Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
File: uWtvuorLeLKHF9detqKSXktomhA.mft (raw, json)
Hash identifier: bHJyK18rtm2hw+tjAZuRqR8jBG/Bercy0lp3gaL4ucI=
Subject key identifier: FD:0A:FD:E9:15:69:4C:E1:6B:A3:CF:01:E9:AF:4D:8E:40:8D:26:CD
Authority key identifier: B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
Certificate issuer: /CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Certificate serial: 019A590AFE6063F610EC3CC0C968F2071C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
Manifest number: 0705
Signing time: Thu 06 Nov 2025 12:01:23 +0000
Manifest this update: Thu 06 Nov 2025 12:01:23 +0000
Manifest next update: Fri 07 Nov 2025 12:01:23 +0000
Files and hashes: 1: b1dkMuscA36O0Qm_BgPxorZ-3GY.roa (hash: gIbSn6LNYULuz6h5L16Mv/n4jaeFLG8lgRqX0Hk7Yek=)
2: uWtvuorLeLKHF9detqKSXktomhA.crl (hash: j8FTd+9y5ZyN9cOjXabh42I6srfG7R1Csl1x8vrPrgY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:59:0a:fe:60:63:f6:10:ec:3c:c0:c9:68:f2:07:1c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Validity
Not Before: Nov 6 12:01:23 2025 GMT
Not After : Nov 7 12:01:23 2025 GMT
Subject: CN=fd0afde915694ce16ba3cf01e9af4d8e408d26cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:d8:7f:8b:32:00:0d:60:d6:bd:61:16:f4:
c0:a0:9e:e3:d3:a5:0c:34:14:f5:06:6b:7b:d7:c1:
5b:f2:f5:bd:90:5f:d9:e0:cf:00:68:58:b9:db:6f:
2e:76:a6:9c:0d:a4:4c:62:e3:28:3b:6d:bd:ca:9d:
66:38:16:09:c9:63:6b:2a:78:b7:b1:67:0f:36:13:
fd:7b:fc:9f:35:da:e8:00:98:ed:a9:d5:4f:92:ce:
ed:cc:de:d7:4f:19:82:4a:94:67:c2:a7:2f:84:50:
a4:99:9b:94:c7:8f:c2:d6:12:de:61:93:f6:4d:84:
09:06:d2:d6:eb:da:ea:a7:ce:4e:e6:ad:41:cd:2f:
0f:9a:68:fb:5e:9e:f2:fc:be:14:61:76:4a:21:e6:
d9:80:3d:2b:c3:91:0d:2a:ed:c7:94:c9:6e:36:ae:
3d:57:48:f4:f3:85:d5:2c:4b:40:8c:61:b7:1a:11:
44:27:50:e0:fb:04:d9:ac:07:32:f5:2b:fc:3c:5f:
7d:6b:6c:2d:41:39:09:9b:d6:a8:c8:9f:18:ab:c6:
6f:12:82:6d:bc:34:4f:b3:cf:38:68:1f:be:fa:96:
f6:16:65:92:ed:eb:21:19:d1:eb:1a:05:0e:34:e5:
0c:b2:0a:4d:7b:9b:07:4f:40:e0:ca:01:69:55:7d:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0A:FD:E9:15:69:4C:E1:6B:A3:CF:01:E9:AF:4D:8E:40:8D:26:CD
X509v3 Authority Key Identifier:
keyid:B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a3:a6:47:c5:7c:9b:10:4e:5d:30:52:af:83:3d:52:fb:d4:
33:a6:b6:39:bc:a3:4f:c9:4c:52:9e:26:c6:e9:7d:58:81:77:
33:60:aa:42:1c:75:e5:14:87:32:a3:8b:b3:33:8c:78:9a:f9:
63:02:5f:8b:0c:6b:97:5e:6a:85:b0:43:a4:e9:15:81:1d:ff:
a7:d2:40:69:67:29:e2:e8:37:7e:2d:ef:f5:41:10:5f:e5:83:
41:f7:3f:1b:46:05:94:f2:d6:8a:e2:96:55:a6:0f:6d:88:91:
96:29:df:b0:75:3a:18:24:00:5e:a0:0c:23:d7:20:d1:93:18:
b4:7b:12:d3:25:d4:c7:30:ff:59:a2:08:9a:05:49:ee:31:2d:
2e:22:08:61:bc:ff:ee:97:cd:92:00:c9:4c:ce:aa:79:77:68:
e2:c3:ff:05:c8:fc:11:19:c5:ce:33:26:d3:07:fb:2b:7e:f0:
35:08:09:8a:ce:8e:34:7e:91:20:16:57:af:19:25:c7:24:d6:
a2:87:8e:b1:38:60:0b:cc:d3:f8:f0:ec:be:5e:ee:c1:94:d6:
af:8b:4f:3a:96:2b:11:55:ed:1f:c3:e0:d8:a4:57:76:41:74:
7d:61:a5:dc:97:57:dd:39:e8:b7:fe:c6:0b:f5:39:0b:53:62:
36:22:04:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:41 2026 by rpki-client