Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
File: K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft (raw, json)
Hash identifier: gHGCkRg8FR4lC4o116xwaw1kgOsL7udZh1jQ4X6i6YE=
Subject key identifier: 0E:81:3E:A1:10:B1:0D:64:37:BE:13:BE:0A:3B:70:FF:70:9D:08:77
Authority key identifier: 2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
Certificate issuer: /CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Certificate serial: 019B462673BAB9CCA0F6314119C377DF4160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
Manifest number: 08A6
Signing time: Mon 22 Dec 2025 13:01:23 +0000
Manifest this update: Mon 22 Dec 2025 13:01:23 +0000
Manifest next update: Tue 23 Dec 2025 13:01:23 +0000
Files and hashes: 1: K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl (hash: 2dK2IeCcSaxtKfC5FUKIWuzPkXSQKASOvUTvChxBrj0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:46:26:73:ba:b9:cc:a0:f6:31:41:19:c3:77:df:41:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Validity
Not Before: Dec 22 13:01:23 2025 GMT
Not After : Dec 23 13:01:23 2025 GMT
Subject: CN=0e813ea110b10d6437be13be0a3b70ff709d0877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:39:ca:c5:61:01:66:1c:51:f0:f4:8d:77:
03:2e:3b:51:65:2f:a1:77:df:20:08:9c:7f:9d:a5:
48:be:e3:75:52:b8:65:07:a0:6f:35:c8:6e:41:b6:
65:00:e8:ad:e0:3b:06:40:c9:c7:3d:db:6c:7c:4f:
28:45:b1:93:05:b3:fb:29:9e:ce:aa:1a:12:6d:d5:
f6:07:d5:9a:3a:df:ff:44:c7:c3:dd:08:f9:d4:d7:
17:81:f7:a4:ee:b5:94:eb:75:6a:2a:8a:3b:6c:0e:
df:fe:1f:d3:01:29:75:3e:9f:69:bd:79:90:f9:95:
a0:6b:ff:34:71:ab:07:37:3b:6a:10:80:ec:42:49:
75:28:06:b0:df:7f:5e:c5:1b:02:ef:3d:3f:e1:8b:
70:bd:85:1b:59:b6:0b:21:e2:0b:d6:5f:53:83:4e:
ae:01:52:7d:9c:5a:33:be:b3:cf:88:64:cc:3c:40:
4c:65:ae:d2:c5:eb:a8:b7:07:81:2f:90:43:e7:02:
a2:35:66:ce:a4:eb:af:aa:25:19:c8:4b:e2:a1:a0:
fd:67:3a:4c:95:d6:db:dd:58:9c:de:4b:91:1e:d5:
9f:50:10:3d:06:d2:7c:e4:cc:d7:2e:e6:89:f8:0a:
0d:1a:47:94:db:f9:54:15:e1:c2:72:25:63:46:9d:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:81:3E:A1:10:B1:0D:64:37:BE:13:BE:0A:3B:70:FF:70:9D:08:77
X509v3 Authority Key Identifier:
keyid:2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d6:d1:7d:ea:21:7c:d8:86:c0:8d:bc:f2:22:a5:52:8c:a1:
ba:41:6a:1a:10:05:ff:ed:c3:d7:f7:eb:b4:d6:79:ea:13:21:
82:70:88:2f:73:c5:0c:13:af:9d:ac:bc:23:c9:13:04:4b:20:
ff:ac:cc:a3:c0:81:05:db:8d:3c:12:04:3e:d8:e6:43:37:f7:
70:a7:64:7a:8a:e8:00:8b:aa:1c:3d:12:f6:cc:14:cf:74:67:
52:31:61:38:7d:a8:77:d8:3a:04:2c:a9:66:49:6b:da:9b:c7:
98:55:d7:7a:83:25:e9:2a:58:1c:03:6c:3d:c1:55:44:8d:77:
e7:91:7b:12:48:e9:ea:c4:97:c4:a7:cd:b5:a2:c2:6d:2c:0d:
ad:ad:d1:b2:21:93:83:21:a9:1e:6e:5b:f3:c5:85:c8:54:f0:
2e:c6:f7:9a:f1:80:89:db:73:08:27:3c:00:57:36:6a:3e:3c:
c2:9f:06:56:d4:b9:b1:cf:e2:30:61:25:5b:55:28:9e:75:fa:
d4:03:2b:39:88:bc:82:b0:71:bf:a3:f0:cc:88:e0:a4:41:96:
c0:6e:2c:ba:c2:45:5b:b5:31:3e:c6:71:9a:da:93:06:11:32:
1c:ca:a7:92:cf:37:14:5a:72:34:84:3e:3f:be:dc:70:f9:c0:
98:69:99:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:11 2026 by rpki-client