Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
File: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft (raw, json)
Hash identifier: dy/6U/xzir8lYPh0HmyjbtTg/aREGiqSHouRRnkz5No=
Subject key identifier: F5:65:9E:A8:19:19:D8:A7:C9:F4:D4:92:25:27:4D:D9:35:86:25:B2
Authority key identifier: AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
Certificate issuer: /CN=af1bc3295ac305f85960e0401b00f487a94ab394
Certificate serial: 0197628367F3446A618813359896AA0523FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
Manifest number: 11A4
Signing time: Thu 12 Jun 2025 05:01:08 +0000
Manifest this update: Thu 12 Jun 2025 05:01:08 +0000
Manifest next update: Fri 13 Jun 2025 05:01:08 +0000
Files and hashes: 1: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl (hash: 3Ti4USuIyh6i8okW6OpDI3uHsR2VBUf0OkuA0mAE7+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:83:67:f3:44:6a:61:88:13:35:98:96:aa:05:23:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1bc3295ac305f85960e0401b00f487a94ab394
Validity
Not Before: Jun 12 05:01:08 2025 GMT
Not After : Jun 13 05:01:08 2025 GMT
Subject: CN=f5659ea81919d8a7c9f4d49225274dd9358625b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:60:44:89:ab:09:59:34:5c:cc:c8:d7:d6:
c9:52:b7:7b:5a:34:65:19:f7:f7:e5:23:ce:df:20:
8e:d8:fa:dd:98:1c:b2:7c:b6:10:d0:c6:7e:8f:3f:
53:2c:33:bd:c0:38:12:c8:ee:4f:2c:78:ff:4d:0f:
34:e9:e9:e9:28:cb:64:40:7b:5f:07:e3:ee:c8:31:
ef:21:d8:7d:9c:eb:9f:25:02:23:d7:f5:e1:5a:2d:
3e:b4:a3:8b:07:24:9e:99:3d:b8:6e:79:46:74:1e:
6e:54:2d:9c:40:ed:30:05:4e:50:45:59:05:fd:ad:
77:50:b9:83:f4:8f:24:f2:7b:19:fe:dc:fa:ab:8f:
5b:ab:eb:9d:24:8b:a7:72:c2:8d:33:da:6f:1b:d5:
db:83:69:31:cf:65:5b:29:9b:97:31:b8:b3:7b:a6:
3c:2c:64:70:a3:91:a2:df:f0:5b:79:28:c3:90:6d:
66:00:fe:5a:74:43:9c:dd:b3:2d:e8:fe:c0:f1:11:
20:38:cd:0c:84:23:a4:7b:3f:c0:86:18:b6:f9:11:
62:82:28:44:86:81:9f:70:b7:ee:32:bf:31:af:ad:
51:a4:d2:8b:cb:bb:cb:12:bb:57:55:40:2b:63:1e:
1a:7e:6f:3c:27:f2:ca:93:e2:7f:8e:fc:f0:df:81:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:65:9E:A8:19:19:D8:A7:C9:F4:D4:92:25:27:4D:D9:35:86:25:B2
X509v3 Authority Key Identifier:
keyid:AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:93:4f:55:39:73:13:ae:df:41:32:66:f8:13:b5:ff:51:6f:
dc:5d:58:a0:a9:e5:70:68:8b:7f:dc:5b:80:32:19:94:e3:d2:
63:ed:5a:49:b7:9c:36:75:d9:64:4a:9f:8e:21:a4:0b:5d:e6:
0a:32:2b:62:61:1c:bc:1b:92:7d:dc:f3:24:6f:8c:b1:b7:57:
6a:8b:f3:6f:0d:48:70:18:19:01:d9:b4:94:be:46:09:82:6d:
7f:07:34:c2:a1:ca:68:c6:e6:28:6f:94:df:af:6e:ef:22:74:
bb:83:c2:54:8c:eb:f3:de:5b:92:93:11:cb:1a:54:3c:e8:85:
28:54:31:1d:65:d6:1f:96:77:8d:4d:1b:6d:c4:62:f9:08:6b:
fa:fe:8c:69:09:ac:51:d0:0f:d6:38:a8:9e:cf:c4:25:b6:20:
a0:08:ed:b7:15:5e:2e:11:84:fe:1f:2e:b5:9e:4e:21:5f:31:
e0:e5:cd:d2:bc:3d:47:6f:40:8a:0c:4b:37:e3:cd:1a:cf:03:
82:59:af:98:17:ee:ec:54:7f:0c:be:69:37:8a:e6:2f:26:e9:
de:0b:0a:85:48:20:0f:86:30:fb:4c:1b:44:87:28:b5:e0:90:
8e:bd:e9:af:42:c1:c3:c5:ba:5d:55:9f:0e:4e:f9:6c:e4:ac:
38:86:59:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:14:11 2025 by rpki-client