Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
File: 5VNEmgBiicjZNrKcfsWO2AnhgbY.mft (raw, json)
Hash identifier: 0h62g3TCEZUVJ/gmFkQzpZ2E2fnZr2162+wENA7qIhI=
Subject key identifier: 7C:E4:66:BC:55:E4:14:4D:42:1B:AD:FA:3A:B7:D0:EF:B5:6C:29:29
Authority key identifier: E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6
Certificate issuer: /CN=e553449a006289c8d936b29c7ec58ed809e181b6
Certificate serial: 01999F6DF28DFD0CDFBD1FBE311F3F11CA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
Manifest number: 0399
Signing time: Wed 01 Oct 2025 11:00:06 +0000
Manifest this update: Wed 01 Oct 2025 11:00:06 +0000
Manifest next update: Thu 02 Oct 2025 11:00:06 +0000
Files and hashes: 1: 5VNEmgBiicjZNrKcfsWO2AnhgbY.crl (hash: f7Pj+c+jnqPstRNtkxU7c4iqe3+N4rGbOBTCCbtDnfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:6d:f2:8d:fd:0c:df:bd:1f:be:31:1f:3f:11:ca:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e553449a006289c8d936b29c7ec58ed809e181b6
Validity
Not Before: Oct 1 11:00:06 2025 GMT
Not After : Oct 2 11:00:06 2025 GMT
Subject: CN=7ce466bc55e4144d421badfa3ab7d0efb56c2929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:be:59:c9:95:42:05:82:a7:d1:5f:11:05:43:
97:44:86:95:67:bf:c0:69:70:87:0c:03:c8:79:99:
57:4b:7b:2b:eb:58:32:f1:a2:61:e2:f5:2b:1c:f2:
fe:39:45:f1:bf:6c:dc:c3:75:8f:03:b0:64:c0:f9:
55:44:be:72:72:2c:e0:1c:cd:db:79:91:85:b9:10:
7a:02:88:32:ff:db:45:a1:81:62:2c:49:88:df:91:
f0:00:d2:08:4f:4f:c6:89:6f:a9:9c:16:ca:dd:21:
af:4e:9a:fa:e4:bd:50:0b:49:d4:d5:1f:b4:0c:c3:
2d:bc:b5:35:73:36:b3:74:81:83:02:13:52:52:68:
22:f9:da:69:7a:60:4f:5c:27:3d:66:83:1f:dc:4c:
6a:fa:e3:11:0f:07:02:f2:ee:0f:8a:66:1b:cc:3a:
3e:6c:f0:f6:76:51:6a:eb:41:e1:f5:17:df:3c:da:
3f:3b:9c:d7:f2:1d:0d:34:4a:83:1b:5c:e3:af:7d:
df:85:e3:65:c0:9d:61:0b:1f:a4:e9:85:7b:e4:87:
15:b1:70:68:72:5a:a4:fd:b5:57:3b:e2:c7:76:09:
75:04:3e:37:68:ac:5a:57:7f:06:73:5d:cc:ca:70:
bf:11:89:2b:ec:da:4c:2b:9a:83:70:a0:78:1e:cf:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E4:66:BC:55:E4:14:4D:42:1B:AD:FA:3A:B7:D0:EF:B5:6C:29:29
X509v3 Authority Key Identifier:
keyid:E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fa:14:24:42:6b:05:df:b9:65:00:6d:3e:36:19:0f:1f:07:
a3:f0:ad:38:e9:29:4b:80:a0:5c:b7:cf:27:fa:9a:c8:12:1f:
5c:2d:97:73:66:71:9e:6c:ad:6f:89:3c:06:20:29:c0:38:b7:
4a:58:f4:18:77:ec:bb:81:db:9b:f1:6f:21:f5:e4:2c:29:a4:
9a:d8:91:18:d6:59:d1:f2:fa:2a:ae:4d:1c:59:7b:3c:58:76:
e1:5a:39:6b:37:c9:b5:1d:ea:1b:ba:b2:f8:6e:d4:ac:98:26:
02:6f:3d:b3:76:66:af:b7:22:4a:d0:f9:d6:a5:2a:9d:86:d9:
21:1a:1c:33:62:73:25:be:96:dc:37:8e:26:75:5a:c6:04:dd:
cf:05:68:c7:ea:a1:40:18:c0:68:aa:cf:ba:92:84:38:18:cc:
8c:7b:76:9e:90:73:32:b1:41:bc:63:89:7e:27:8a:33:51:28:
ae:94:6c:70:27:a5:e6:b3:db:e5:d6:11:60:1a:9d:fd:f3:5f:
ba:c0:bb:1b:fd:12:e5:2d:c6:23:b1:80:0a:95:ab:2b:e4:c0:
06:4e:2c:ed:53:e8:61:ea:2c:bc:3e:11:31:08:f0:3b:0b:e2:
57:0b:7b:a8:f7:cb:cc:cb:da:f7:b8:7c:bb:f9:3c:26:55:00:
ba:2b:e7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:25 2025 by rpki-client