Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
File: pkLcUMWwgtCc5unHvqeug3EHPvI.mft (raw, json)
Hash identifier: TIbrSvPIegOSU4YCJOf6004/GLqsIntQdS1TpC4LyK0=
Subject key identifier: CF:8E:CD:11:8F:CD:A3:AE:E0:C2:CC:CD:F1:DF:B2:18:B3:6F:61:C9
Authority key identifier: A6:42:DC:50:C5:B0:82:D0:9C:E6:E9:C7:BE:A7:AE:83:71:07:3E:F2
Certificate issuer: /CN=a642dc50c5b082d09ce6e9c7bea7ae8371073ef2
Certificate serial: 01999F371DE83633183BD9C4721DB5024613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
Manifest number: 16B0
Signing time: Wed 01 Oct 2025 10:00:13 +0000
Manifest this update: Wed 01 Oct 2025 10:00:13 +0000
Manifest next update: Thu 02 Oct 2025 10:00:13 +0000
Files and hashes: 1: pkLcUMWwgtCc5unHvqeug3EHPvI.crl (hash: ieZAib4+TgLLkGs0M7LPBPk2N9Dn2gMhuALSEm6+y4k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:37:1d:e8:36:33:18:3b:d9:c4:72:1d:b5:02:46:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a642dc50c5b082d09ce6e9c7bea7ae8371073ef2
Validity
Not Before: Oct 1 10:00:13 2025 GMT
Not After : Oct 2 10:00:13 2025 GMT
Subject: CN=cf8ecd118fcda3aee0c2cccdf1dfb218b36f61c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:4a:70:27:50:c8:c8:45:90:a6:3e:f6:6b:
a3:67:ca:42:c1:f9:6e:7c:9e:18:fc:b1:22:ee:94:
a5:ad:03:5e:77:34:f5:2d:5c:51:9f:4b:c6:50:ea:
c2:23:f5:e9:d1:2c:50:cd:29:dd:97:a2:2e:a1:67:
e1:3f:91:30:ea:26:ae:a9:be:76:48:ca:ce:c6:63:
fc:d3:80:97:85:64:12:43:c5:d0:17:67:6e:14:07:
42:0c:13:53:65:62:ec:51:e7:01:fc:6f:0a:51:4b:
47:94:c7:bc:20:ea:79:a0:31:09:6d:60:08:2e:25:
ab:ae:b5:99:62:87:08:ea:c0:f7:5f:7c:93:80:c4:
e6:62:54:41:3d:d4:64:2e:9a:fa:1f:9a:6a:87:3b:
44:e5:a2:06:0a:ec:b4:ff:6e:44:41:3f:3b:5b:62:
7a:e5:95:c9:40:79:9e:6c:3b:6a:d4:b8:18:f2:e0:
6e:c4:d4:61:68:76:18:d6:47:9e:93:c0:41:de:8f:
3d:82:8c:43:74:34:35:4b:d4:b6:56:0e:95:43:6e:
88:0a:3b:a6:3e:eb:cd:d4:5a:8c:69:37:6e:f6:d4:
13:15:9f:fc:28:79:8b:7f:e1:f7:8f:46:1c:40:4f:
73:44:92:c2:f9:7c:7b:04:0d:2b:85:01:c0:72:37:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8E:CD:11:8F:CD:A3:AE:E0:C2:CC:CD:F1:DF:B2:18:B3:6F:61:C9
X509v3 Authority Key Identifier:
keyid:A6:42:DC:50:C5:B0:82:D0:9C:E6:E9:C7:BE:A7:AE:83:71:07:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5e:f1:72:8f:87:1d:02:30:64:17:be:99:73:5f:d1:3b:db:
92:3c:13:55:29:07:1d:62:b9:2a:8b:32:a8:f3:3d:a2:03:5b:
9b:88:97:21:52:94:eb:e0:a0:a3:79:e8:91:3f:d3:16:fd:b4:
3e:34:ea:d1:d0:08:e1:7f:e6:68:4d:9c:5b:55:3c:81:43:d5:
70:c2:f8:83:23:ea:5f:09:9b:a3:ef:bc:df:d8:e4:4e:ca:2d:
60:95:8f:38:41:72:e2:0d:26:d0:90:8c:b0:27:53:97:4e:8d:
f1:b6:43:34:ad:9d:05:ca:17:2a:ca:58:5a:cc:6c:d6:92:e8:
49:67:e4:d6:f8:18:48:19:a2:fe:4c:cd:33:c7:55:37:87:28:
83:f4:f2:8f:65:40:4c:ee:07:7b:fa:60:0d:6d:2d:e9:0c:99:
27:7b:bf:78:d0:fb:aa:57:70:a0:18:f3:b5:96:ba:9a:0f:bd:
f7:b0:43:19:3a:c6:d5:cf:50:37:67:60:c2:ad:99:dd:2e:ab:
07:94:a6:c3:e9:29:18:04:cf:c9:29:9e:dc:65:79:f1:64:a1:
b7:0e:d8:69:76:89:d6:23:13:56:0c:f6:b2:fc:31:ed:93:02:
67:21:de:81:72:58:89:d2:ff:68:f2:81:8e:40:12:aa:81:f9:
cc:0e:40:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:58:37 2025 by rpki-client