Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
File: WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft (raw, json)
Hash identifier: HuAoNGDaa+ltISVrBpYQhRGNBIYis+x4V7l8MtWW70s=
Subject key identifier: D4:68:C7:2E:76:2B:22:65:E7:99:90:A3:09:D4:F6:EB:B1:1C:65:8A
Authority key identifier: 59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3
Certificate issuer: /CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
Certificate serial: 019A39B6E82B8D8D8B9B73DB171A1240F335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
Manifest number: 1552
Signing time: Fri 31 Oct 2025 10:01:19 +0000
Manifest this update: Fri 31 Oct 2025 10:01:19 +0000
Manifest next update: Sat 01 Nov 2025 10:01:19 +0000
Files and hashes: 1: WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl (hash: X4xP22l02odrTD/UqB+cZFSCRdngEUicD1pzosZYn2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:b6:e8:2b:8d:8d:8b:9b:73:db:17:1a:12:40:f3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
Validity
Not Before: Oct 31 10:01:19 2025 GMT
Not After : Nov 1 10:01:19 2025 GMT
Subject: CN=d468c72e762b2265e79990a309d4f6ebb11c658a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:7d:4d:77:fc:28:80:09:14:ce:4f:5e:11:
ef:85:6b:7c:e8:88:6a:bd:2d:a7:25:08:e2:61:ee:
f2:b4:43:09:85:05:f7:5e:09:91:e9:d5:dd:77:ac:
8e:f3:24:bc:d7:6f:a6:6f:8f:50:78:0a:09:89:90:
53:60:5b:f3:94:76:65:de:a7:ee:26:d5:fb:6a:23:
90:59:93:64:78:cc:81:53:fb:00:22:a8:c6:c9:8f:
27:4e:ed:cf:16:d6:90:49:74:92:68:de:6c:17:ec:
1a:56:a0:f5:18:9d:08:b4:a3:b5:41:2f:2e:cd:06:
56:f1:ee:32:fe:e0:8e:03:39:ba:11:cc:a3:69:80:
59:47:da:9c:ad:e9:e3:d2:f9:11:80:88:3d:59:7d:
79:b9:ad:9b:eb:67:7b:f9:a8:b6:a0:9f:d9:38:31:
5f:66:91:51:b4:3e:c7:a2:8e:f7:30:6d:11:7e:75:
dd:b7:f2:89:86:71:33:1a:c3:46:c7:07:07:5a:4c:
c9:40:55:77:af:2f:9f:b9:23:b2:b5:51:62:8b:fd:
db:84:cb:bc:b4:c5:85:15:9b:a3:92:fc:d5:2c:6f:
82:62:44:2c:49:2b:06:60:c5:19:0c:87:08:c7:cd:
16:6b:5a:14:d4:d0:11:e3:84:4b:b7:48:81:91:7c:
94:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:68:C7:2E:76:2B:22:65:E7:99:90:A3:09:D4:F6:EB:B1:1C:65:8A
X509v3 Authority Key Identifier:
keyid:59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2d:9a:4f:ef:40:3a:db:5d:bb:a4:e2:20:85:31:b9:44:2e:
38:4b:fd:f8:68:94:42:95:f8:8a:24:18:1b:4d:60:6c:0f:bf:
26:2f:56:39:61:f8:57:ce:00:e5:44:97:92:15:55:66:2d:8c:
c9:f8:ec:9e:7e:ae:a5:02:b6:bb:97:9b:56:aa:58:fc:1e:16:
37:33:2f:16:b5:40:32:62:a0:92:72:55:ee:a9:d6:77:db:38:
c3:9e:c6:c8:15:8c:59:66:cf:94:01:bb:bb:25:db:1e:18:e2:
14:6d:20:80:55:33:63:65:f8:5e:db:44:bd:1f:13:57:65:f8:
5c:88:e7:f4:34:b1:fa:c8:fc:0b:37:ec:13:f8:12:49:44:2e:
e9:a9:09:3e:f3:9e:c4:bd:3a:5b:a2:f8:71:9f:7f:bf:bb:dc:
16:ab:ad:8e:ec:cc:1a:cd:f9:eb:9a:10:33:fe:a7:b5:4f:ea:
1c:48:e8:01:4c:7d:22:9a:46:8b:9e:b9:f4:2b:e8:74:0f:ab:
c1:35:c9:b1:85:85:b9:5e:51:67:1b:76:54:66:39:85:d3:fd:
7d:67:35:ca:d5:81:f6:8f:e6:ad:a6:8b:90:c8:51:19:a8:ba:
86:59:c6:d5:96:fb:06:36:c7:82:67:6b:ca:66:3b:3f:a1:aa:
0b:6b:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:01 2025 by rpki-client