Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
File: MCaAamuNrGjCoytlhJIpUk_DPac.mft (raw, json)
Hash identifier: 9y6Jdf0nEmt0Ms+SwD9PHNyVmRndFXj/M3Y2HHqb45Y=
Subject key identifier: FE:4F:0B:2F:04:52:DC:5B:91:50:D6:3D:D5:E3:23:93:5F:2A:FD:A6
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 019A09DC465177F38FAC2DE699AB11BE138C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
Manifest number: 0EB0
Signing time: Wed 22 Oct 2025 03:00:22 +0000
Manifest this update: Wed 22 Oct 2025 03:00:22 +0000
Manifest next update: Thu 23 Oct 2025 03:00:22 +0000
Files and hashes: 1: MCaAamuNrGjCoytlhJIpUk_DPac.crl (hash: kCD59K9nyW4b0NQYlDNbsJBoU9okqtx/yZwzGFlnsIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:46:51:77:f3:8f:ac:2d:e6:99:ab:11:be:13:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Oct 22 03:00:22 2025 GMT
Not After : Oct 23 03:00:22 2025 GMT
Subject: CN=fe4f0b2f0452dc5b9150d63dd5e323935f2afda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a2:7c:ec:99:a3:47:44:10:56:1e:9d:a9:ce:
c0:35:cb:5a:27:6e:83:23:aa:60:86:68:12:d2:a3:
21:89:3d:6f:cf:58:7c:49:3f:a0:cc:5c:be:13:b2:
93:1a:a7:3e:42:76:67:9f:52:76:14:1c:2e:49:6f:
ba:0c:92:39:5f:4f:49:f1:9a:88:37:aa:95:01:c6:
d5:10:56:57:40:98:d2:d9:89:63:94:8f:76:10:ed:
b1:ff:a9:dd:45:69:bd:ab:88:af:29:c9:09:78:88:
22:f8:b5:9b:11:87:50:77:fa:80:30:71:03:1b:4e:
c3:f0:1f:f3:89:8a:b0:bf:f3:a1:18:9e:ab:7a:f1:
d2:27:6f:86:27:c8:56:61:d3:f9:46:97:48:c7:4f:
57:41:35:48:ba:95:f5:c6:6f:f1:bd:a8:0e:4a:ae:
9a:61:dd:04:5f:9d:f1:04:c1:74:7b:54:c3:fb:e5:
d3:80:10:19:cb:6a:55:68:98:72:e9:14:87:8d:9c:
b4:c0:28:b1:4c:02:c1:92:11:39:c2:13:bb:12:ce:
5c:d8:d5:42:ea:ec:d7:32:46:5f:d7:c2:d9:66:77:
d0:05:11:8e:82:4c:74:9b:45:1b:9a:8c:06:7d:6d:
5c:a1:3e:89:10:fe:f2:17:f1:38:92:26:a9:37:19:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:0B:2F:04:52:DC:5B:91:50:D6:3D:D5:E3:23:93:5F:2A:FD:A6
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c2:cc:3b:39:3f:b1:74:b1:a6:b0:35:4b:5a:ac:b0:86:86:
79:6e:6a:74:57:f6:57:a0:fb:bf:dd:3c:93:2b:d3:7e:99:48:
15:54:47:36:14:4b:2e:7a:53:a8:da:26:92:2f:8b:ce:b8:e8:
df:56:db:69:f8:1d:07:2b:0c:aa:46:02:94:4c:36:39:47:b7:
99:d4:35:96:f6:d4:9f:a5:a9:cc:af:e2:22:5a:0e:9e:2f:37:
f0:0d:e2:21:1f:e8:cd:7c:19:3e:10:9b:23:d9:bf:a2:79:8e:
58:7c:fb:11:df:fe:ea:17:98:72:88:42:b6:4b:3b:30:16:3a:
b4:33:d4:47:ed:02:9b:ab:b2:7e:3c:6d:0e:b7:c7:c5:87:d3:
d8:ce:6c:fb:70:6d:90:f9:4f:fb:a8:f1:47:12:e7:04:22:ff:
19:65:ed:6c:93:d1:a4:dd:ff:f5:87:61:f3:54:fe:5c:48:ee:
5b:c7:cc:d3:45:b3:df:3d:8f:41:ed:6d:ed:39:92:b8:1e:da:
c5:0a:df:4c:8c:26:b9:8c:7b:cc:34:40:20:a5:94:4a:76:ee:
8b:4e:8e:aa:20:b5:27:49:0c:ed:5a:bf:8c:a4:c0:f5:72:82:
bd:f0:97:bb:a5:91:73:5c:36:00:dd:3e:98:16:08:ef:b9:5c:
fd:9a:5f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:07 2025 by rpki-client