Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
File: HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft (raw, json)
Hash identifier: hIK6pmr3MqIw6pGJdRMovNkKnFQdDrYAjYpy5+E2d7M=
Subject key identifier: 90:99:E6:FE:41:DB:0C:51:58:23:7C:C5:04:C0:B5:19:D9:8E:79:39
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Certificate issuer: /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial: 019B741158B30764F1D47D8C6262571A1AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
Manifest number: 0F37
Signing time: Wed 31 Dec 2025 11:00:52 +0000
Manifest this update: Wed 31 Dec 2025 11:00:52 +0000
Manifest next update: Thu 01 Jan 2026 11:00:52 +0000
Files and hashes: 1: HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl (hash: kGOwsVdtP//TL9Tday5Ug3gLFJK+B71Z4jMw3wnapQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:74:11:58:b3:07:64:f1:d4:7d:8c:62:62:57:1a:1a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Validity
Not Before: Dec 31 11:00:52 2025 GMT
Not After : Jan 1 11:00:52 2026 GMT
Subject: CN=9099e6fe41db0c5158237cc504c0b519d98e7939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:1f:f2:f5:cf:9a:83:78:77:19:eb:ff:c8:
68:4f:e7:b1:c5:fc:c1:fa:00:65:77:14:08:ac:a7:
4e:61:df:11:5b:61:9e:a6:ef:bb:6c:79:d4:57:d7:
12:ec:57:41:86:e4:c8:e7:e2:0b:32:a9:a8:6d:bd:
b8:94:1b:83:5c:58:d4:d8:f6:dd:d3:f6:5b:82:ff:
13:a4:a9:19:ec:97:3a:10:9f:48:ff:8e:4a:39:5f:
a3:2a:cb:14:1b:e1:e9:3d:7e:3d:eb:72:ff:fb:e5:
c9:51:76:98:2b:5a:86:59:3c:4f:df:b6:99:f2:61:
aa:87:3b:d6:97:24:d6:9b:fb:10:e8:2a:e0:0c:48:
80:90:2a:df:aa:75:78:dd:df:51:ed:34:2c:68:5e:
1b:3a:dc:91:01:22:e3:0b:1a:b1:79:58:d3:22:3c:
2a:c9:f7:ec:06:a0:09:f4:fa:bc:52:8c:55:be:08:
ae:16:02:23:a9:13:5f:2d:43:81:96:76:70:88:87:
1b:df:0d:51:d8:63:ef:51:b0:80:57:a2:a1:c6:e8:
7f:c5:a0:35:51:7c:da:96:90:23:06:10:d6:da:58:
c3:93:6a:b1:ae:c6:82:cb:63:a6:12:08:9f:8b:bc:
cb:40:5d:43:b8:bc:d7:be:43:78:b6:dc:5e:f8:fd:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:99:E6:FE:41:DB:0C:51:58:23:7C:C5:04:C0:B5:19:D9:8E:79:39
X509v3 Authority Key Identifier:
keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:55:f0:36:de:dc:84:ba:be:71:e8:c2:df:8b:8b:0f:c5:5d:
77:4d:4f:f9:c6:63:42:26:a5:bc:8e:ba:ee:94:a6:b6:65:d3:
2f:e1:28:f2:83:d5:ec:6e:09:43:b7:5e:de:bf:1a:61:13:fa:
db:34:8e:50:fa:4a:99:e2:0e:00:74:c1:62:bf:45:c8:d2:b7:
e1:77:b9:92:5f:ee:27:86:f2:a1:0e:f4:ca:ce:25:db:5b:1a:
1d:71:5a:d7:d9:a2:c7:46:89:a5:fb:6a:c5:54:40:a9:2e:e0:
db:75:54:77:2f:98:2b:2a:26:0b:a9:ca:cb:0e:c2:17:fb:b0:
9a:f5:4d:de:55:f9:55:67:cd:4b:8e:a3:21:a4:eb:9a:6b:61:
d0:b9:14:9c:7a:e3:9f:a9:68:5a:15:52:84:81:d5:f8:3b:78:
d1:b5:3e:5d:f0:ab:6b:48:4a:1b:3c:3d:6c:5d:b9:ab:1a:bc:
ae:76:36:6d:97:4e:d8:40:b8:c5:19:9c:f6:3d:2f:4d:dc:63:
56:55:c6:2c:c0:e3:db:ab:6e:63:7f:7a:b6:70:f8:91:44:29:
1d:9a:dc:e1:ea:14:6c:fa:99:bb:de:d7:12:0c:9a:5f:f6:a8:
bc:c6:b5:e7:f0:ad:8a:f3:d5:f2:91:37:63:a3:f4:4a:9b:fa:
43:a5:04:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:59 2026 by rpki-client