Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.mft
File: XtAC05cM6z3Wh7QwuTaibzeNaSc.mft (raw, json)
Hash identifier: cIFlxgsGHM6+lFNtskFrXSjUwqPG3JxKRaRUMW5O01Y=
Subject key identifier: A0:5F:28:6B:57:E6:9A:9C:A1:E5:5D:7D:86:8C:2C:31:66:1C:BA:6B
Authority key identifier: 5E:D0:02:D3:97:0C:EB:3D:D6:87:B4:30:B9:36:A2:6F:37:8D:69:27
Certificate issuer: /CN=5ed002d3970ceb3dd687b430b936a26f378d6927
Certificate serial: 01978C23BA5AF12FAF50A0295B26343C2BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtAC05cM6z3Wh7QwuTaibzeNaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.mft
Manifest number: 081B
Signing time: Fri 20 Jun 2025 07:00:41 +0000
Manifest this update: Fri 20 Jun 2025 07:00:41 +0000
Manifest next update: Sat 21 Jun 2025 07:00:41 +0000
Files and hashes: 1: XtAC05cM6z3Wh7QwuTaibzeNaSc.crl (hash: 6A+Sv1dourMzoabMSHQJjz/iw2pi1in9qoDHJBLiHE8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:23:ba:5a:f1:2f:af:50:a0:29:5b:26:34:3c:2b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed002d3970ceb3dd687b430b936a26f378d6927
Validity
Not Before: Jun 20 07:00:41 2025 GMT
Not After : Jun 21 07:00:41 2025 GMT
Subject: CN=a05f286b57e69a9ca1e55d7d868c2c31661cba6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:94:e4:5d:e7:e5:f2:51:fb:9c:ba:74:85:4b:
e9:f6:25:05:20:a0:66:a6:a7:d0:74:af:c2:12:01:
56:6c:14:c9:05:72:00:71:dc:f3:ec:2d:68:88:6c:
35:9b:8b:fb:c2:c5:f9:95:56:e3:60:93:3f:f7:91:
37:b2:10:02:4c:d0:82:69:0a:76:4d:71:e6:62:29:
07:e0:1c:bf:26:54:16:92:71:c8:2b:f8:e1:5c:a5:
e7:6b:dd:78:5c:f9:fd:db:8c:33:1b:03:a6:5a:e8:
e8:7e:c2:0f:61:34:55:25:10:10:2d:42:64:8f:55:
03:52:2d:1a:76:c5:d1:45:92:df:b4:d1:8d:f8:5b:
d4:13:77:9f:bf:de:9c:53:fd:28:de:eb:26:ac:9f:
5f:ad:f9:a9:49:d0:b5:66:c8:d2:0f:4f:94:22:cf:
4e:53:fc:79:63:f6:33:bd:c6:24:ed:5c:b9:34:56:
3a:36:09:a9:dc:63:89:02:f6:51:d0:51:0c:74:bb:
da:aa:8a:0d:8e:f9:61:2c:dd:12:e7:6c:f1:71:07:
eb:15:d8:d8:a5:20:80:5c:f3:9c:4a:e2:98:70:b7:
d1:d8:d4:ba:e4:51:d4:01:57:64:88:bf:aa:42:bc:
1f:c5:4e:ba:af:fb:32:ff:b2:8d:bb:7e:db:14:63:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5F:28:6B:57:E6:9A:9C:A1:E5:5D:7D:86:8C:2C:31:66:1C:BA:6B
X509v3 Authority Key Identifier:
keyid:5E:D0:02:D3:97:0C:EB:3D:D6:87:B4:30:B9:36:A2:6F:37:8D:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtAC05cM6z3Wh7QwuTaibzeNaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d6:b5:ef:3e:d5:6e:78:f5:a9:0b:86:4f:ec:50:05:d0:56:
ce:ed:00:36:aa:0f:dc:1e:c8:2a:c0:b4:6e:64:d5:d0:6d:14:
0c:23:c1:0f:91:d0:65:4d:5b:23:dd:30:bc:b2:88:a8:28:e7:
a7:72:fb:7f:94:dd:a2:67:a0:55:94:53:b6:d7:e9:49:6e:12:
15:5e:ff:4e:de:61:5a:4b:82:6a:2c:df:16:b2:e1:88:9c:04:
93:a5:7b:29:a1:6c:43:aa:98:63:f9:21:45:31:e0:1c:8c:63:
cc:b9:62:d9:20:54:91:83:63:75:5a:7b:d1:02:c7:99:9f:fe:
ee:2e:35:fb:f6:20:04:37:d2:b2:db:90:10:37:03:90:43:e9:
07:bb:e4:91:e2:38:df:24:da:5d:ad:4f:85:62:63:09:87:f4:
5e:54:26:af:31:82:35:f7:16:e5:00:ef:e2:4a:a0:7f:2e:fa:
12:88:a7:78:4e:2e:36:9a:ce:0f:94:3b:34:24:d6:4e:75:ec:
96:df:9a:3e:67:15:0d:06:d8:8b:0e:e4:4c:0e:2f:81:49:cf:
70:d4:3c:2e:db:51:c5:f6:1d:97:a8:96:d7:df:bf:32:3b:1d:
d0:ed:98:da:34:1f:e1:da:f3:c6:f5:24:8f:18:ae:54:02:1b:
15:a4:76:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeMI7pa8S+vUKApWyY0PCvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZDAwMmQzOTcwY2ViM2RkNjg3YjQzMGI5MzZhMjZmMzc4
ZDY5MjcwHhcNMjUwNjIwMDcwMDQxWhcNMjUwNjIxMDcwMDQxWjAzMTEwLwYDVQQD
EyhhMDVmMjg2YjU3ZTY5YTljYTFlNTVkN2Q4NjhjMmMzMTY2MWNiYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pTkXefl8lH7nLp0hUvp9iUFIKBm
pqfQdK/CEgFWbBTJBXIAcdzz7C1oiGw1m4v7wsX5lVbjYJM/95E3shACTNCCaQp2
TXHmYikH4By/JlQWknHIK/jhXKXna914XPn924wzGwOmWujofsIPYTRVJRAQLUJk
j1UDUi0adsXRRZLftNGN+FvUE3efv96cU/0o3usmrJ9frfmpSdC1ZsjSD0+UIs9O
U/x5Y/YzvcYk7Vy5NFY6Ngmp3GOJAvZR0FEMdLvaqooNjvlhLN0S52zxcQfrFdjY
pSCAXPOcSuKYcLfR2NS65FHUAVdkiL+qQrwfxU66r/sy/7KNu37bFGNy9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBfKGtX5pqcoeVdfYaMLDFmHLprMB8GA1UdIwQY
MBaAFF7QAtOXDOs91oe0MLk2om83jWknMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHRBQzA1Y002ejNXaDdRd3VUYWliemVOYVNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZDM2NTEtOTg3Yi00NjI3LWFkMDYt
NDI3YzAzNWZiYzhkLzEvWHRBQzA1Y002ejNXaDdRd3VUYWliemVOYVNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZDM2NTEtOTg3Yi00NjI3LWFkMDYtNDI3YzAzNWZiYzhk
LzEvWHRBQzA1Y002ejNXaDdRd3VUYWliemVOYVNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKta17z7V
bnj1qQuGT+xQBdBWzu0ANqoP3B7IKsC0bmTV0G0UDCPBD5HQZU1bI90wvLKIqCjn
p3L7f5TdomegVZRTttfpSW4SFV7/Tt5hWkuCaizfFrLhiJwEk6V7KaFsQ6qYY/kh
RTHgHIxjzLli2SBUkYNjdVp70QLHmZ/+7i41+/YgBDfSstuQEDcDkEPpB7vkkeI4
3yTaXa1PhWJjCYf0XlQmrzGCNfcW5QDv4kqgfy76EoineE4uNprOD5Q7NCTWTnXs
lt+aPmcVDQbYiw7kTA4vgUnPcNQ8LttRxfYdl6iW19+/Mjsd0O2Y2jQf4drzxvUk
jxiuVAIbFaR2+A==
-----END CERTIFICATE-----
Generated at Tue Jul 29 16:24:15 2025 by rpki-client