Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier: /tiZDq5G/5sOxiBe/TFm15jgGzl+O/tjHLafxSt/rTA=
Subject key identifier: F0:DB:9F:58:B0:12:FF:20:B7:76:D4:85:B1:E4:32:8B:2D:23:D6:62
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial: 019F236A3B0FF7BFFD89D5F1B1210D264160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number: 1153
Signing time: Thu 02 Jul 2026 15:19:52 +0000
Manifest this update: Thu 02 Jul 2026 15:19:52 +0000
Manifest next update: Fri 03 Jul 2026 15:19:52 +0000
Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: 0W8OO6l+0t3xlwlbinqv/cdD0SQpRO99+sGw3yrOpus=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:3b:0f:f7:bf:fd:89:d5:f1:b1:21:0d:26:41:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Validity
Not Before: Jul 2 15:19:52 2026 GMT
Not After : Jul 3 15:19:52 2026 GMT
Subject: CN=f0db9f58b012ff20b776d485b1e4328b2d23d662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:63:12:c0:0c:22:7f:2a:a5:8c:f6:9a:d0:7d:
e5:97:cd:90:f6:7b:dd:03:58:bd:d9:df:d0:8d:14:
6e:61:a1:0c:1e:95:1e:bc:88:29:a6:64:73:3b:4e:
fd:8c:00:a4:c9:fe:98:22:71:93:e5:cc:86:f6:d9:
16:aa:cb:ff:17:51:42:24:87:b8:68:29:8b:ec:66:
ab:9d:fb:01:9e:ab:4d:18:11:43:7d:9e:a4:03:7c:
64:5d:35:19:f7:2d:85:93:b7:1a:64:9e:c6:3c:a4:
6e:b3:2c:be:d0:66:99:7f:e8:da:37:45:a8:68:5e:
75:47:ad:25:5a:a3:9d:a8:ce:ef:e5:ef:4f:0c:72:
ae:82:62:fd:8e:27:58:d2:68:e6:6b:c3:2e:22:8e:
74:2d:b1:75:ef:ab:78:f8:dd:34:c9:68:0f:bb:17:
eb:d1:16:5f:c0:cb:7f:45:4d:42:e3:97:35:ae:48:
9e:79:f0:10:26:f7:06:86:b5:fc:59:79:40:ac:cd:
dc:ca:f4:17:a1:62:ad:44:58:8c:1f:08:40:f5:76:
59:20:fd:cf:f4:c5:8a:c8:1b:01:94:23:47:dd:7b:
36:ca:f0:47:cd:f6:f1:bb:fa:68:18:9b:67:2a:85:
c6:13:2c:58:e1:30:d8:69:3b:32:a7:28:9a:30:1b:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DB:9F:58:B0:12:FF:20:B7:76:D4:85:B1:E4:32:8B:2D:23:D6:62
X509v3 Authority Key Identifier:
keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0c:c3:00:bd:53:36:81:c7:67:fe:4a:07:2a:04:55:3b:95:
f7:cb:9e:61:03:2b:52:18:d1:83:d7:a4:c4:6e:53:8e:61:fa:
3c:45:99:21:29:02:ae:eb:f9:b3:0b:5b:49:17:40:c4:77:f1:
d3:f6:b2:03:80:48:97:8b:22:6b:86:08:0c:0c:09:42:8a:aa:
35:22:19:aa:8a:02:82:84:cb:78:9c:52:36:84:1e:61:d0:25:
a4:96:13:03:66:8a:b1:f3:55:81:6a:37:b0:48:ec:cf:09:0e:
ac:de:87:21:cd:23:cb:d1:5c:4c:ae:7c:c6:01:0c:6b:67:c2:
1a:bc:ef:24:c1:dd:11:d2:ca:46:d7:69:3c:6a:38:87:a5:45:
11:fa:1c:d6:88:09:a8:c7:0d:4e:10:12:2e:63:25:d8:c3:08:
05:e9:1b:08:68:47:b1:5e:3d:35:74:17:a0:91:1c:53:f5:43:
d4:0f:c0:02:3e:ed:5c:e6:ec:5c:5b:2b:f9:e4:4b:75:2f:b7:
82:1d:9b:84:04:c6:bf:eb:3f:1b:1e:a1:f9:c7:ee:19:6c:ed:
52:33:cd:16:5d:26:5c:f1:9f:5a:db:b1:6a:90:44:39:31:ce:
2c:85:60:9a:f1:5b:bb:45:08:83:c7:41:4c:e3:eb:f3:36:11:
0e:57:50:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:24 2026 by rpki-client