Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
File: Clusj7JJCQH6YQSAoFtmNYuRJGw.mft (raw, json)
Hash identifier: mpxGQwuGVk0/gI8gYnz2CI1p3iraRRUQ8HLlKNgFS5c=
Subject key identifier: 4F:52:25:B9:C8:F3:36:4C:84:B1:16:B5:91:F8:4E:A4:7B:3A:85:16
Authority key identifier: 0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
Certificate issuer: /CN=0a5bac8fb2490901fa610480a05b66358b91246c
Certificate serial: 019B6E0FBD84B7A14F3A436CB4E6255855D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
Manifest number: 179F
Signing time: Tue 30 Dec 2025 07:01:23 +0000
Manifest this update: Tue 30 Dec 2025 07:01:23 +0000
Manifest next update: Wed 31 Dec 2025 07:01:23 +0000
Files and hashes: 1: Clusj7JJCQH6YQSAoFtmNYuRJGw.crl (hash: /qU+SH6l3mcG4bFc/d2s8OtiUwFx3ajgwUI8jjg9w78=)
2: EX1eqOI5AsdzNwXJw_T2K67SKuY.roa (hash: zTp74P0kNRRvfGdIA3tW3Yag+dPiX+7QsxAnkmFBj8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6e:0f:bd:84:b7:a1:4f:3a:43:6c:b4:e6:25:58:55:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5bac8fb2490901fa610480a05b66358b91246c
Validity
Not Before: Dec 30 07:01:23 2025 GMT
Not After : Dec 31 07:01:23 2025 GMT
Subject: CN=4f5225b9c8f3364c84b116b591f84ea47b3a8516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:03:ab:97:a5:a9:eb:09:6e:0e:d1:28:e0:ec:
db:b7:44:95:e4:f5:cb:72:74:cc:f5:52:29:a5:28:
79:f6:4f:bb:39:75:e0:9e:18:b5:a0:6f:99:45:5e:
2e:cc:db:bf:76:1d:d7:c3:8a:81:e4:b6:85:7a:b3:
f1:cb:8c:55:2f:1f:bc:1f:7d:b8:c9:e5:b9:dd:98:
50:ae:d9:05:50:d3:57:32:a5:5f:e5:0a:5f:9d:2a:
cf:7a:a3:f1:01:b3:ae:2c:3f:65:8d:e5:ad:42:d0:
7b:30:eb:aa:35:83:7a:55:8d:f5:69:10:0d:df:46:
fc:00:eb:d9:a9:21:4d:63:a1:81:52:a7:38:e1:ac:
91:e7:05:0f:16:b3:e6:6f:f7:4c:fe:69:f8:4c:26:
44:c6:cf:d7:dc:2c:2d:8e:24:de:33:c1:ae:ac:28:
e2:33:ff:10:93:43:e7:22:85:40:a0:d4:3f:25:d2:
32:5e:f9:8b:8a:d0:b1:3b:84:21:a3:d8:51:27:80:
94:68:e9:87:20:2b:b0:0c:99:21:b5:1f:d1:0c:a2:
1b:73:7a:07:d8:cb:09:ae:84:50:de:44:6c:db:b4:
2d:68:a3:86:e1:da:e8:dc:6f:ad:fe:57:a8:91:ec:
29:e1:c0:86:aa:dd:09:9d:60:d1:bd:3c:4c:46:bb:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:52:25:B9:C8:F3:36:4C:84:B1:16:B5:91:F8:4E:A4:7B:3A:85:16
X509v3 Authority Key Identifier:
keyid:0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:48:b0:c6:e0:4a:fe:cc:16:b7:55:2f:1b:33:7f:fd:86:f2:
49:dd:1e:f5:01:5e:c5:fd:4c:fd:6a:f3:7f:4b:16:6c:9a:33:
fb:96:72:62:15:7b:07:91:ca:f3:34:89:f3:af:8b:ff:56:22:
43:95:32:47:c2:35:2f:1b:eb:db:51:50:8d:72:7a:59:57:43:
a8:75:30:bb:71:ce:a1:d1:3b:a0:e4:3d:4e:6c:fc:02:4a:cc:
a4:2b:71:e6:ac:e1:09:fb:a3:44:35:40:71:d8:66:58:99:dd:
be:78:86:7e:06:f4:ef:75:6b:3d:a2:b5:42:69:5b:40:e3:ef:
e9:5f:52:e5:54:58:3a:85:fd:24:50:2b:fc:cd:9c:31:ac:25:
5e:15:12:bf:a1:f1:97:41:b3:a1:06:f3:11:01:05:29:39:35:
10:66:89:51:68:1f:23:8c:4e:d8:7b:4f:cc:10:d5:f1:f8:a2:
37:aa:3e:9d:66:25:1e:3b:52:4f:e8:1d:e2:fd:84:1d:2f:b0:
ac:93:95:d7:0c:21:39:df:4c:cf:f2:24:45:f6:02:f7:96:42:
c6:24:dd:a1:07:84:eb:ac:42:d1:a6:12:91:6e:57:a2:09:d5:
ae:77:fc:f1:25:bf:b3:98:e0:07:61:de:06:5a:35:91:a8:57:
be:c5:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:30 2026 by rpki-client