Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
File: S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json)
Hash identifier: lUjH1wLclve6r+97fjCgXZQc04cowv26yHLh2f7SY2o=
Subject key identifier: AB:7B:03:4A:F0:51:D1:66:53:1F:FD:B2:73:E0:9F:C4:E4:D6:FA:D1
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 019B680D562D78062840D71F02E38E8FCEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
Manifest number: 17AB
Signing time: Mon 29 Dec 2025 03:01:03 +0000
Manifest this update: Mon 29 Dec 2025 03:01:03 +0000
Manifest next update: Tue 30 Dec 2025 03:01:03 +0000
Files and hashes: 1: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: Z0bAAe2jlSzla/EioktLkKfG657G8TxHcZRJIpoa6o4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:68:0d:56:2d:78:06:28:40:d7:1f:02:e3:8e:8f:ce:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Dec 29 03:01:03 2025 GMT
Not After : Dec 30 03:01:03 2025 GMT
Subject: CN=ab7b034af051d166531ffdb273e09fc4e4d6fad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:ae:7a:bf:bc:90:8b:07:a5:55:f8:dc:35:
1c:b7:74:6a:4b:8f:55:5e:c4:66:57:c3:00:c2:16:
74:f5:73:f0:46:0a:8d:31:0a:ea:ce:ae:8e:f0:85:
2e:f4:e1:3e:b8:a5:c5:b1:ba:02:1c:79:80:94:69:
0a:08:63:90:5e:ca:b5:23:55:bf:0a:f2:61:a1:d3:
1b:e2:69:db:ab:eb:3d:95:0c:02:2d:0c:9b:97:ef:
50:1a:8d:f5:2d:bc:20:79:57:81:0b:66:8d:fd:d5:
4c:f6:d2:d4:b2:e2:5d:9b:74:57:d0:5f:a6:cc:2b:
a1:f1:18:fe:99:7a:85:6c:fb:cf:fb:75:8d:be:81:
90:eb:d6:18:3f:3a:b2:5c:86:e0:de:28:5d:97:95:
0a:64:bd:6f:89:12:2c:d6:7d:f2:4e:30:ea:b7:50:
09:74:9a:9c:8b:23:2f:0a:01:c1:0b:46:c2:f2:11:
2b:c1:17:85:31:f9:7a:54:bd:8b:6e:48:35:3e:39:
98:5c:5f:43:54:18:6d:a8:bf:19:33:08:ab:ee:0a:
02:01:1c:c7:66:37:28:b7:26:df:33:06:9e:5d:fe:
8d:02:6d:50:9a:94:e4:7d:ac:b2:6d:98:84:75:10:
52:ee:ae:c2:84:ac:c2:31:12:4e:dd:9b:9e:34:2b:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7B:03:4A:F0:51:D1:66:53:1F:FD:B2:73:E0:9F:C4:E4:D6:FA:D1
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:10:8c:4c:0b:f3:82:38:0e:6a:39:6f:b1:28:40:1c:99:d2:
e2:32:83:13:b4:ee:15:1a:71:4c:49:73:03:5e:93:bb:4d:f5:
b1:3a:20:85:ed:1b:36:95:1c:82:02:d5:28:15:06:a1:69:b9:
13:0f:f9:91:50:dd:7d:55:98:db:87:ae:c7:e6:d3:08:1d:f2:
36:d4:99:e3:0a:b2:f0:88:34:b4:0a:e3:b3:38:91:03:3a:c5:
3e:3f:cd:db:60:0b:08:a4:7b:44:39:a8:38:8b:d2:c7:01:68:
fd:54:d9:48:d3:10:3e:83:d0:b2:3a:2e:42:c5:4d:4e:a4:05:
91:e5:6b:8c:6e:41:f8:63:bd:65:35:9f:c8:2f:2f:6d:86:1b:
51:3e:4d:f5:e6:61:42:ad:18:a3:31:92:1d:f6:71:35:f4:2b:
40:85:77:a6:5d:1e:c7:35:4b:2a:3a:d3:b4:40:13:36:63:46:
42:e0:16:dc:b9:59:89:78:d5:96:45:1d:43:00:08:b8:81:05:
6b:97:7a:d3:d8:39:73:1a:b5:e9:fc:65:ab:1d:2e:0e:04:8d:
a8:f8:76:2d:62:91:80:cd:3b:6e:4b:19:ed:75:50:4e:49:d9:
22:74:00:87:00:af:f0:b2:08:99:1b:d7:21:28:a1:50:f0:58:
c4:52:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:44 2026 by rpki-client