Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
File: zeKPHxgJm6vwoZCIvqNboITskpc.mft (raw, json)
Hash identifier: AybfgjGd9slZGKBdg7BZ+4gfCZYKQtyHMx14bbg3bk8=
Subject key identifier: A2:B8:19:ED:A1:F8:8B:80:09:6B:26:A3:E5:16:C3:85:11:5F:6B:31
Authority key identifier: CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
Certificate issuer: /CN=cde28f1f18099babf0a19088bea35ba084ec9297
Certificate serial: 0199FFC7F1D65AFA3AC9A90853FD45E6EBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
Manifest number: 0ED9
Signing time: Mon 20 Oct 2025 04:01:57 +0000
Manifest this update: Mon 20 Oct 2025 04:01:57 +0000
Manifest next update: Tue 21 Oct 2025 04:01:57 +0000
Files and hashes: 1: zeKPHxgJm6vwoZCIvqNboITskpc.crl (hash: ahhFlOaFO7JeeZOl+OQ0vjztmrt+DNpjYOxQJt53css=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:f1:d6:5a:fa:3a:c9:a9:08:53:fd:45:e6:eb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde28f1f18099babf0a19088bea35ba084ec9297
Validity
Not Before: Oct 20 04:01:57 2025 GMT
Not After : Oct 21 04:01:57 2025 GMT
Subject: CN=a2b819eda1f88b80096b26a3e516c385115f6b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2b:5a:c2:c9:ac:a6:0f:c1:43:68:ac:1c:65:
e4:56:a5:71:8a:66:28:ef:1a:6f:a7:65:c6:dc:32:
7b:d9:0e:6a:aa:cb:60:55:e0:de:2d:5f:c8:dc:2c:
eb:0b:f1:6e:85:10:1f:8c:bc:e2:fa:11:ee:c5:fa:
d7:76:ea:16:4a:49:24:d3:c2:6a:fd:be:7f:f8:4c:
cd:f3:4b:e0:4b:cf:b3:01:d6:c9:a9:02:e0:b2:32:
15:81:d4:14:54:c8:07:b1:12:13:ea:a9:49:30:d1:
72:83:c1:63:10:12:26:f5:a0:bc:be:c3:22:2b:ca:
48:9d:e1:4c:bd:c2:0c:50:e6:19:6e:34:c2:73:9c:
fa:b3:1d:7d:64:67:07:91:e1:95:8b:21:ed:8b:db:
02:f5:d3:eb:5a:10:c1:36:9d:fb:56:75:a4:09:65:
9e:18:4d:3c:d9:c7:c6:39:76:1c:60:0c:7c:cf:da:
33:61:d1:a8:3d:4e:3b:e9:57:41:00:2d:93:93:99:
ec:5a:f8:15:ce:f9:55:99:f7:23:73:47:6e:5c:74:
f3:55:1c:c9:de:e3:13:e5:3d:09:f6:da:6a:d0:20:
38:30:c2:b4:42:17:2e:da:65:e6:74:27:80:38:1c:
aa:ec:73:67:ce:bd:39:9f:f2:59:4a:32:2f:d1:ce:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B8:19:ED:A1:F8:8B:80:09:6B:26:A3:E5:16:C3:85:11:5F:6B:31
X509v3 Authority Key Identifier:
keyid:CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ef:17:cb:3b:6c:60:a3:99:44:d0:ed:59:3f:38:e7:81:2e:
b1:a2:ba:8b:f6:ac:2e:45:a3:0c:17:3c:9f:7c:a8:6c:56:cc:
33:59:fc:05:6c:d8:1a:f0:e5:31:44:29:cd:44:d3:18:c9:92:
21:a5:c7:05:a3:f8:bf:1f:59:5f:ff:d6:e8:c6:a8:68:69:ac:
7b:5f:f3:28:7c:6a:43:ad:ae:62:f0:d0:4b:84:5f:42:4f:8a:
ab:6d:2c:ab:92:27:53:6a:21:0f:5f:80:ee:d1:da:a0:b7:8e:
22:16:3b:14:84:f9:46:2d:36:04:07:ed:72:fc:5f:bc:14:7b:
63:07:5a:f1:22:32:62:06:43:84:01:38:2d:03:c6:f8:95:11:
7c:c1:21:ae:03:8e:b9:65:03:99:52:36:fd:0a:5a:8c:5a:88:
81:fa:1c:7e:ea:0e:0d:1c:2c:7b:4f:54:84:cc:a1:18:e1:c0:
b0:2d:48:f2:3f:e8:9d:d4:30:c6:ff:3f:8d:73:76:1d:c0:f4:
bd:00:1d:d3:2f:91:41:54:63:2f:16:8c:e7:ed:97:f4:a7:d1:
61:45:89:76:a4:d4:9c:7c:0e:bd:dc:79:05:2b:81:47:98:a8:
2e:32:f1:57:09:b3:6f:22:98:d4:48:82:29:8d:87:5b:45:80:
0d:9d:68:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:12:00 2025 by rpki-client