Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
File: 0SO41GITRmfsap0eFU5cfwWWZiw.mft (raw, json)
Hash identifier: BIICIWyR1xdeHrg7fe/4oNt6Mx+M5yEHTnOLBBehw/8=
Subject key identifier: 68:42:E5:59:77:C1:80:58:D4:2A:8E:35:C2:C5:36:A9:5D:EF:7B:03
Authority key identifier: D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
Certificate issuer: /CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Certificate serial: 0197E7554DA7A4DB8A192C18C898E192F8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
Manifest number: 15CF
Signing time: Tue 08 Jul 2025 00:00:16 +0000
Manifest this update: Tue 08 Jul 2025 00:00:16 +0000
Manifest next update: Wed 09 Jul 2025 00:00:16 +0000
Files and hashes: 1: 0SO41GITRmfsap0eFU5cfwWWZiw.crl (hash: PKfZ5Y17NbCbSauKoy7qtDImcoWUovQISgoTNLTIfSI=)
2: ydYjDF75mH7bfqoCwNzPOqna2dk.roa (hash: sywFQUytXwSuvYG2++Bqw/RDZKafPOlycszuwNNtgdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e7:55:4d:a7:a4:db:8a:19:2c:18:c8:98:e1:92:f8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Validity
Not Before: Jul 8 00:00:16 2025 GMT
Not After : Jul 9 00:00:16 2025 GMT
Subject: CN=6842e55977c18058d42a8e35c2c536a95def7b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:8f:27:6e:94:1c:7a:49:6d:7c:19:d0:59:
6c:4b:fb:c4:1a:8b:ff:71:db:14:f0:ed:f8:a6:41:
5c:f9:fb:ce:6b:74:da:8f:41:24:e0:3a:13:f6:50:
61:37:68:b7:03:fa:6b:a9:6a:75:6a:b7:21:d7:20:
47:39:f3:19:c9:0c:aa:90:4a:12:bc:7f:ca:82:a8:
0e:89:be:b6:f5:d4:21:fb:32:d7:cb:27:08:b8:30:
c0:78:a0:f0:99:dc:33:aa:a4:a3:79:8a:f9:cd:06:
2d:4c:a3:12:53:b1:08:cb:05:03:0d:d7:17:0d:e0:
9b:d6:90:95:ff:b7:04:b4:a1:04:ad:b5:91:ad:e5:
5d:7b:b6:f1:51:db:17:80:d5:cf:3b:e0:52:0e:62:
2f:e3:7f:21:c8:6a:fd:1e:15:d0:bc:9a:b8:02:e8:
06:40:75:76:77:e7:ce:95:b4:ea:f5:fe:e5:d1:d7:
e3:88:bf:7b:13:24:71:45:8e:f5:b8:c5:8f:c8:17:
53:58:f5:53:fc:1c:b7:a7:bc:49:3e:3e:72:3e:f5:
29:05:ce:17:24:2f:70:b9:01:99:59:00:54:54:50:
5c:19:e8:af:09:9e:46:0b:00:0a:12:43:a9:ef:5b:
a1:60:f6:4b:95:ec:20:5d:64:2f:8a:bd:ae:88:cf:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:42:E5:59:77:C1:80:58:D4:2A:8E:35:C2:C5:36:A9:5D:EF:7B:03
X509v3 Authority Key Identifier:
keyid:D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9e:40:64:97:69:12:11:f9:97:a2:f0:1f:41:a1:92:5d:49:
03:91:56:22:3a:f6:83:8a:93:50:e7:10:3e:cc:7b:5c:e9:17:
7c:9d:81:e8:b4:cf:90:df:a0:d3:55:5e:77:91:98:b3:40:4b:
d4:8b:12:9e:6d:75:4e:00:55:bd:fc:04:b9:95:a3:a2:c0:ed:
52:0c:fc:02:64:12:67:3d:df:7f:b0:1b:9d:d0:8a:ee:05:65:
e5:5d:2b:ed:e8:86:70:75:c0:55:48:e5:1c:5f:be:fc:9f:4e:
fe:3c:65:0f:98:80:b2:18:56:a1:99:71:db:9a:d7:0c:94:7f:
cd:1e:9d:9c:d9:11:44:21:45:f6:e7:fa:7f:f5:85:be:d6:44:
f6:31:60:5c:2a:39:57:6f:05:b8:c9:0b:67:19:e1:f3:e3:a0:
4c:08:4b:39:97:22:19:bc:c9:40:94:2d:93:55:ee:42:e7:d5:
de:90:3d:3c:55:98:8d:8c:56:c8:fe:69:0d:ac:39:54:f9:6b:
ae:7e:f0:b7:89:de:b1:22:97:52:43:aa:a4:86:0b:75:42:d9:
c8:87:97:e4:12:9a:12:39:32:c1:2f:1a:35:ba:3d:09:91:d3:
c0:2a:34:0c:56:1f:aa:18:c6:87:47:ba:05:3a:74:d8:8c:b4:
5a:fa:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:18 2025 by rpki-client