Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
File: vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft (raw, json)
Hash identifier: MWbNkykYNBxhJohKuXlJCiGVvKHGZdEJP2ERn3fjVmE=
Subject key identifier: B1:04:E9:1A:E0:8A:64:AD:85:95:00:91:9D:27:DC:18:EE:67:99:F4
Authority key identifier: BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87
Certificate issuer: /CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
Certificate serial: 019B2A09F66223EED36E92623D9DA9A675A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
Manifest number: 134C
Signing time: Wed 17 Dec 2025 02:00:54 +0000
Manifest this update: Wed 17 Dec 2025 02:00:54 +0000
Manifest next update: Thu 18 Dec 2025 02:00:54 +0000
Files and hashes: 1: Lrevspx8pK8iAQPmN_WzVm7Uz8g.roa (hash: rJO6XBbSiJFNojO75GzhljDBEykmJAUvcojH0FS1+Mc=)
2: vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl (hash: 3raiPD6EVNIsrXzjpdNbXOtKWNCzsBeUPcN19Y0qppI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2a:09:f6:62:23:ee:d3:6e:92:62:3d:9d:a9:a6:75:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
Validity
Not Before: Dec 17 02:00:54 2025 GMT
Not After : Dec 18 02:00:54 2025 GMT
Subject: CN=b104e91ae08a64ad859500919d27dc18ee6799f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:c6:55:75:b8:a8:db:28:d4:dd:dc:30:61:
94:fc:f1:09:83:24:0f:81:76:c8:06:e2:cc:4d:c0:
84:24:ef:a2:02:a6:15:9b:06:8a:37:74:3c:c9:82:
0e:cb:f0:3b:3d:2f:5a:5e:5b:48:3a:9f:16:f4:b3:
e7:a9:aa:1d:6a:c6:87:08:54:e3:37:25:a8:51:0c:
06:d0:d9:37:9e:a6:70:95:5f:93:b5:7a:34:1f:14:
24:74:16:15:4c:b5:80:7a:c0:77:81:be:b2:a1:6e:
ea:55:d7:09:f6:5e:5d:c6:a8:d6:ad:5b:2f:c2:1a:
f1:b4:a0:62:75:9c:4b:ef:5b:95:42:10:0f:b8:00:
b7:32:87:32:eb:96:99:d8:62:f7:01:6b:e7:28:c6:
05:28:ad:da:5f:3c:21:12:00:45:ba:60:8f:81:f7:
75:d0:1c:5d:c0:c3:45:73:f9:42:fc:d6:75:24:3f:
50:53:46:ab:79:ca:00:dd:93:3f:f8:8c:7c:89:e6:
41:53:33:a2:6d:57:d7:2e:f3:79:23:30:3e:77:99:
0c:17:03:c6:87:f5:a0:0e:a1:59:bc:a4:92:3f:17:
2f:c4:c7:9f:d5:b7:e0:58:bb:89:b8:77:a7:fb:6e:
da:49:88:f0:42:fa:1d:a0:4f:49:ed:1c:e2:f2:19:
d2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:04:E9:1A:E0:8A:64:AD:85:95:00:91:9D:27:DC:18:EE:67:99:F4
X509v3 Authority Key Identifier:
keyid:BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:53:ca:74:8d:bd:52:c8:80:d3:32:29:f9:bd:e2:dd:5a:58:
bf:45:0c:72:0f:e3:e3:cd:3d:20:28:ff:66:9a:cc:53:51:0c:
23:f6:4a:a7:a8:06:3a:12:16:fd:7b:3a:e6:a7:1d:6c:e8:7c:
b1:76:4e:a6:2b:d4:4a:b9:e6:4b:72:6c:f5:60:d1:3f:a1:fc:
77:d5:cd:66:8e:ba:a1:08:d7:52:0e:25:f7:2d:7d:36:e8:b7:
37:eb:40:a6:0b:b8:0b:a6:6b:29:20:e9:4f:b0:61:f7:18:53:
0f:86:6f:f2:02:94:c7:37:e8:f2:ed:e9:36:a7:f1:08:00:23:
d1:0b:80:0e:90:c1:2b:57:4a:69:6d:3a:df:ce:47:c6:74:1e:
a5:84:c0:91:4f:fb:b5:de:cf:7d:9b:27:b7:35:dc:2d:5b:3d:
5c:32:1c:9f:30:b3:e0:f3:c6:ad:5c:05:ae:ba:85:68:be:12:
07:4e:d1:4f:78:59:8c:8c:5d:17:7f:ac:bc:50:21:06:87:08:
0e:10:46:ce:3f:a9:b0:bf:a4:4f:43:93:f5:63:4e:87:c7:2c:
28:88:a5:43:ac:3c:3b:01:70:a0:b7:00:f0:09:f3:ed:ab:a8:
36:36:83:31:5f:01:24:b8:80:3b:77:d7:7c:48:14:6c:d2:58:
7a:ae:01:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:25 2026 by rpki-client