Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
File: 6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft (raw, json)
Hash identifier: FrOwvN71WANewsQNDXOD+vPqL55GwIPAPvU30LChgr4=
Subject key identifier: 10:3F:13:86:6E:1D:FA:E1:E6:9C:34:33:9D:C6:23:43:1B:4B:69:03
Authority key identifier: E8:7A:1D:93:EE:4E:87:CD:55:09:9A:B8:AD:25:EE:C0:1C:4F:D2:4C
Certificate issuer: /CN=e87a1d93ee4e87cd55099ab8ad25eec01c4fd24c
Certificate serial: 01990E61342F80950763C732DDDFDBB1DF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hodk-5Oh81VCZq4rSXuwBxP0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
Manifest number: 0BAB
Signing time: Wed 03 Sep 2025 07:01:15 +0000
Manifest this update: Wed 03 Sep 2025 07:01:15 +0000
Manifest next update: Thu 04 Sep 2025 07:01:15 +0000
Files and hashes: 1: 6Hodk-5Oh81VCZq4rSXuwBxP0kw.crl (hash: EdhiUwBhDsEBFaDO7Cq6Yn0zMnr3LY3RjQKE3vqWfHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:61:34:2f:80:95:07:63:c7:32:dd:df:db:b1:df:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87a1d93ee4e87cd55099ab8ad25eec01c4fd24c
Validity
Not Before: Sep 3 07:01:15 2025 GMT
Not After : Sep 4 07:01:15 2025 GMT
Subject: CN=103f13866e1dfae1e69c34339dc623431b4b6903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:59:00:f1:e5:41:70:73:ba:c1:0a:b3:23:
7a:e5:bf:91:24:d7:b5:ea:bf:7d:ab:ba:6c:8b:2b:
0a:e0:2a:cd:58:a9:e3:8e:41:0e:61:df:9f:0d:43:
c3:65:9f:45:73:85:84:5c:a4:cc:c4:62:a6:76:63:
51:71:e0:21:29:3b:29:e8:53:e9:3e:af:68:8e:33:
4c:71:74:a2:89:2c:1a:8e:98:c5:e8:d9:88:31:6c:
50:26:bf:f4:df:04:47:2d:70:f4:25:bf:ee:c3:a9:
06:c9:f9:82:70:b1:32:a0:bf:06:ca:a6:c2:ae:8b:
91:67:33:df:b1:db:50:a9:5f:63:bf:e4:6f:dc:d0:
e4:c1:3d:3c:ff:a8:cc:a1:3a:64:ce:95:76:9a:30:
7e:ce:07:82:dd:fe:31:1f:8c:a7:00:e0:53:97:7c:
19:9c:ff:3f:cf:1d:a4:8d:72:15:bc:35:a5:58:af:
09:73:21:09:c6:75:54:37:1d:2f:f1:e1:a9:16:67:
12:6d:6e:94:f6:43:b8:0d:02:73:72:fa:bc:23:e1:
5b:e2:69:1a:40:d2:8c:e5:6a:61:8d:34:cb:2c:cc:
87:b4:73:f4:48:13:e0:2e:a7:79:8a:f3:18:66:e6:
a3:19:95:11:0b:6a:a2:70:ac:27:48:9a:9e:32:b9:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3F:13:86:6E:1D:FA:E1:E6:9C:34:33:9D:C6:23:43:1B:4B:69:03
X509v3 Authority Key Identifier:
keyid:E8:7A:1D:93:EE:4E:87:CD:55:09:9A:B8:AD:25:EE:C0:1C:4F:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hodk-5Oh81VCZq4rSXuwBxP0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:91:04:44:ff:0d:ae:3b:05:4b:03:ff:a3:52:7c:f5:fa:60:
9b:b6:7b:e8:93:61:a9:b4:67:dd:1f:80:65:af:f7:da:97:b0:
1b:0d:bf:e7:6a:8b:8f:a5:97:3c:e3:8c:ce:4a:0d:dc:45:ac:
66:32:37:6b:82:04:68:f2:e5:b4:05:9a:de:0f:ef:4d:69:d0:
61:e9:e6:1b:5d:c8:07:77:41:d8:ab:b7:fb:4d:e6:e1:07:19:
1b:b0:97:dc:76:2d:87:00:a1:46:e4:0e:b4:17:0e:65:67:3a:
4b:1c:55:a9:c4:8a:07:04:91:df:11:84:89:a4:68:db:8d:25:
8c:da:86:e2:88:b6:f4:84:d4:fe:95:77:e0:b1:cf:59:a3:c4:
9e:b6:f3:fd:59:70:a5:64:c6:43:6a:c4:22:9a:c7:d2:a6:9c:
f8:2e:de:a1:c6:e7:39:a1:9a:66:71:8a:85:46:c3:9d:c0:fc:
56:23:98:9e:02:ce:23:f4:56:64:9d:c0:cc:08:4c:4b:68:2e:
44:d6:f1:38:fc:40:b5:79:a2:16:15:8a:ce:19:38:d2:49:fe:
b3:34:6f:08:a1:f9:80:79:bb:37:94:62:6c:83:78:94:b5:c7:
e0:7a:61:5b:6b:c8:5d:0b:40:ac:26:e0:7e:3c:42:8f:d8:ed:
4a:7b:e3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:40 2025 by rpki-client