Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier: xHB5MrnBUNYds8FVE9r6GqWujpxFZqWwVE0Uo819F8M=
Subject key identifier: 4A:BF:97:11:10:AD:B8:CA:C1:8F:36:A3:5A:4F:C4:68:6A:9A:54:4C
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial: 019F2369A8CB72C0970B0DCB4BA130A38FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number: 13AF
Signing time: Thu 02 Jul 2026 15:19:14 +0000
Manifest this update: Thu 02 Jul 2026 15:19:14 +0000
Manifest next update: Fri 03 Jul 2026 15:19:14 +0000
Files and hashes: 1: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: acFo11CkOiGLTXQQY4zAl+fJ32VVcHKmFeERqs1Y7uA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:a8:cb:72:c0:97:0b:0d:cb:4b:a1:30:a3:8f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Validity
Not Before: Jul 2 15:19:14 2026 GMT
Not After : Jul 3 15:19:14 2026 GMT
Subject: CN=4abf971110adb8cac18f36a35a4fc4686a9a544c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:f1:5a:47:ea:e5:cd:f0:e6:6a:8d:e6:d3:
63:a4:ab:92:a8:9a:6e:52:5d:e1:de:97:fd:6a:a7:
fb:f3:45:30:00:be:81:09:45:37:89:06:ba:f4:f8:
8d:86:3a:4d:71:43:77:26:f0:10:58:bf:aa:c5:38:
02:72:7c:a0:ee:05:b5:ea:80:4a:f9:2f:1e:55:d4:
7e:a0:43:76:18:36:8e:12:d0:25:f1:eb:28:cd:df:
40:24:d9:cd:c8:51:c7:05:b4:9c:c0:7f:1f:49:6c:
8a:ee:17:43:d3:22:55:02:87:a1:24:70:3e:37:8b:
7a:25:7a:21:5c:1d:42:ce:c9:e7:ac:78:c1:15:07:
2c:53:28:ee:41:85:60:03:7a:18:13:90:12:eb:74:
84:1b:13:d1:44:79:d2:69:b5:da:58:f9:4f:42:2f:
bb:5e:de:8a:3e:5c:8c:37:48:b1:32:40:0e:c1:0f:
a8:54:96:f6:c1:b3:de:54:58:6d:2a:ca:dd:aa:7a:
be:ef:8f:b7:24:a3:82:9d:49:b8:d1:6d:5d:5d:80:
20:c7:74:2a:06:9d:86:c4:50:13:04:44:bb:6a:02:
b7:0c:d9:09:e7:f7:3a:81:68:20:89:24:88:b1:96:
87:df:e8:f5:96:76:78:01:79:55:ad:61:02:86:48:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BF:97:11:10:AD:B8:CA:C1:8F:36:A3:5A:4F:C4:68:6A:9A:54:4C
X509v3 Authority Key Identifier:
keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1d:a8:65:15:82:f8:83:ce:93:a1:97:cd:b0:e9:4b:cc:13:
72:dc:8d:91:d2:e6:2f:13:ed:55:aa:7a:38:f1:f3:e2:5b:aa:
26:b9:bb:ed:46:b2:33:04:a1:98:7c:bb:ef:77:04:60:09:4f:
59:33:ff:6e:4e:43:90:78:6a:a4:7b:70:fe:db:36:7b:0b:66:
9d:a9:24:fe:2a:a7:8f:34:af:15:c0:c7:7e:27:8c:5d:6d:64:
18:17:24:b5:45:e5:bc:db:6d:e8:be:df:f6:e3:66:1f:95:df:
d6:df:30:7b:f0:04:1e:03:f2:96:83:45:06:25:5c:41:8b:00:
dd:e7:c2:e6:49:94:36:2f:e2:04:a6:be:ad:01:7f:97:e7:06:
c0:81:d4:6e:cf:02:f7:a8:df:fe:9d:ae:d5:d3:1e:e9:70:5e:
7d:a9:55:08:67:a9:17:be:6c:54:2f:aa:09:fa:c8:07:d1:61:
8f:8e:73:9c:87:ad:38:dd:18:8a:92:7a:a3:a5:9f:1b:d3:e8:
90:df:f4:cb:50:56:09:b0:af:02:bc:7c:7a:fc:c9:8e:5d:bd:
f2:4c:b1:a5:9e:a2:f2:f4:5a:03:73:fa:c6:73:42:1f:a8:48:
0f:29:14:70:89:c0:d9:dc:a5:39:ed:f6:b9:84:ed:b5:81:44:
8a:90:cf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:36:07 2026 by rpki-client