Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
File: MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft (raw, json)
Hash identifier: I28XevdY2c+edefgOl/kci1epctIY60ZFpa2jtoVpZo=
Subject key identifier: 2D:F5:DF:D2:DA:12:B6:2A:BA:D4:8E:30:F3:41:FC:D2:93:01:2D:E1
Authority key identifier: 33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
Certificate issuer: /CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Certificate serial: 0199E750EDAC950608AAACE057ED254BD057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
Manifest number: 16DB
Signing time: Wed 15 Oct 2025 10:01:04 +0000
Manifest this update: Wed 15 Oct 2025 10:01:04 +0000
Manifest next update: Thu 16 Oct 2025 10:01:04 +0000
Files and hashes: 1: MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl (hash: MQuy2NOpjMo5eWeD5NTAGBJgyUslYlG30gpSY/Vlje0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:50:ed:ac:95:06:08:aa:ac:e0:57:ed:25:4b:d0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Validity
Not Before: Oct 15 10:01:04 2025 GMT
Not After : Oct 16 10:01:04 2025 GMT
Subject: CN=2df5dfd2da12b62abad48e30f341fcd293012de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:63:02:81:9b:6c:23:1f:51:f4:d3:6a:f9:
e9:6f:c8:13:b6:03:13:b8:ab:c0:a0:23:6f:98:e5:
6d:e5:52:9e:18:ec:a6:9c:17:4d:e1:cc:e0:1d:77:
5f:af:91:2a:42:f4:47:90:54:fc:07:47:c5:21:13:
d8:3f:0d:56:ef:e1:57:d1:99:6c:06:3e:58:96:c9:
e7:1f:b8:26:57:60:ac:8a:f3:1b:9c:45:a1:74:8a:
1c:7d:92:96:21:1e:ea:50:d6:86:7d:d8:cb:91:a5:
fd:08:9c:0a:c5:0e:50:8c:d7:77:bc:f8:ba:61:8d:
8f:59:2a:85:6d:b5:b1:91:fa:76:56:51:36:48:af:
13:82:3a:2b:44:62:9b:ce:45:9d:4a:07:82:40:03:
09:86:09:ce:5d:11:ef:f9:ed:a3:2e:34:14:32:4c:
ba:4e:fd:5a:2d:f3:59:32:da:a6:93:bf:d0:5a:30:
9c:be:df:df:87:d8:02:62:1d:a6:47:34:2f:8a:0f:
d3:67:86:67:7a:98:8a:77:3a:4a:45:e5:b1:ee:2b:
47:f5:87:bd:13:72:00:eb:4f:b7:ac:f8:f8:db:39:
a4:fa:ca:9e:48:40:6c:b0:ae:cc:31:cf:31:66:c3:
fb:eb:d0:6a:42:66:1e:bf:2e:95:62:c9:0e:ad:bc:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F5:DF:D2:DA:12:B6:2A:BA:D4:8E:30:F3:41:FC:D2:93:01:2D:E1
X509v3 Authority Key Identifier:
keyid:33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f3:d3:dc:7e:98:91:69:27:77:39:26:69:ca:99:f4:c7:16:
78:58:ed:dd:92:17:1c:09:f1:18:07:cb:07:a5:10:de:28:85:
32:61:31:cb:23:9b:0c:5a:bd:e8:a0:7d:1d:f6:1e:43:03:fb:
9e:41:9a:60:3d:f4:d0:6f:4e:ee:21:7a:c1:bc:59:48:b8:8a:
5d:1e:3d:ed:08:1b:fc:f3:4e:dd:27:94:96:7b:b1:2a:be:c0:
e7:5f:44:cd:9d:88:61:8b:40:88:5c:b5:75:f5:77:6f:5c:b0:
0d:5c:c8:d2:17:11:b9:1f:5f:f1:75:16:56:a9:98:ab:82:44:
f1:71:78:1c:0c:bb:d2:85:d6:48:de:ad:0f:27:d8:4f:28:57:
82:1d:f3:be:dd:83:5d:71:02:0b:a1:c3:4f:a5:77:e8:98:f0:
4c:60:28:f5:5a:20:e6:10:87:9f:97:4c:34:cc:18:40:95:4b:
f6:70:d5:22:39:3a:48:f3:19:bd:da:ad:f5:02:28:91:84:d4:
3a:6c:85:23:b0:c5:b3:a4:2d:4e:d4:5e:b0:38:ea:5c:18:0b:
98:af:43:8b:86:ae:e9:4d:b0:ea:54:2a:ee:fa:48:c5:bf:0e:
79:85:77:6c:02:04:7d:0d:c6:23:ed:03:b6:26:60:d2:51:8c:
b0:5c:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:06 2025 by rpki-client