Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
File: iTmr9x7sEMXZBgn8qfNMuF09VE4.mft (raw, json)
Hash identifier: FQJYihVzdsimzC4fsJGYpaVFLeQE6qDNgb1lhobMRAk=
Subject key identifier: 06:A7:A0:E5:F6:42:A1:E9:DB:4C:E8:78:22:0A:37:89:2A:B5:F2:F5
Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Certificate issuer: /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Certificate serial: 019B67D6AC8562FF5DF512F45D60C1AE1417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
Manifest number: 088C
Signing time: Mon 29 Dec 2025 02:01:20 +0000
Manifest this update: Mon 29 Dec 2025 02:01:20 +0000
Manifest next update: Tue 30 Dec 2025 02:01:20 +0000
Files and hashes: 1: iTmr9x7sEMXZBgn8qfNMuF09VE4.crl (hash: Wxds5qpVwSqWemQhpS4rPkqQoo6RjOghWm7Zdn8+NUs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:67:d6:ac:85:62:ff:5d:f5:12:f4:5d:60:c1:ae:14:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Validity
Not Before: Dec 29 02:01:20 2025 GMT
Not After : Dec 30 02:01:20 2025 GMT
Subject: CN=06a7a0e5f642a1e9db4ce878220a37892ab5f2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:14:12:b7:83:e6:f8:48:9d:39:d5:4c:8d:
cd:e1:e5:32:bc:3c:dc:c1:a5:04:49:e0:14:59:e4:
85:02:8f:d4:cb:4c:84:2f:ad:b9:cb:47:a4:65:19:
36:4b:9e:cf:e5:3e:c2:08:29:d2:ca:ba:ee:a1:d1:
44:3d:2c:8c:06:06:42:20:56:e9:fc:fc:bc:91:ce:
af:2b:6c:31:14:5e:f0:ca:b5:62:b4:b3:5e:3c:cc:
04:22:9d:3e:1e:b0:c5:d2:a2:5d:e2:e1:37:7b:9b:
1a:94:1b:93:a5:5e:74:36:26:55:09:ed:bb:90:08:
75:11:02:aa:e2:e6:3c:ee:d6:e9:1c:10:87:2b:81:
0a:2b:b4:1c:91:35:db:24:3e:37:d8:88:18:64:e9:
06:6b:55:74:58:01:df:ec:11:2c:c1:e4:cc:c1:87:
3b:27:96:3c:57:c5:af:84:d9:cc:51:de:b4:fb:4f:
63:15:c3:0f:10:3d:f9:b9:2c:6c:67:87:bb:12:a5:
5d:9a:f2:a9:b6:a8:17:71:46:0e:d8:1d:0e:fc:63:
89:fd:31:b6:81:38:27:cd:18:c2:b3:8b:7d:7d:ee:
59:28:3f:29:f9:6a:27:ca:6a:45:a2:00:fa:db:07:
b3:78:2d:0f:26:f0:d0:6a:02:4d:03:af:96:7e:31:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A7:A0:E5:F6:42:A1:E9:DB:4C:E8:78:22:0A:37:89:2A:B5:F2:F5
X509v3 Authority Key Identifier:
keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:67:a1:3c:3c:91:dc:b4:0d:b4:5a:ab:a7:03:b3:1c:35:fe:
b6:fc:1e:1f:39:76:15:ac:f0:d4:3b:d6:03:31:87:40:41:a1:
e2:00:95:48:b1:1e:8f:0b:21:fc:d2:b8:c7:ca:15:11:9f:20:
ab:76:67:d7:e9:97:0f:b7:b7:cb:a7:e4:2e:c6:01:bb:43:c8:
dc:37:20:3e:f3:db:c1:df:43:fd:dd:50:3a:0d:bf:5d:a8:02:
5a:e6:0a:d2:b2:db:7f:c2:49:9d:46:1e:e2:c7:16:15:6a:78:
95:dc:44:44:53:08:5b:6e:a9:18:3c:89:64:eb:b2:f6:3a:c2:
6d:82:31:cc:7c:f4:bc:db:b5:bc:f2:54:9b:0b:a2:e2:78:ff:
90:06:08:63:73:fb:42:96:4d:1b:f7:7c:a9:25:0d:7c:05:96:
24:f8:b2:ad:e5:12:f7:15:c1:60:51:52:18:9c:43:64:d0:2c:
7e:11:b0:0e:10:4d:ec:9d:0b:3b:64:39:d0:6b:cd:da:4b:90:
89:c4:1b:e2:bf:ea:9b:ed:92:c5:4b:c2:01:cf:56:81:b0:73:
a2:71:bc:f2:78:8b:1c:49:83:74:44:9a:de:20:3a:36:3c:c5:
db:cb:34:2d:69:ac:45:5b:19:f5:66:80:41:27:51:9f:31:da:
9d:47:4d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:23 2026 by rpki-client