Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json)
Hash identifier: IpvPiDVMWL4ewodVVhuj0IMmHGWo0WVWmp1wW2865ms=
Subject key identifier: 21:78:B8:DD:A6:96:5D:48:C6:AB:F0:BE:69:AE:55:6D:14:A7:7F:43
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial: 019B435C395EB3CAC932551F272CDE9B032A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
Manifest number: 178B
Signing time: Mon 22 Dec 2025 00:01:15 +0000
Manifest this update: Mon 22 Dec 2025 00:01:15 +0000
Manifest next update: Tue 23 Dec 2025 00:01:15 +0000
Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: 6Oh4UF1jFmZ2j0PYgdI823Gj+SJxDoAVOVOpS99G82A=)
2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:43:5c:39:5e:b3:ca:c9:32:55:1f:27:2c:de:9b:03:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Validity
Not Before: Dec 22 00:01:15 2025 GMT
Not After : Dec 23 00:01:15 2025 GMT
Subject: CN=2178b8dda6965d48c6abf0be69ae556d14a77f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:d1:dd:5e:0d:90:8c:7e:d6:05:c8:66:c1:
85:ff:9a:be:17:4d:72:c2:78:1c:58:e6:a5:3a:ca:
4e:e4:14:de:22:a1:b4:61:5a:b9:6f:89:ea:d1:d3:
f6:7d:ba:be:24:ff:64:6e:07:df:da:66:87:a5:2a:
3a:9b:71:6e:cd:74:b5:ac:30:f8:58:5a:51:1b:fd:
06:55:90:28:63:94:45:2a:06:ac:72:26:96:4e:f0:
42:92:55:53:38:d3:95:8f:2a:3d:9a:f1:69:24:33:
83:87:d0:d2:63:4f:8b:fb:8a:b8:ad:5f:2d:3e:b8:
a6:43:30:6e:e9:4f:06:03:62:76:90:e2:df:c4:b1:
bd:ca:67:97:14:63:ee:c8:fe:6d:da:d5:a6:06:73:
27:2d:0e:59:e1:07:72:86:9c:47:67:b1:80:dc:25:
1f:76:ee:f0:81:a0:b6:68:87:a0:81:ba:5d:b6:77:
97:85:25:da:a2:4e:e7:67:30:0b:51:d2:e3:10:01:
2f:8d:06:db:8f:2a:3f:ea:47:3e:ce:17:a3:5f:1e:
cc:c8:a3:27:97:2d:4e:a6:58:3a:67:98:06:4d:58:
2e:1b:43:7c:ec:05:0b:86:f9:74:f9:1b:a3:f9:0b:
ab:e1:bb:e8:89:c4:f4:ea:da:7f:07:e9:04:2b:8e:
fd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:78:B8:DD:A6:96:5D:48:C6:AB:F0:BE:69:AE:55:6D:14:A7:7F:43
X509v3 Authority Key Identifier:
keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6b:73:2c:f4:b9:43:39:78:8d:6c:9b:0d:19:98:86:36:00:
32:50:a8:7f:33:4e:73:c9:33:ab:8e:ee:f7:19:72:30:d5:90:
f5:ec:0b:95:7e:b6:d3:13:91:cc:1c:5b:4c:40:1a:56:a3:f1:
04:e0:a7:63:2b:87:3c:84:4d:ee:14:7e:7b:71:7d:66:0d:3d:
63:fa:f6:a5:eb:71:8c:b7:d3:d4:18:48:a8:00:81:ed:18:2a:
06:b1:f3:cc:bf:37:96:c1:a2:be:b6:0d:2e:93:2f:36:d5:d3:
13:86:89:3a:54:e9:fe:a2:69:32:68:92:b1:fa:14:c2:34:05:
54:82:06:ca:b4:40:e8:1f:11:17:12:e5:00:23:d4:d1:58:d8:
47:24:e1:f1:2c:b0:b0:10:f2:89:6f:0b:c1:e4:73:a0:97:29:
16:a6:46:d5:20:50:9e:d7:c3:7e:75:2b:bf:94:92:5b:5d:ce:
c7:87:98:ca:29:a5:56:f6:93:7a:17:19:ae:19:88:cd:16:5a:
b8:e3:1e:be:8c:b9:58:88:b6:eb:3a:58:be:e3:50:99:99:e6:
64:c4:a4:42:22:2c:b2:4e:3e:20:2c:fa:3d:3e:75:12:e5:20:
82:16:f2:0e:39:cd:35:99:c6:5e:58:25:30:fc:04:6c:67:46:
3a:b5:3e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:32 2026 by rpki-client