Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
File: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft (raw, json)
Hash identifier: eB4GlkEejj2LRrAeue7yh6koaGgndbGRenxrO6USSaY=
Subject key identifier: 31:E8:4F:9F:29:3C:DB:0B:09:92:B5:48:BB:28:19:2F:93:EA:94:ED
Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
Certificate issuer: /CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Certificate serial: 019B4FC0A02023F365F94978E746A4AD2336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
Manifest number: 0AFE
Signing time: Wed 24 Dec 2025 09:46:22 +0000
Manifest this update: Wed 24 Dec 2025 09:46:22 +0000
Manifest next update: Thu 25 Dec 2025 09:46:22 +0000
Files and hashes: 1: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl (hash: kptmjJ3kQFhFB9ZrGctPCC/N1c/OAiz9IO+BvLBdzs0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4f:c0:a0:20:23:f3:65:f9:49:78:e7:46:a4:ad:23:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Validity
Not Before: Dec 24 09:46:22 2025 GMT
Not After : Dec 25 09:46:22 2025 GMT
Subject: CN=31e84f9f293cdb0b0992b548bb28192f93ea94ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:20:01:03:e3:c5:ea:c7:e0:3d:6e:e8:54:
91:46:f0:7a:46:b7:21:54:52:63:9c:b0:52:fc:16:
50:42:aa:d1:81:e5:81:3d:00:e2:01:0d:13:40:e1:
d0:b6:b7:22:af:90:b0:25:5f:c4:97:9c:4b:39:e3:
c9:c8:d3:6b:99:42:dd:42:9f:0e:97:3c:28:b6:8e:
62:e0:14:15:1d:b5:ee:26:bc:e8:78:97:ac:5c:6c:
20:ce:2f:b8:ba:84:4e:16:f6:f8:06:a7:6f:2a:27:
9b:07:af:97:97:4b:ee:01:e4:c0:90:b1:c3:31:ff:
33:ac:95:f3:18:44:f4:31:1f:ea:54:5e:ec:9e:82:
6b:17:78:1e:d8:bb:51:59:d4:4c:5a:fa:aa:35:0b:
5f:42:82:e8:0d:3d:65:a1:22:77:89:fe:df:c0:eb:
27:f8:d8:63:48:91:06:7b:a4:0f:c3:6e:34:bd:f6:
94:87:9e:5b:45:b5:8d:28:b8:96:d7:75:62:94:0a:
d5:88:b6:d8:c0:73:bf:05:e3:e7:84:ac:44:f6:94:
6e:24:ad:4c:74:2b:b4:a0:bd:4f:5c:18:c9:39:f1:
fb:d9:35:b0:8d:bd:c4:2c:f5:59:cf:23:60:46:d4:
be:f1:25:8a:b0:f5:93:2c:fe:f9:72:c7:c5:d0:d7:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E8:4F:9F:29:3C:DB:0B:09:92:B5:48:BB:28:19:2F:93:EA:94:ED
X509v3 Authority Key Identifier:
keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:ee:ec:91:af:5f:a5:bf:7e:3e:cf:10:42:28:58:10:29:66:
97:5a:d9:6b:aa:8a:d2:d9:70:1d:9d:d2:3f:d4:d9:23:09:b8:
19:44:bb:99:97:8f:34:b9:55:97:c4:a6:b0:94:dc:14:8f:b8:
c0:80:91:8b:44:c8:b7:08:8e:32:68:39:80:44:77:6a:f9:57:
cf:b2:0c:f6:8c:2d:cd:aa:a7:da:d5:85:e4:2f:50:c1:4d:8b:
84:53:63:ed:7e:50:1d:73:a3:ad:1e:05:7f:55:39:c9:ed:18:
ac:f8:9a:47:38:fc:e0:f7:d1:fa:61:8b:dc:9a:a5:a4:12:55:
a8:cf:29:f0:92:93:43:ba:c3:ba:70:ef:13:48:2c:fd:de:e5:
cb:9b:ca:4e:c5:20:3d:ea:f9:6b:21:25:25:c2:08:46:6d:78:
7c:55:2f:9c:7d:12:27:f8:df:62:35:9f:c1:c1:2c:6a:c7:16:
39:32:f0:be:09:40:2e:62:ed:4c:30:c8:9f:69:df:c7:0c:66:
22:b3:21:04:bf:fb:39:12:30:c4:d8:b2:05:ab:4f:e9:81:b9:
a5:72:d2:b1:49:b4:d7:c1:34:d6:ae:11:97:32:c2:14:16:09:
f1:ce:4f:b3:f0:03:9c:f8:0a:a4:5e:40:8e:fe:37:04:b9:e0:
45:d6:45:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:35 2026 by rpki-client