Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/XPRYPgFOuFcBj-61ySzhdToJy6A.mft
File: XPRYPgFOuFcBj-61ySzhdToJy6A.mft (raw, json)
Hash identifier: 2yLMeL0ES5N13YmrqUa6jO9STjWEtnZ+y4zGUpTvkP8=
Subject key identifier: 4F:AC:88:CB:89:DD:65:42:C9:9B:E9:CC:76:0C:2B:1B:33:B1:8F:4A
Authority key identifier: 5C:F4:58:3E:01:4E:B8:57:01:8F:EE:B5:C9:2C:E1:75:3A:09:CB:A0
Certificate issuer: /CN=5cf4583e014eb857018feeb5c92ce1753a09cba0
Certificate serial: 0197E3B056DC33A7FB4CC4DF72F0BB49381F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRYPgFOuFcBj-61ySzhdToJy6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/XPRYPgFOuFcBj-61ySzhdToJy6A.mft
Manifest number: 015F
Signing time: Mon 07 Jul 2025 07:01:13 +0000
Manifest this update: Mon 07 Jul 2025 07:01:13 +0000
Manifest next update: Tue 08 Jul 2025 07:01:13 +0000
Files and hashes: 1: TXFkFxk0go0Y2-GlYi6JLFAQr8E.roa (hash: /I3Hs2InDf2N1C0cd7n3+qfO4ge9onR8lMBOsgpKwyE=)
2: XPRYPgFOuFcBj-61ySzhdToJy6A.crl (hash: Lw2y/GDTU3H9lDWlynzXLWIMYO9gAoSPqbsIWb4s1zU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e3:b0:56:dc:33:a7:fb:4c:c4:df:72:f0:bb:49:38:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4583e014eb857018feeb5c92ce1753a09cba0
Validity
Not Before: Jul 7 07:01:13 2025 GMT
Not After : Jul 8 07:01:13 2025 GMT
Subject: CN=4fac88cb89dd6542c99be9cc760c2b1b33b18f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:21:53:01:4d:ec:14:69:fc:01:39:87:48:
26:a9:81:0c:f3:96:86:bb:fc:50:93:48:3a:10:53:
d7:7c:8e:bc:7f:4e:75:f7:b2:fd:fb:54:e4:b5:b9:
74:8c:c2:58:f1:bf:49:e0:e9:3e:66:d5:43:8d:44:
cf:19:a7:46:7d:6e:b6:40:52:d1:0a:4d:b2:23:31:
2b:a9:da:56:74:ff:29:23:a8:1a:5f:46:dd:a6:3f:
ee:14:2f:b3:29:2a:47:d9:1b:68:2a:a3:17:82:c5:
b3:b0:bf:c5:86:ea:f8:9a:93:51:8f:5e:39:bc:c0:
bd:86:ba:c3:8f:13:80:18:66:f9:af:44:0f:9f:28:
d5:bf:0c:e7:4e:e3:26:13:1b:ee:2f:21:be:6e:85:
dd:a5:bd:36:a3:41:e1:f3:05:f1:cf:de:50:4f:8d:
5d:39:f6:3d:8e:6e:f2:d3:c4:6f:31:13:eb:63:cb:
56:21:bf:39:b5:f2:e7:da:34:af:6d:10:2d:e6:50:
eb:d3:10:15:e3:3e:1a:9e:d9:2c:1d:b2:e5:a5:16:
80:3d:0d:1e:31:23:a0:b4:13:28:a6:5f:66:27:66:
c9:58:82:4f:dd:b0:2c:34:d4:9b:9c:e9:8d:01:aa:
2e:71:3c:91:b4:83:73:30:22:a6:18:fd:ea:f6:f5:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AC:88:CB:89:DD:65:42:C9:9B:E9:CC:76:0C:2B:1B:33:B1:8F:4A
X509v3 Authority Key Identifier:
keyid:5C:F4:58:3E:01:4E:B8:57:01:8F:EE:B5:C9:2C:E1:75:3A:09:CB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRYPgFOuFcBj-61ySzhdToJy6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/XPRYPgFOuFcBj-61ySzhdToJy6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/XPRYPgFOuFcBj-61ySzhdToJy6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8b:2e:88:1c:b7:1b:52:1d:da:c5:a4:c3:f3:12:28:65:c1:
eb:49:1e:02:64:1c:f0:6c:56:04:e1:5e:72:82:b0:f8:eb:e6:
61:25:14:16:26:50:0b:46:48:2a:10:57:7c:72:ac:c6:8c:60:
b1:5a:34:a6:93:11:85:7c:69:95:08:f5:12:e0:06:fc:cd:54:
d1:05:d9:bb:bf:d0:db:af:e1:a1:ca:a2:33:10:01:4b:38:36:
37:d5:22:0f:bf:d4:fe:52:eb:04:88:ef:8e:6d:52:bb:30:ac:
2e:c2:73:f4:7e:91:50:1e:41:f4:e9:40:40:ac:a6:3b:45:b9:
1b:d0:dd:20:46:89:cb:28:5b:e9:b6:de:25:c6:83:5a:bb:9c:
69:51:db:a1:f7:3a:7a:c9:da:59:d4:70:02:cd:9d:08:dc:89:
ab:c5:80:58:c8:78:d7:14:b1:f3:95:7d:d3:b8:44:ca:a9:de:
09:2c:95:2b:a8:7d:6e:ab:65:ab:f2:00:82:20:be:44:04:2d:
09:05:03:e5:40:b8:cc:80:8f:8f:a9:93:6c:7c:00:e3:b1:17:
79:93:a6:40:b4:06:09:3d:12:69:3d:16:8b:c9:60:8f:ae:54:
e7:07:07:38:3b:34:8b:cc:c7:23:79:87:37:ae:ba:8e:8c:4b:
fc:4b:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:01:22 2025 by rpki-client