Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
File: do5xE0z2ctauj2b8RNW-5iTNAqM.mft (raw, json)
Hash identifier: BYYISsEJ3tV8L/8/WifqpJSDKVW59TVDmBh5ZJjXU3k=
Subject key identifier: 3E:A7:7E:10:03:2A:64:A7:26:F3:95:C8:6B:47:39:87:2F:BC:3E:A6
Authority key identifier: 76:8E:71:13:4C:F6:72:D6:AE:8F:66:FC:44:D5:BE:E6:24:CD:02:A3
Certificate issuer: /CN=768e71134cf672d6ae8f66fc44d5bee624cd02a3
Certificate serial: 019A101562E6AC7F5F3B98F63BD43E9A0B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
Manifest number: 0740
Signing time: Thu 23 Oct 2025 08:00:28 +0000
Manifest this update: Thu 23 Oct 2025 08:00:28 +0000
Manifest next update: Fri 24 Oct 2025 08:00:28 +0000
Files and hashes: 1: do5xE0z2ctauj2b8RNW-5iTNAqM.crl (hash: RXlqB7oWGhF3faK9af8tFjzBZGfp7oQct/CHasSH+GI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:15:62:e6:ac:7f:5f:3b:98:f6:3b:d4:3e:9a:0b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768e71134cf672d6ae8f66fc44d5bee624cd02a3
Validity
Not Before: Oct 23 08:00:28 2025 GMT
Not After : Oct 24 08:00:28 2025 GMT
Subject: CN=3ea77e10032a64a726f395c86b4739872fbc3ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:31:12:1b:e4:11:77:c6:6e:d3:76:0a:84:
18:ac:ad:e2:48:85:69:5f:43:ee:1b:1b:e3:a3:e5:
62:ca:44:fd:c8:da:74:74:7f:27:ac:ac:86:fb:6e:
1a:b8:87:bd:76:a3:c1:3c:9e:a6:c7:20:04:3e:bf:
fa:0a:05:7d:de:98:6f:8d:3d:be:1d:d1:40:3a:35:
af:ff:64:b2:05:82:fa:2d:c8:34:d9:a0:1e:cb:b8:
b4:6c:e2:b3:f5:48:7f:82:4f:bf:21:ec:25:76:37:
2c:28:c0:80:47:87:a4:79:c5:14:d2:19:45:f6:e4:
29:a2:eb:8e:f0:91:a2:84:15:14:e2:f9:3a:58:bf:
9e:15:fb:37:a3:c5:ad:75:8f:53:4c:d5:03:54:8a:
f2:89:89:1d:11:9b:e8:87:39:ab:0f:48:5a:5f:5f:
1a:59:27:48:1f:b7:fd:73:b9:92:58:24:59:bd:53:
bd:2e:46:d7:fe:80:9f:3e:37:b4:49:5b:6f:38:f0:
ab:d8:19:2b:7d:81:45:7b:f4:72:43:1b:23:40:1b:
ec:22:9d:09:81:50:67:4b:6a:1e:24:93:21:fc:4c:
bc:86:a8:8d:98:06:21:e7:aa:88:7a:ba:76:b7:68:
2d:c1:a6:79:93:02:15:52:16:a3:b2:a6:92:52:89:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A7:7E:10:03:2A:64:A7:26:F3:95:C8:6B:47:39:87:2F:BC:3E:A6
X509v3 Authority Key Identifier:
keyid:76:8E:71:13:4C:F6:72:D6:AE:8F:66:FC:44:D5:BE:E6:24:CD:02:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:78:cf:bb:72:47:ca:7f:4c:f9:d6:c2:af:48:8d:4e:49:8c:
87:a8:59:1f:b7:4f:be:ca:f1:41:44:93:d3:89:a7:3c:a8:81:
e7:05:99:5d:57:f6:8e:10:85:d2:ee:63:2d:f0:0c:6e:f5:08:
04:8e:47:09:c1:31:4d:1a:9b:bd:40:4d:8c:17:3b:86:b3:3f:
7a:c2:19:eb:78:74:4f:65:1a:f7:71:2a:80:74:fd:ca:a5:3a:
a6:3b:ed:dd:e4:be:64:98:2f:be:f1:32:02:52:02:10:77:56:
1b:e1:5a:ec:e3:d9:6b:9c:9e:8c:4d:05:35:b9:68:87:b0:72:
4d:97:c4:6f:14:e7:8d:e1:ca:d0:29:14:24:db:68:29:82:50:
aa:86:0a:4e:20:b5:8e:02:09:c6:09:5d:96:39:69:8c:85:e5:
0e:11:07:3f:b6:82:a6:bc:fa:d5:0d:b5:06:74:fa:fd:03:a2:
4d:ca:55:c0:94:55:be:49:20:6f:37:01:0c:78:7c:3d:42:42:
c0:5e:be:cf:2d:f8:15:f2:82:72:71:3a:ad:8b:fb:bf:80:de:
e0:b2:75:6b:d5:71:82:c9:79:c1:04:52:ea:09:d6:6e:93:3f:
af:69:fd:90:fc:8b:58:a1:19:e1:43:96:4d:17:52:b8:5f:a1:
70:9e:dc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:17:56 2025 by rpki-client