Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
File: C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json)
Hash identifier: eEhTJzGwCqdZ6312IalSMi+2KgVTFBLsLZTbprl7/J0=
Subject key identifier: 71:0C:40:A4:B2:2C:38:43:10:16:24:68:5D:61:4B:94:1B:41:F4:C3
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial: 019B6E4B62609F2C7BCB1CC41945D6115739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
Manifest number: 0AE8
Signing time: Tue 30 Dec 2025 08:06:32 +0000
Manifest this update: Tue 30 Dec 2025 08:06:32 +0000
Manifest next update: Wed 31 Dec 2025 08:06:32 +0000
Files and hashes: 1: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: +UigdQohzJHQevrGSEmc8FoJ4N3TCqOBgSMuwd5tNAk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6e:4b:62:60:9f:2c:7b:cb:1c:c4:19:45:d6:11:57:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Validity
Not Before: Dec 30 08:06:32 2025 GMT
Not After : Dec 31 08:06:32 2025 GMT
Subject: CN=710c40a4b22c3843101624685d614b941b41f4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:db:b9:5d:c1:47:8d:7f:7d:59:6e:49:45:
dd:e6:3b:85:f0:20:27:c9:26:df:12:f4:f6:b7:c0:
03:91:71:c7:40:3d:d6:b2:33:23:0d:f9:00:a6:b3:
c9:39:06:a6:83:04:f5:cc:78:d4:51:f2:25:3c:c0:
c0:c5:f4:6f:74:7d:f5:ed:5d:4d:c2:e0:fa:1a:db:
74:e6:7e:8f:b8:94:f1:9f:b4:e7:84:0d:d9:fa:e7:
cb:83:4e:8a:4a:3c:50:21:88:5a:bf:01:d2:d0:1b:
ee:59:2c:95:11:be:04:a2:03:aa:fa:66:98:d6:0a:
bf:2a:1e:0d:ff:13:b5:ea:3f:c0:b4:9f:2f:4a:65:
43:14:25:87:d1:6e:1a:56:b5:b5:36:35:75:44:1f:
3c:82:25:2d:e3:3b:b2:06:12:af:4a:c9:c6:08:fd:
8f:5b:25:10:e3:c3:a3:75:73:4d:fe:d2:b1:2b:e2:
47:e9:5e:fd:a7:0c:2a:26:8b:50:5c:67:aa:24:57:
08:8a:b2:60:28:cf:d4:cf:f9:ed:5a:a0:d9:21:36:
7f:e4:d6:5b:d7:14:cd:fd:3f:eb:ca:19:61:9c:a0:
be:1a:3b:d1:66:21:e3:42:d4:b9:4e:c3:65:71:c9:
53:ac:8a:3f:ec:20:71:a3:85:86:9c:d8:53:b2:c0:
2e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0C:40:A4:B2:2C:38:43:10:16:24:68:5D:61:4B:94:1B:41:F4:C3
X509v3 Authority Key Identifier:
keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:22:22:0a:09:c6:57:9b:b0:59:6e:a9:cd:c3:6a:76:9a:9e:
ab:06:38:3b:f8:7b:c3:71:c4:02:68:dd:64:4d:ae:b2:f7:35:
d8:97:be:22:17:3b:39:e5:78:eb:a9:be:9b:3f:75:7c:c0:fc:
b7:8f:02:86:13:0b:a6:75:a7:82:6f:11:8a:b2:be:0d:05:54:
23:f1:7a:98:46:b7:a0:54:20:5d:64:65:00:e5:9f:2f:12:db:
a9:1e:3a:47:f3:77:aa:81:9e:02:c3:a6:a5:ba:67:6d:9c:fd:
5d:43:30:20:dd:0f:dd:ab:28:a9:33:dc:61:1f:6a:bf:a4:ea:
23:29:3e:80:4c:25:cd:d9:67:05:b1:a7:d6:b1:02:f0:98:b6:
91:44:60:00:5b:e8:f6:41:3d:aa:ec:d8:45:01:00:0f:92:12:
9e:39:84:a7:a1:79:7c:13:75:58:1a:84:82:94:f2:a2:26:04:
51:5e:57:b7:59:fe:ea:17:88:8a:7e:b0:4d:a0:15:3e:fd:01:
65:ba:1d:04:8f:c8:c8:91:14:8f:23:87:90:d5:00:a0:44:89:
96:d7:3c:46:08:e7:88:ab:d4:65:63:ce:dc:38:7e:73:e3:fd:
4c:69:fa:cc:5d:09:be:bf:7e:6b:4e:ac:fb:60:08:54:05:38:
e2:f8:bb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:18 2026 by rpki-client