Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
File: 6sw7q9U8RM12FFr4fUI3Axfo0ME.mft (raw, json)
Hash identifier: 9BueNx0BD06xiAVGp7i5Mq/30HbHvJrEG2iVGrpc3oA=
Subject key identifier: 65:C7:74:C2:27:6E:F8:3D:67:E1:C3:8A:B0:AF:BB:42:8F:CA:2B:FD
Authority key identifier: EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1
Certificate issuer: /CN=eacc3babd53c44cd76145af87d42370317e8d0c1
Certificate serial: 019B35328C3BFFA492C893B8DBB37AB337D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
Manifest number: 0ED1
Signing time: Fri 19 Dec 2025 06:01:03 +0000
Manifest this update: Fri 19 Dec 2025 06:01:03 +0000
Manifest next update: Sat 20 Dec 2025 06:01:03 +0000
Files and hashes: 1: 6sw7q9U8RM12FFr4fUI3Axfo0ME.crl (hash: KDLYa1R7345WH98JJqqeFF3G8aLdt5InE9kBiDkMNvM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:35:32:8c:3b:ff:a4:92:c8:93:b8:db:b3:7a:b3:37:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacc3babd53c44cd76145af87d42370317e8d0c1
Validity
Not Before: Dec 19 06:01:03 2025 GMT
Not After : Dec 20 06:01:03 2025 GMT
Subject: CN=65c774c2276ef83d67e1c38ab0afbb428fca2bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:d2:a2:d9:75:ed:52:3a:a0:bd:20:a9:c6:
26:c6:9d:2d:10:db:97:25:09:63:b4:2d:12:20:ad:
53:78:e1:59:50:72:34:38:df:c3:d2:4e:01:fd:da:
8d:75:91:e0:36:c9:d1:b7:f1:c8:4d:66:6f:b4:c7:
4c:60:50:68:b6:86:22:f7:01:76:3a:87:5b:a5:78:
62:eb:43:e7:22:f1:34:4f:2b:0d:11:75:55:38:9b:
20:bb:c3:d6:17:c1:af:07:ba:ec:9c:1e:d4:20:bb:
c0:bb:b7:a2:46:31:46:a9:61:2c:4e:dd:61:23:6f:
02:51:09:22:10:fe:d8:d4:f3:96:19:5b:a8:59:d4:
6c:6c:21:d5:af:37:e0:82:02:78:88:af:37:22:b8:
45:cc:70:98:05:bc:df:8f:6c:e0:c5:37:a3:17:ea:
49:75:9b:19:80:62:04:9a:18:21:81:d9:f3:a5:3d:
2d:bc:8e:a1:d2:e9:61:bb:57:36:22:bb:38:e4:02:
88:3d:e6:5d:06:fd:e3:35:e8:d2:97:10:c0:ce:0e:
58:f0:65:8b:a7:5a:a5:da:7f:a1:19:60:03:59:26:
28:2f:62:bf:f1:e3:c6:58:62:84:65:2e:8a:dc:00:
d5:c6:ff:61:b8:2f:3c:65:be:e0:4c:61:ff:09:8a:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C7:74:C2:27:6E:F8:3D:67:E1:C3:8A:B0:AF:BB:42:8F:CA:2B:FD
X509v3 Authority Key Identifier:
keyid:EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0b:b2:e1:74:0a:dd:98:9b:bf:95:c1:1d:c0:45:3f:1a:50:
05:7e:ad:83:76:ff:65:12:e7:33:be:78:74:79:65:c0:66:3a:
b5:f5:a7:5b:c5:23:14:cc:1d:67:14:36:ca:ab:ba:bd:c0:02:
b3:8c:9d:a0:2d:0f:bd:76:27:19:9a:b8:5f:c3:98:c3:be:bc:
7e:27:ea:08:9f:43:24:71:60:1d:49:1f:e4:eb:13:a1:00:d9:
20:e9:dd:36:4d:fd:e9:f1:e6:a7:46:aa:2a:e0:4a:1e:b9:37:
56:3d:30:d7:de:60:fa:f8:ef:20:a8:2e:9d:a6:b7:c3:5e:49:
14:35:94:92:e8:fb:80:d2:6b:b5:0f:75:0b:6e:30:ac:a8:17:
ff:fc:47:f4:15:15:11:d3:b5:f4:bf:e2:fb:29:9c:e5:41:d8:
38:ad:a9:04:84:e9:a1:cf:c1:d8:5b:41:18:3c:96:33:d7:cd:
0d:7b:48:4b:05:b0:02:06:ef:be:3e:55:46:28:20:f5:83:34:
ef:7e:11:13:9a:09:b7:f9:9f:56:be:94:c4:82:87:ca:ef:0f:
99:54:10:cf:78:ec:d4:12:f7:80:03:7f:89:b4:02:df:ec:1b:
00:94:b5:62:1b:c3:f0:b6:4b:3e:ee:e0:8a:bc:c8:93:2e:fc:
c6:de:25:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:07 2026 by rpki-client