Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
File: 5b-MGBsoDj0oKNobJHe5ECNVlVo.mft (raw, json)
Hash identifier: 0Vqs3y75Tu84fhBSQyHcAQN0FenexwWPZ4MGxXt0iTU=
Subject key identifier: 4B:E2:9A:DF:A9:5B:9A:CF:3E:FD:E7:B3:2B:78:47:0D:9C:BE:90:24
Authority key identifier: E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
Certificate issuer: /CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Certificate serial: 0197CE03F2FC341D7DE2C80435C66697A335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
Manifest number: 14A8
Signing time: Thu 03 Jul 2025 02:00:54 +0000
Manifest this update: Thu 03 Jul 2025 02:00:54 +0000
Manifest next update: Fri 04 Jul 2025 02:00:54 +0000
Files and hashes: 1: 5b-MGBsoDj0oKNobJHe5ECNVlVo.crl (hash: 4ScMnKtuQLSe2hboDoHECKkmq73UFaaAXI6wZPLYiOU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:03:f2:fc:34:1d:7d:e2:c8:04:35:c6:66:97:a3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Validity
Not Before: Jul 3 02:00:54 2025 GMT
Not After : Jul 4 02:00:54 2025 GMT
Subject: CN=4be29adfa95b9acf3efde7b32b78470d9cbe9024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:41:f6:3b:da:a1:1d:f9:a9:1d:fe:b6:4c:
69:73:76:b1:45:c1:c6:02:64:14:81:d2:fb:91:d4:
cd:5b:9e:ed:76:32:11:06:fb:fd:4f:c4:fa:23:63:
81:8d:6e:90:bb:30:c0:f6:16:9a:bb:d8:dc:ed:1c:
2f:6a:be:83:d1:a5:36:af:ca:a7:ac:55:0c:6c:bf:
b9:ae:16:e1:de:5b:1e:07:da:9a:fc:56:b6:60:04:
4a:35:d1:9d:67:4e:26:63:29:e1:40:50:76:ef:11:
c5:da:ce:e7:71:dc:15:4b:aa:e7:37:ce:63:0b:78:
0b:b0:61:58:66:66:ae:5c:c9:64:9e:a6:20:00:8a:
80:20:cf:43:7b:fb:38:83:ad:49:e5:c8:20:56:f7:
85:65:59:6d:cd:10:a8:7e:f2:c3:f0:b9:13:4c:bd:
0e:18:5e:32:23:79:46:ca:11:ac:0c:38:90:3f:b0:
3e:e3:7a:0b:02:93:01:61:35:a0:3a:80:0c:0f:c5:
1a:e6:c4:e9:15:e0:91:a2:e9:f4:db:94:40:b3:4d:
3e:1b:3e:66:d9:34:eb:9e:6f:aa:0b:5d:47:69:55:
d5:63:f9:85:bd:28:9d:2b:0e:14:53:38:9a:05:bb:
6d:fa:a4:b2:52:83:3a:2e:3e:65:e2:0a:0b:20:a6:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E2:9A:DF:A9:5B:9A:CF:3E:FD:E7:B3:2B:78:47:0D:9C:BE:90:24
X509v3 Authority Key Identifier:
keyid:E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:34:d7:f4:65:46:e8:7f:ca:8c:9b:bf:3d:0e:1a:cb:e6:0d:
a5:29:e3:1f:ca:94:a7:b9:5e:f6:a8:51:41:d4:49:63:eb:9d:
58:07:cb:e4:18:b8:c6:1b:81:78:c8:2c:52:0b:ed:b8:ba:ac:
fb:c7:6c:ce:28:3e:30:cc:c5:7f:aa:ea:69:ab:5a:ea:98:24:
69:84:0c:59:b9:4f:0e:99:5b:f4:2c:f2:2d:4b:a2:9c:14:7d:
f3:af:91:0b:14:cd:b0:68:ec:49:a4:23:b8:b4:20:68:34:55:
63:06:8a:4c:c1:38:33:2e:d9:8f:0b:b9:73:01:63:bb:41:84:
5c:70:ec:25:31:77:ab:aa:a3:87:23:ec:a6:38:56:2a:5c:28:
64:e1:b6:0f:b0:97:9a:75:d6:06:cb:a2:fa:2f:08:b5:86:b5:
ac:9f:df:f9:00:28:21:4a:b2:13:23:19:f1:16:b7:45:7d:81:
36:ae:b2:e8:b8:14:6a:55:0b:19:1d:fe:1a:ed:0d:e5:ca:dc:
04:95:6a:a8:6b:90:5a:01:fe:e4:ba:35:ed:e9:e4:67:11:81:
4b:d6:c7:db:03:c8:1f:3e:ef:d6:dc:69:c2:74:27:f9:f9:97:
89:c7:64:6f:63:1f:52:00:44:41:8a:e9:de:04:cc:76:69:78:
b3:35:09:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfOA/L8NB194sgENcZml6M1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmY4YzE4MWIyODBlM2QyODI4ZGExYjI0NzdiOTEwMjM1
NTk1NWEwHhcNMjUwNzAzMDIwMDU0WhcNMjUwNzA0MDIwMDU0WjAzMTEwLwYDVQQD
Eyg0YmUyOWFkZmE5NWI5YWNmM2VmZGU3YjMyYjc4NDcwZDljYmU5MDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVFB9jvaoR35qR3+tkxpc3axRcHG
AmQUgdL7kdTNW57tdjIRBvv9T8T6I2OBjW6QuzDA9haau9jc7Rwvar6D0aU2r8qn
rFUMbL+5rhbh3lseB9qa/Fa2YARKNdGdZ04mYynhQFB27xHF2s7ncdwVS6rnN85j
C3gLsGFYZmauXMlknqYgAIqAIM9De/s4g61J5cggVveFZVltzRCofvLD8LkTTL0O
GF4yI3lGyhGsDDiQP7A+43oLApMBYTWgOoAMD8Ua5sTpFeCRoun025RAs00+Gz5m
2TTrnm+qC11HaVXVY/mFvSidKw4UUziaBbtt+qSyUoM6Lj5l4goLIKZ7HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvimt+pW5rPPv3nsyt4Rw2cvpAkMB8GA1UdIwQY
MBaAFOW/jBgbKA49KCjaGyR3uRAjVZVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWItTUdCc29EajBvS05vYkpIZTVFQ05WbFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81ZjQ1MjQtMjM0Yy00OTFiLTk5NjQt
MTgyZjFiYWM2NDBhLzEvNWItTUdCc29EajBvS05vYkpIZTVFQ05WbFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS81ZjQ1MjQtMjM0Yy00OTFiLTk5NjQtMTgyZjFiYWM2NDBh
LzEvNWItTUdCc29EajBvS05vYkpIZTVFQ05WbFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjTX9GVG
6H/KjJu/PQ4ay+YNpSnjH8qUp7le9qhRQdRJY+udWAfL5Bi4xhuBeMgsUgvtuLqs
+8dszig+MMzFf6rqaata6pgkaYQMWblPDplb9CzyLUuinBR986+RCxTNsGjsSaQj
uLQgaDRVYwaKTME4My7Zjwu5cwFju0GEXHDsJTF3q6qjhyPspjhWKlwoZOG2D7CX
mnXWBsui+i8ItYa1rJ/f+QAoIUqyEyMZ8Ra3RX2BNq6y6LgUalULGR3+Gu0N5crc
BJVqqGuQWgH+5Lo17enkZxGBS9bH2wPIHz7v1txpwnQn+fmXicdkb2MfUgBEQYrp
3gTMdml4szUJ4Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:28 2025 by rpki-client