Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
File: 04m0GNo0qjk07N4rcx3x1O1-yA4.mft (raw, json)
Hash identifier: 7ER60mvRGwAdwdqvt2TkOb+d7GmSb9UtnfE9sJSq78A=
Subject key identifier: A8:41:4F:97:37:F3:36:09:89:BE:7B:AF:46:E9:81:24:D3:29:E4:EA
Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
Certificate issuer: /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Certificate serial: 019B4994F9501EF16C12AEBD91A3276CEF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
Manifest number: 14A1
Signing time: Tue 23 Dec 2025 05:00:58 +0000
Manifest this update: Tue 23 Dec 2025 05:00:58 +0000
Manifest next update: Wed 24 Dec 2025 05:00:58 +0000
Files and hashes: 1: 04m0GNo0qjk07N4rcx3x1O1-yA4.crl (hash: fL9gtMwz3f2DXFuAx5QBJwrlaBkDAwzDb9L5lhwfgQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:49:94:f9:50:1e:f1:6c:12:ae:bd:91:a3:27:6c:ef:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Validity
Not Before: Dec 23 05:00:58 2025 GMT
Not After : Dec 24 05:00:58 2025 GMT
Subject: CN=a8414f9737f3360989be7baf46e98124d329e4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:65:13:85:5a:9e:48:0c:86:80:f8:9b:ab:49:
a7:74:b3:9f:0f:49:bc:a3:2e:ba:c2:b7:9c:a4:8f:
83:bd:5e:40:0c:6c:69:3c:b8:35:47:18:46:9b:30:
2c:0c:6f:a4:7d:26:eb:92:33:5f:a7:0a:16:7b:14:
0f:06:bc:1e:fe:1c:c6:42:a1:15:dd:31:5b:0f:ee:
fb:a4:6d:3a:22:b7:f2:89:8f:e3:00:5b:3c:34:0e:
b6:ba:a9:77:f1:78:12:20:7f:ea:a4:45:a9:b7:e3:
3d:2c:aa:da:2b:c0:8b:dd:a9:f5:d7:ea:32:6f:46:
e0:f3:ec:7b:83:14:19:b6:b0:6b:ca:cc:2e:25:94:
46:eb:8b:44:69:34:a5:4f:28:16:9a:a4:5f:c8:6f:
b8:fe:77:ba:07:c1:a6:bf:d1:a5:1b:3c:bd:ef:8b:
b3:9e:ac:ec:02:52:5f:26:e6:37:46:34:ee:4c:cb:
e4:72:f3:f0:da:e2:52:58:88:3c:42:98:a2:e8:31:
11:af:d5:e1:a6:51:b7:30:9e:21:f8:60:8d:92:5b:
30:cb:fb:a5:41:b4:81:67:a1:aa:94:82:65:53:1d:
be:ee:7f:e9:27:d4:a7:28:86:8e:a4:fb:43:03:b5:
ae:23:f0:11:db:17:58:17:fb:fc:76:e5:dc:55:09:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:41:4F:97:37:F3:36:09:89:BE:7B:AF:46:E9:81:24:D3:29:E4:EA
X509v3 Authority Key Identifier:
keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1c:1f:50:f1:23:de:55:82:3c:5d:f8:11:c7:cc:69:eb:a9:
30:b7:66:f7:4e:4d:6a:38:e3:13:66:08:94:c8:29:e6:ce:30:
dc:68:76:14:e7:94:8b:82:98:16:40:f0:a8:c5:62:69:50:a7:
27:df:46:c2:b1:cb:55:4c:d4:ae:9b:b2:03:46:00:6d:e2:8c:
88:0e:65:21:15:c1:45:7d:c1:fb:8c:35:ec:79:b1:c6:3e:67:
a1:0e:0d:c6:ab:1f:49:f0:4d:13:58:50:3c:52:dd:1c:39:d0:
4d:3c:b5:cc:bb:cb:b1:2b:ec:7d:71:35:69:56:07:1c:b4:8f:
33:9e:34:86:16:38:91:b0:88:a0:04:df:72:24:aa:a1:f7:73:
b0:a2:b5:d9:11:39:d2:79:ea:71:d7:88:86:57:c9:f7:89:1f:
b2:db:c1:cd:38:f4:8c:0e:e9:5d:d0:61:cd:33:55:4f:6b:85:
17:42:77:43:3e:45:16:cf:24:a1:5b:27:78:5d:c7:f5:ec:67:
7d:cf:ac:00:9f:e9:10:4b:4b:5e:1e:f5:eb:c2:b6:51:27:9f:
77:a1:da:01:d5:80:88:fb:c6:92:2d:35:1a:73:d3:e5:b2:50:
e8:89:de:3f:ca:2f:ac:37:0d:fa:ce:24:1c:35:28:b6:b1:f0:
11:66:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:51 2026 by rpki-client