Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
File: xN29nyMJGTIb9WcG8QaTd5JhGfk.mft (raw, json)
Hash identifier: Em7oqxH8RGtIO0lP4WYFQoRgoruiqQG9ogLUOKkitak=
Subject key identifier: 3F:16:A7:EA:12:F2:37:B7:BB:8C:D7:FD:B3:0F:05:60:CC:0E:7F:37
Authority key identifier: C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
Certificate issuer: /CN=c4ddbd9f230919321bf56706f1069377926119f9
Certificate serial: 019786C6DFB88AE617056D7207610FDA2E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
Manifest number: 05BB
Signing time: Thu 19 Jun 2025 06:01:09 +0000
Manifest this update: Thu 19 Jun 2025 06:01:09 +0000
Manifest next update: Fri 20 Jun 2025 06:01:09 +0000
Files and hashes: 1: 7qr12EYwsdyti-EmLWqRDogionQ.roa (hash: 5LhmlqfCFcdrvGQgZrfHuGwVjCahrEpoNBu5iKMaA/w=)
2: JEh62edtGcPK6W4aI6E72di6xCs.roa (hash: PD42vAZ0BIX3jY6yqazrN5UUOFytkMhASMCFsoaVQJg=)
3: xN29nyMJGTIb9WcG8QaTd5JhGfk.crl (hash: QSmY/D2lNfOVYP0ulUo/w2yRLiP+dbZtjUibcqZVrsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:c6:df:b8:8a:e6:17:05:6d:72:07:61:0f:da:2e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddbd9f230919321bf56706f1069377926119f9
Validity
Not Before: Jun 19 06:01:09 2025 GMT
Not After : Jun 20 06:01:09 2025 GMT
Subject: CN=3f16a7ea12f237b7bb8cd7fdb30f0560cc0e7f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:00:4d:c2:8c:96:11:d8:bc:ea:5f:30:aa:
e5:dc:63:fa:b4:43:34:d7:2b:d9:53:d5:36:6a:70:
24:0e:bf:95:9c:b9:fd:8f:bd:80:4b:8b:cb:6f:b1:
56:d3:b6:9a:87:75:34:11:82:09:c2:f9:18:ae:11:
d3:dc:e3:9f:ab:a1:94:76:5d:bb:91:28:46:0b:16:
ff:56:73:4a:f2:0b:6d:48:32:bb:2e:62:3f:a6:21:
8e:65:85:75:76:9f:81:d9:27:17:cc:82:6d:60:65:
26:97:15:1d:b2:3a:c3:7d:da:7d:0f:75:f2:25:8a:
ee:b9:df:77:59:c5:56:64:51:34:6f:00:fb:a4:27:
4c:8d:fc:93:bf:68:41:18:90:04:3b:b3:b8:48:e8:
5b:97:81:34:75:3e:5a:28:2f:87:99:f6:a5:df:aa:
3c:bd:fa:2b:6c:3a:60:77:25:28:f3:b4:83:6a:9f:
21:04:7f:69:62:65:52:d5:70:aa:0d:1b:2e:dc:13:
87:b1:6c:eb:31:d3:0b:98:4f:c6:e3:cd:63:02:98:
86:68:3a:9a:d3:e1:fe:e6:2a:6b:60:5e:e2:ba:e5:
b3:65:aa:51:2c:c8:11:93:6d:10:ba:ac:44:74:f0:
3b:b8:00:8b:8e:38:77:ff:53:8e:88:b6:36:db:6f:
6c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:16:A7:EA:12:F2:37:B7:BB:8C:D7:FD:B3:0F:05:60:CC:0E:7F:37
X509v3 Authority Key Identifier:
keyid:C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4c:7c:73:b8:ee:04:9e:3b:4b:12:ae:d7:cf:5e:6f:72:3f:
88:37:85:89:6b:1a:72:f0:22:5c:7d:34:9d:e0:9b:94:31:f5:
08:86:ed:43:5c:5e:a9:0c:25:23:7f:62:1b:a8:4a:94:4a:38:
86:24:db:35:d9:95:bd:ed:7e:b1:1a:20:8c:30:09:ea:8e:3f:
87:8c:bb:8e:99:1f:d9:72:0d:49:10:89:70:dd:ab:c2:1d:26:
23:16:0c:85:d4:86:73:9d:a9:ad:ac:79:4e:2f:60:95:ad:3d:
d7:d1:6b:74:b4:c9:a5:86:8a:18:8a:3f:39:3f:03:43:e7:fe:
0c:bc:f6:00:94:29:55:5b:ff:00:09:a2:67:c2:aa:bf:3e:ed:
39:40:e9:59:bb:86:99:ae:28:ec:56:36:d0:42:19:6b:f2:6e:
07:59:ca:82:b3:e1:e2:06:48:80:31:8a:7d:10:45:b5:4a:c1:
f7:b1:d3:c0:b7:f0:8f:28:e0:68:60:5a:9e:57:2c:34:30:a2:
da:4c:52:8d:e6:52:fe:ed:b5:d1:92:31:6e:7d:cb:b7:7f:9c:
6f:95:a7:08:77:17:36:42:1d:44:a0:51:8f:52:1e:1c:f1:ee:
15:5e:14:97:f5:23:7d:5a:0d:0f:27:02:a2:a6:7d:c9:42:d3:
0a:ae:61:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:51:25 2025 by rpki-client