key Identifier:
keyid:C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:88:56:14:88:db:78:78:8c:76:56:a5:8e:14:02:56:ef:c9:
34:c4:17:06:d9:ec:03:4f:72:85:21:66:5b:84:8c:e4:12:9c:
2d:04:fe:9d:7c:48:9d:c2:a4:c9:8e:0f:74:53:19:7b:06:79:
b6:23:e9:f7:ca:69:4d:95:17:d2:bd:bf:80:81:02:22:31:6c:
95:3e:7d:f5:88:3e:f2:49:60:a4:12:cc:62:10:f0:c4:c3:4a:
e1:2a:c7:fe:af:8a:6d:7c:4b:78:d6:5d:72:11:0d:c1:0a:a8:
89:d4:98:eb:12:60:37:0b:8b:0f:58:4e:64:fb:55:98:15:a8:
41:82:1c:88:b9:f1:00:de:cf:c3:93:f1:ff:e1:b8:aa:cc:20:
06:3a:6c:4a:8c:d9:ec:18:c5:64:92:3a:ff:e6:6c:2c:9f:29:
39:20:51:d9:fc:8c:f2:65:41:cf:9c:e8:1b:ba:c1:db:d0:a5:
29:c2:1c:be:1f:d2:a7:3d:ad:bb:90:64:b8:9c:8b:89:c4:ee:
b9:77:98:4e:17:46:76:58:c7:89:94:4f:cc:16:47:92:bf:65:
06:3d:f1:a7:e0:5c:95:2d:c3:47:a3:14:59:a9:fa:15:f6:63:
d6:92:77:9c:06:fd:7c:ff:36:d2:fb:2f:0d:af:4a:1b:a9:58:
85:21:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:07:25 2025 by rpki-client