Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
File: skdjJsizNc1GFWo9VpBcbp0NhbU.mft (raw, json)
Hash identifier: P3yu8ZS3Jsr6o4D13IMLOmqDsXQlFeLCK9MrM504hVc=
Subject key identifier: B6:D4:74:4C:69:65:B7:FE:78:EF:ED:6C:DF:C8:F5:53:2F:74:14:2F
Authority key identifier: B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5
Certificate issuer: /CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
Certificate serial: 0199DBBAD16CE6718CC94F4F6122949C6DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
Manifest number: 05CB
Signing time: Mon 13 Oct 2025 04:01:17 +0000
Manifest this update: Mon 13 Oct 2025 04:01:17 +0000
Manifest next update: Tue 14 Oct 2025 04:01:17 +0000
Files and hashes: 1: skdjJsizNc1GFWo9VpBcbp0NhbU.crl (hash: TRrl7uU2Q6JleO32xfeZij+Pi2f++tOMeNuUXNHgMBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:db:ba:d1:6c:e6:71:8c:c9:4f:4f:61:22:94:9c:6d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
Validity
Not Before: Oct 13 04:01:17 2025 GMT
Not After : Oct 14 04:01:17 2025 GMT
Subject: CN=b6d4744c6965b7fe78efed6cdfc8f5532f74142f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:c9:1a:cf:07:ff:cc:26:86:f4:65:2f:3e:
3c:51:0e:5d:18:98:56:34:26:7e:8d:8f:d8:17:53:
15:2d:ee:56:20:93:02:e7:6a:b9:93:d5:29:3d:c0:
ca:e6:44:82:cc:f9:bd:8c:d4:40:a2:8b:c4:0c:99:
e3:f5:55:ba:c9:9c:28:d2:8f:5e:d4:80:44:fe:b3:
da:ad:7f:13:0f:33:47:a5:5e:a1:99:44:e2:31:bb:
57:85:aa:ba:0f:c1:51:2c:a9:b3:28:eb:18:89:87:
87:f8:03:2d:18:ef:25:25:3e:5c:8f:40:6e:7f:23:
be:3a:55:58:54:b8:57:63:9b:28:f9:25:55:91:d3:
c0:10:4e:8a:1c:75:8e:97:88:8b:17:fa:6f:53:91:
27:01:20:9e:61:3d:d1:22:c8:62:ed:55:ee:3d:75:
42:dd:56:da:68:23:e5:3f:6e:95:17:f4:43:c8:4e:
13:7a:40:10:5d:a3:7d:87:90:87:5b:ed:17:d6:d8:
24:2b:74:c8:9b:cf:94:20:d9:a5:cf:25:17:6f:7e:
8d:f5:4c:61:0a:b0:3a:f6:f6:70:f0:81:1a:6a:c0:
d5:9a:bf:de:1e:04:70:a4:67:94:ec:30:38:d6:28:
fe:55:0a:72:81:da:f2:7f:c7:bc:ad:b7:c8:24:37:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D4:74:4C:69:65:B7:FE:78:EF:ED:6C:DF:C8:F5:53:2F:74:14:2F
X509v3 Authority Key Identifier:
keyid:B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:19:b1:84:86:fc:e4:56:cb:aa:e6:f4:78:55:d5:63:e2:c5:
27:22:fd:6f:f9:c9:3c:78:b5:02:0d:1a:9c:99:29:90:b2:04:
13:26:13:91:2f:57:e4:f2:3a:5b:2b:44:15:d4:a6:15:ea:4a:
d0:bb:dc:6d:26:3d:58:7a:f6:22:a0:18:89:6a:8b:53:e8:45:
9e:35:28:2f:9d:10:ca:88:d6:71:48:da:26:1c:0d:68:65:06:
5b:86:a7:7f:6b:63:7d:3c:5d:af:78:d7:d6:2f:63:9c:c6:9c:
66:fd:ec:85:3f:bc:9c:d0:d0:40:3b:6b:d1:e2:03:2a:9d:0e:
cf:d7:38:b7:74:9e:3e:25:b5:d5:36:73:5d:c7:47:f8:8f:8f:
07:aa:e2:5e:25:c5:f0:3f:e1:bb:97:d2:59:99:74:1e:16:9e:
61:0f:d2:33:77:c0:b8:e9:d2:2b:c3:f0:f3:15:48:90:cb:72:
e1:38:3b:e7:74:bc:75:66:90:f9:fd:8c:b6:25:e8:f6:01:3e:
a7:ba:f3:3b:84:5c:eb:ca:5e:45:ed:36:d3:ae:75:52:df:e5:
41:ef:be:d1:08:74:14:f8:2f:51:b3:a7:d7:04:19:f0:65:22:
07:ad:94:01:93:76:50:dc:36:d7:9b:0e:29:b1:11:44:80:8b:
cb:21:18:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:26 2025 by rpki-client