Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
File: C53uHUCq19-1viY4ApT04HcD14Q.mft (raw, json)
Hash identifier: B20AOmfUiLj4twQphTkfc1t6Pg3tFKUNA7jNGWNpuD4=
Subject key identifier: A6:4A:87:59:CB:4E:49:B4:89:46:64:0D:EA:74:17:F4:DA:97:30:51
Authority key identifier: 0B:9D:EE:1D:40:AA:D7:DF:B5:BE:26:38:02:94:F4:E0:77:03:D7:84
Certificate issuer: /CN=0b9dee1d40aad7dfb5be26380294f4e07703d784
Certificate serial: 01996058C42820FA41F17C3236988E73CBF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
Manifest number: 168E
Signing time: Fri 19 Sep 2025 05:00:54 +0000
Manifest this update: Fri 19 Sep 2025 05:00:54 +0000
Manifest next update: Sat 20 Sep 2025 05:00:54 +0000
Files and hashes: 1: C53uHUCq19-1viY4ApT04HcD14Q.crl (hash: XRE3mSDAkdBO8zWA7UfxLr1hLeJn2vVwQmGRfpkvEwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:58:c4:28:20:fa:41:f1:7c:32:36:98:8e:73:cb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9dee1d40aad7dfb5be26380294f4e07703d784
Validity
Not Before: Sep 19 05:00:54 2025 GMT
Not After : Sep 20 05:00:54 2025 GMT
Subject: CN=a64a8759cb4e49b48946640dea7417f4da973051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:dd:16:13:86:1b:5a:0c:2a:0f:89:e0:e8:
a3:7a:1d:9e:2d:eb:ba:53:98:bf:34:0c:10:a9:d9:
bc:ce:0b:95:9f:f6:84:9d:0c:41:d6:94:11:42:2d:
6c:72:d7:13:16:d9:95:f1:00:7a:61:00:fe:e0:d7:
11:ea:c2:4d:4b:54:cf:b8:75:8a:53:de:14:8a:b2:
82:7b:05:12:16:0e:ab:73:68:12:b2:ef:cb:78:e3:
46:8d:0e:de:c7:ba:7d:d9:0f:b7:5b:3b:80:4a:23:
f0:7e:f2:9a:37:d8:3a:2a:8d:64:61:96:87:27:28:
aa:e6:4a:7f:a0:ac:83:9b:cc:f8:e1:87:14:29:34:
89:9c:d5:e6:e3:86:94:d9:3f:e5:2b:b3:c6:ea:5a:
f9:6b:ff:8b:de:9b:d6:d7:1a:29:db:bb:e9:90:25:
98:2e:64:3c:d7:27:a8:47:44:33:77:30:a7:ca:dd:
23:5f:46:cc:92:74:a7:ec:f9:fb:4d:ef:b1:29:79:
68:d5:0c:d9:29:55:d1:f7:7a:73:b7:01:b6:cf:40:
d1:f5:8f:32:89:d5:de:9a:88:7d:00:0a:98:47:16:
14:b9:5a:ad:62:5b:39:68:58:22:f3:6f:43:ac:91:
52:42:98:16:00:80:30:49:c7:51:d6:78:32:7e:80:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4A:87:59:CB:4E:49:B4:89:46:64:0D:EA:74:17:F4:DA:97:30:51
X509v3 Authority Key Identifier:
keyid:0B:9D:EE:1D:40:AA:D7:DF:B5:BE:26:38:02:94:F4:E0:77:03:D7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6e:9b:48:92:e5:05:e7:6b:32:55:c8:34:b8:e9:59:76:00:
27:12:87:26:6b:17:16:b6:4a:00:93:f3:20:0b:75:f5:ba:0a:
c5:07:49:fa:99:3b:ba:ee:82:33:69:99:d5:a3:a7:80:7c:e9:
a7:36:bf:48:df:c0:4e:cc:c8:48:c4:a1:53:8c:01:57:d6:f8:
0f:8c:bf:0f:eb:50:b5:32:f8:c6:7c:ed:68:78:d7:fd:5a:68:
e3:80:19:95:9f:bc:1b:37:40:f0:99:40:30:6b:7d:35:73:93:
51:7a:76:09:23:95:8c:dc:c2:c8:06:44:5c:2e:ea:88:b7:54:
05:34:5d:3a:98:68:04:e4:1f:50:61:d1:af:4f:a0:3a:76:af:
0b:f4:8b:01:be:5f:b3:92:17:1f:1b:d5:f9:45:07:b1:1a:8d:
dc:ac:da:f3:51:c4:a3:6f:6f:fd:5d:99:36:74:66:93:0d:83:
89:c4:f2:ec:b6:f0:25:b1:b2:db:a6:d2:70:cb:4c:9d:5f:d0:
2b:47:eb:30:d7:53:9c:47:7c:5f:de:c8:e0:79:5a:35:ec:cc:
63:d9:30:73:9f:48:b6:f3:57:94:37:96:5e:6f:c9:89:27:96:
fb:99:a6:86:95:14:45:f5:fb:40:24:37:67:3d:2b:5d:3e:8d:
d1:32:a7:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlgWMQoIPpB8XwyNpiOc8v3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOWRlZTFkNDBhYWQ3ZGZiNWJlMjYzODAyOTRmNGUwNzcw
M2Q3ODQwHhcNMjUwOTE5MDUwMDU0WhcNMjUwOTIwMDUwMDU0WjAzMTEwLwYDVQQD
EyhhNjRhODc1OWNiNGU0OWI0ODk0NjY0MGRlYTc0MTdmNGRhOTczMDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0svdFhOGG1oMKg+J4Oijeh2eLeu6
U5i/NAwQqdm8zguVn/aEnQxB1pQRQi1sctcTFtmV8QB6YQD+4NcR6sJNS1TPuHWK
U94UirKCewUSFg6rc2gSsu/LeONGjQ7ex7p92Q+3WzuASiPwfvKaN9g6Ko1kYZaH
Jyiq5kp/oKyDm8z44YcUKTSJnNXm44aU2T/lK7PG6lr5a/+L3pvW1xop27vpkCWY
LmQ81yeoR0QzdzCnyt0jX0bMknSn7Pn7Te+xKXlo1QzZKVXR93pztwG2z0DR9Y8y
idXemoh9AAqYRxYUuVqtYls5aFgi829DrJFSQpgWAIAwScdR1ngyfoAhawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZKh1nLTkm0iUZkDep0F/TalzBRMB8GA1UdIwQY
MBaAFAud7h1Aqtfftb4mOAKU9OB3A9eEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzUzdUhVQ3ExOS0xdmlZNEFwVDA0SGNEMTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84NDczYzMtMWRlOC00YTUwLTljYWIt
N2NlNWVjYTI2M2RlLzEvQzUzdUhVQ3ExOS0xdmlZNEFwVDA0SGNEMTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84NDczYzMtMWRlOC00YTUwLTljYWItN2NlNWVjYTI2M2Rl
LzEvQzUzdUhVQ3ExOS0xdmlZNEFwVDA0SGNEMTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoG6bSJLl
BedrMlXINLjpWXYAJxKHJmsXFrZKAJPzIAt19boKxQdJ+pk7uu6CM2mZ1aOngHzp
pza/SN/ATszISMShU4wBV9b4D4y/D+tQtTL4xnztaHjX/Vpo44AZlZ+8GzdA8JlA
MGt9NXOTUXp2CSOVjNzCyAZEXC7qiLdUBTRdOphoBOQfUGHRr0+gOnavC/SLAb5f
s5IXHxvV+UUHsRqN3Kza81HEo29v/V2ZNnRmkw2DicTy7LbwJbGy26bScMtMnV/Q
K0frMNdTnEd8X97I4HlaNezMY9kwc59ItvNXlDeWXm/JiSeW+5mmhpUURfX7QCQ3
Zz0rXT6N0TKnuQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:58 2025 by rpki-client