Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
File: g502OyjxyQhOHBmGh2u0CbeaE4w.mft (raw, json)
Hash identifier: HttbFQkzuw9oYMkjhkOBlJXaYDtxgc0yEgE9uMDj/Dg=
Subject key identifier: 0D:CF:BB:41:A2:70:5E:C3:96:FF:41:16:48:C3:EF:E4:D9:A9:B9:B5
Authority key identifier: 83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
Certificate issuer: /CN=839d363b28f1c9084e1c1986876bb409b79a138c
Certificate serial: 0198C5002F0B3D90D529A6DDA1AB86E7173C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
Manifest number: 0E2C
Signing time: Wed 20 Aug 2025 01:03:00 +0000
Manifest this update: Wed 20 Aug 2025 01:03:00 +0000
Manifest next update: Thu 21 Aug 2025 01:03:00 +0000
Files and hashes: 1: g502OyjxyQhOHBmGh2u0CbeaE4w.crl (hash: Ix/Einy9TzzsR7OSzgXg9rKahvl/Q6GJv2dCUrSdOgs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:00:2f:0b:3d:90:d5:29:a6:dd:a1:ab:86:e7:17:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839d363b28f1c9084e1c1986876bb409b79a138c
Validity
Not Before: Aug 20 01:03:00 2025 GMT
Not After : Aug 21 01:03:00 2025 GMT
Subject: CN=0dcfbb41a2705ec396ff411648c3efe4d9a9b9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:f2:ad:be:34:67:4f:39:f4:4f:7a:10:ec:
b2:19:06:bb:25:46:15:5b:5c:f9:ed:9f:27:f4:20:
48:ee:d8:39:2f:13:4c:5b:dc:23:e8:a6:a4:19:56:
c0:67:eb:2a:9c:58:69:b0:a1:ba:f4:90:50:c9:f1:
1e:fe:5a:ec:34:3b:49:6f:e8:cc:c0:a5:ae:83:52:
3f:a5:02:ca:4b:13:28:9d:a7:9f:2c:38:06:37:3e:
22:e6:ea:6f:d7:44:ab:03:72:22:cc:ee:ed:bc:8b:
85:07:70:d9:9d:9b:65:f5:11:97:d1:41:03:98:81:
76:26:74:7c:eb:f6:aa:b6:fe:50:f4:25:32:fd:27:
1e:09:aa:3b:1b:a7:95:8b:74:56:35:fb:da:e9:04:
b9:cf:02:da:d7:17:18:9f:f3:46:40:35:ff:d6:99:
e0:2e:6b:1f:28:89:1f:fb:cb:90:62:bf:c5:64:54:
d7:08:60:b6:1d:43:64:98:ac:5d:5d:89:e3:1e:4d:
13:e2:af:1f:e5:31:db:24:3f:65:31:98:23:68:ed:
b9:12:c9:33:58:26:9b:03:b7:27:b6:a1:da:5c:6e:
74:20:96:84:ce:ce:9a:d7:b8:9e:db:46:58:81:fa:
a0:5a:d7:5b:76:95:5e:fa:93:58:da:5e:1b:f7:2b:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CF:BB:41:A2:70:5E:C3:96:FF:41:16:48:C3:EF:E4:D9:A9:B9:B5
X509v3 Authority Key Identifier:
keyid:83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:50:ee:d5:47:67:45:12:90:a1:9b:9f:1f:8f:d7:9b:14:d4:
38:32:07:2b:77:7c:2a:8f:bc:a5:c7:74:a7:93:a6:95:c5:f6:
2b:c1:dd:73:e7:39:df:86:14:7e:e3:98:c5:54:39:9c:cb:2a:
b2:e7:a8:ab:ce:dd:c0:d5:6f:b1:c5:e5:cc:02:00:fb:01:78:
71:14:77:f8:76:c8:e9:13:6b:c7:25:eb:f5:82:e9:de:05:44:
e2:fc:99:43:59:65:0a:d6:0c:7c:ca:26:55:91:94:d1:44:a1:
a8:1b:c6:e5:f1:9d:5c:8e:67:67:fb:5f:d4:7f:ee:ef:a9:c7:
79:56:f0:50:5a:2d:a2:80:3a:be:d9:61:a2:95:4e:16:90:8e:
33:e2:70:61:a2:65:8c:45:e7:ed:a8:c1:8c:d7:8e:df:e3:07:
d3:c6:c3:22:52:c8:fb:54:00:88:28:b5:a6:01:c2:ac:1c:7f:
d1:bf:58:50:d0:73:0e:08:0e:73:4a:ec:b4:6a:f5:60:8d:c9:
44:e9:5f:b9:ff:80:4f:53:5d:da:17:4e:fb:2b:aa:2f:50:58:
4b:3a:6f:f5:a3:37:4e:0f:fb:3e:60:ba:d1:24:a5:26:3e:bd:
f0:50:80:83:8f:cb:c4:d3:43:10:26:96:2d:48:03:cb:80:62:
37:2a:83:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:12:17 2025 by rpki-client