Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
File: 91A33711A470A1CAF41284B368F40FD2BDF16F01.mft (raw, json)
Hash identifier: 6r6ceIgoj7tOdteSiSc0/JA5e0z0CHkggx/de5GvCLM=
Subject key identifier: B7:9E:3A:8A:8F:B4:63:46:F2:91:73:3F:0E:3B:0E:7D:84:8B:6A:48
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Certificate issuer: /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial: 32AB2628D1D3F1601DE7DFC3FC1772501E661F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
Manifest number: 0399
Signing time: Wed 01 Oct 2025 19:05:51 +0000
Manifest this update: Wed 01 Oct 2025 19:00:51 +0000
Manifest next update: Thu 02 Oct 2025 21:37:51 +0000
Files and hashes: 1: 91A33711A470A1CAF41284B368F40FD2BDF16F01.crl (hash: 7+Kt0BbyvXIh6z0+90oub6+7IFMCeOWJLDfP68nHrCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ab:26:28:d1:d3:f1:60:1d:e7:df:c3:fc:17:72:50:1e:66:1f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Validity
Not Before: Oct 1 19:00:51 2025 GMT
Not After : Oct 2 21:37:51 2025 GMT
Subject: CN=B79E3A8A8FB46346F291733F0E3B0E7D848B6A48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b6:ee:ca:a5:05:82:7a:2d:22:f5:98:d4:5c:
c8:40:2b:5e:4e:d6:82:8e:aa:09:89:4b:81:68:3a:
7d:2a:05:7a:e9:67:09:6e:1e:e8:1a:29:52:f6:b4:
51:81:1d:d0:c4:bf:56:5b:0d:3f:e5:65:8c:63:0b:
7b:bd:df:8c:24:65:80:36:a2:a6:01:9d:79:07:9a:
39:8a:b5:d7:ca:83:78:54:41:f3:2d:7a:96:71:21:
2f:bb:87:07:d3:95:f1:c3:e2:be:eb:13:8f:b7:ad:
b1:ac:78:bc:56:80:7d:03:6f:91:dc:2e:aa:26:47:
6e:13:1e:d7:e4:33:11:70:50:11:f8:6d:a5:2c:70:
4a:b7:bd:7f:89:22:ab:65:79:f3:bd:a5:2b:22:38:
e4:e8:b8:28:21:50:63:7b:c3:09:48:a4:8e:61:62:
5b:25:fc:00:42:06:81:28:86:7e:d9:e3:96:6f:17:
4c:88:d3:27:db:35:63:e5:35:c1:08:f5:0e:cf:a7:
12:26:f8:03:37:70:6d:c3:19:47:7b:c0:a0:42:01:
2f:ed:ef:17:39:d5:fb:d7:9c:16:ce:2c:3f:af:9c:
a4:dd:a6:11:32:aa:98:e4:f4:f4:6b:03:25:0f:5b:
d7:5e:43:cd:c2:be:7a:18:ca:8e:4a:92:30:7f:61:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9E:3A:8A:8F:B4:63:46:F2:91:73:3F:0E:3B:0E:7D:84:8B:6A:48
X509v3 Authority Key Identifier:
keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:be:c1:f3:f8:c9:78:e3:6a:e8:0a:64:5b:e1:97:63:51:7f:
53:9a:a9:74:6c:98:c8:7f:1b:59:30:5a:09:25:e4:b8:20:27:
01:c2:6f:4e:66:ff:cd:8b:5e:d4:d7:97:cb:19:00:e9:7f:3e:
f8:f8:9c:d8:23:8e:80:ca:a3:d9:dd:64:40:b2:cc:ee:5c:4e:
3c:c9:f4:4d:54:7e:fb:86:21:fe:58:c7:ce:bc:b8:45:72:55:
fd:08:61:5e:25:8b:35:9e:a6:55:d3:c4:c8:9a:1b:ea:40:77:
cb:cf:b8:fe:f4:93:23:3e:da:d2:da:75:86:a8:55:d7:db:14:
2e:14:6a:b8:05:0f:2a:30:80:5d:e7:7a:98:7a:a0:93:a9:18:
f0:fe:a8:53:ec:67:9f:e9:c1:a1:70:d4:be:5b:2f:94:84:be:
dc:72:ba:b9:e3:8e:db:01:8f:71:fd:fb:76:f6:20:01:ec:2d:
5d:7e:2d:57:44:ea:2c:25:92:fd:63:a0:a6:ac:21:0d:55:d7:
7c:20:54:a3:3e:c1:82:1f:96:83:e9:66:0b:a5:f4:1e:ae:cd:
02:38:36:b0:bf:32:88:a9:38:07:f3:07:2d:f7:d7:4c:7c:71:
ef:30:7c:ed:fc:61:e6:91:e9:cb:c1:8b:b5:02:d4:a7:69:cd:
db:d0:b3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:29:39 2025 by rpki-client