Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: T8KOGMxQF/iNykQmwvBtFCA4dR+3kiKStP4CfOjbAfc=
Subject key identifier: 19:3E:C0:EB:13:AF:9F:6F:CA:F9:7B:8C:DB:79:84:F8:12:A5:31:DE
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 019F236A0E5F60051F636EB24B06C0F0741C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 0A8B
Signing time: Thu 02 Jul 2026 15:19:40 +0000
Manifest this update: Thu 02 Jul 2026 15:19:40 +0000
Manifest next update: Fri 03 Jul 2026 15:19:40 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: hif8h/FI0f47fw0xU3oJJuMDBmFd0cDsdLWrrbe2jrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:0e:5f:60:05:1f:63:6e:b2:4b:06:c0:f0:74:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Jul 2 15:19:40 2026 GMT
Not After : Jul 3 15:19:40 2026 GMT
Subject: CN=193ec0eb13af9f6fcaf97b8cdb7984f812a531de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:54:3f:5c:37:b8:57:fd:7b:25:9b:6f:33:
86:db:3c:4b:4f:71:14:4f:04:36:3d:0e:98:ee:57:
6c:64:34:f0:0e:f8:04:18:ef:23:81:28:5a:a7:65:
3a:2c:c5:35:73:56:02:56:d2:c7:44:0a:45:e1:75:
c5:b6:1a:44:67:8e:bc:7c:54:9d:de:e6:09:e8:a5:
db:59:6c:23:17:c0:7d:fa:d0:33:24:2c:80:93:07:
69:45:65:06:2b:cd:70:8a:7c:da:b3:64:88:91:c5:
80:68:9a:50:3b:98:19:c7:7f:00:19:10:d3:cc:34:
74:fe:73:f7:29:52:01:e6:e9:fc:62:e3:2e:16:c8:
b1:07:cf:e0:0a:40:7f:65:1a:4a:d2:6e:71:76:23:
40:93:eb:77:4b:3b:7c:24:da:53:f1:cc:db:f6:62:
54:e3:d4:b2:27:0c:f4:71:e2:62:a6:fd:93:6d:d9:
2e:c5:25:17:bd:d3:0a:aa:e1:da:33:05:b5:49:31:
fc:67:f7:75:01:51:3c:ad:61:2a:f5:11:3f:b0:91:
2d:8e:35:d0:fc:3b:dd:36:f6:fc:f5:01:12:92:4d:
e5:90:14:d3:f8:da:cb:38:be:10:f0:02:fb:7b:5a:
c5:41:43:82:8f:2e:63:ff:2b:ff:04:99:d2:0e:e0:
95:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3E:C0:EB:13:AF:9F:6F:CA:F9:7B:8C:DB:79:84:F8:12:A5:31:DE
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:91:58:63:61:d6:29:23:e1:3b:9d:22:d9:b7:df:d9:d8:03:
20:a8:5a:6a:3c:d8:a4:38:e6:ef:22:74:c1:e0:fc:42:e2:2a:
49:74:8d:21:10:c6:39:99:bd:83:33:3a:9e:57:30:44:ea:ae:
0f:ed:7f:7c:58:52:cc:00:45:8c:7e:1c:ec:c2:cb:da:63:52:
d1:f1:8a:6f:f8:a9:fa:26:a4:eb:1f:72:7e:db:5d:81:9f:66:
8d:44:f3:07:0e:ef:c3:8a:c3:84:3b:17:14:e4:64:7f:d6:c9:
76:48:f7:98:1d:fb:55:d4:f1:ed:55:ac:81:a7:23:99:91:4a:
62:94:cb:80:7c:b7:2d:e1:d2:10:a1:98:60:20:aa:49:c2:a1:
a2:0b:52:7d:48:57:c4:dd:b6:6b:ae:f0:a2:6c:88:1e:a9:ca:
a3:1c:85:79:6a:11:9b:8b:db:bb:14:74:a8:03:db:1d:75:f2:
19:fe:72:6c:c6:0c:99:0e:b8:4c:36:ff:c1:ca:81:54:07:4d:
8d:a6:9d:dd:8b:af:1b:c4:55:5b:a2:6e:55:ce:a2:81:ee:84:
d4:02:67:b5:8e:80:81:58:80:6a:fc:8c:64:ed:ba:ec:33:56:
e2:48:a5:60:d3:17:cc:45:c1:40:6a:ee:69:c3:16:0c:80:2b:
a2:1f:86:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:22:29 2026 by rpki-client