Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
File: 70AaUuP95plIbplnjb9Ih1Mpwz0.mft (raw, json)
Hash identifier: N6o/+PLyg6aS+2gCvBwgN8bHXKj6cApWpG7jKvjxhuE=
Subject key identifier: 5B:5F:90:70:17:04:79:09:7D:2B:5E:49:D1:28:E8:77:2B:67:A7:AF
Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
Certificate issuer: /CN=ef401a52e3fde699486e99678dbf48875329c33d
Certificate serial: 019F236A33125FBD14D647ACA51BE7B75F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
Manifest number: 10FA
Signing time: Thu 02 Jul 2026 15:19:50 +0000
Manifest this update: Thu 02 Jul 2026 15:19:50 +0000
Manifest next update: Fri 03 Jul 2026 15:19:50 +0000
Files and hashes: 1: 70AaUuP95plIbplnjb9Ih1Mpwz0.crl (hash: lqz7ycXUKzbkCegqa8vAryuJk35SCOZEIdqoxPmyolU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:33:12:5f:bd:14:d6:47:ac:a5:1b:e7:b7:5f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d
Validity
Not Before: Jul 2 15:19:50 2026 GMT
Not After : Jul 3 15:19:50 2026 GMT
Subject: CN=5b5f9070170479097d2b5e49d128e8772b67a7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:8c:6e:d0:6c:96:9e:ad:f3:ae:c7:94:bf:
49:fc:cf:3d:68:f0:fd:33:d0:7a:1c:eb:49:09:81:
6c:22:3b:56:7c:73:c5:e4:1d:09:d4:42:b8:29:f4:
f7:b4:12:ff:e0:99:33:e7:2a:14:23:0c:f2:8a:e0:
18:ab:0c:83:9e:56:9b:18:82:3d:94:c4:7c:10:86:
f7:b2:ba:8d:fd:c9:53:08:94:44:a5:6a:b2:b7:5e:
3d:a5:f5:8c:08:7e:ad:45:20:74:0f:6c:2e:15:54:
5e:b3:c1:f6:b0:36:5d:4a:6b:73:ea:4e:22:32:78:
92:d2:19:fd:bd:cc:65:e8:7e:fa:ac:b3:7e:1c:37:
ee:39:a1:6c:3f:b3:94:49:54:1d:38:31:3c:7b:2b:
4d:a9:09:84:05:fc:33:0b:fb:7f:55:48:e3:7d:f0:
1f:61:91:fc:08:f4:c9:46:f1:6e:aa:a3:f1:7c:a1:
91:b3:bf:9f:b4:f3:f2:f4:e3:63:1a:ae:1d:aa:bb:
72:c9:ff:29:c6:aa:93:71:60:67:83:08:ca:5d:7c:
72:a8:a6:84:4b:7e:67:dd:ae:2b:96:47:6e:a0:3a:
92:75:d4:05:53:f8:4b:53:33:76:a1:e7:9a:58:e7:
7f:6d:24:3e:8f:30:3e:c9:71:32:a4:5c:33:e4:80:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5F:90:70:17:04:79:09:7D:2B:5E:49:D1:28:E8:77:2B:67:A7:AF
X509v3 Authority Key Identifier:
keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:6f:16:a2:0b:d3:7b:2b:76:d5:c0:8a:8e:2f:f4:6c:8c:bc:
5c:55:42:01:54:33:d6:35:7a:f5:c8:f1:57:36:a9:68:0e:ae:
b1:61:b3:71:a0:bf:80:ce:3e:9d:a6:5b:c6:14:68:c7:8e:11:
63:ba:e1:df:33:30:1e:3a:6d:82:d7:6e:37:b9:98:49:96:b8:
31:62:2f:0f:59:ea:68:98:a2:00:2c:4a:f2:0b:13:e1:2c:27:
8e:4f:51:eb:62:d6:30:46:ef:cf:9c:d7:25:e0:98:18:f9:77:
01:4f:09:08:46:0d:fc:29:c3:a1:2d:c4:7b:7c:40:c1:9d:bc:
f1:c5:9e:02:ed:a8:ca:4c:30:4e:c6:a4:b5:1a:0b:80:e8:b1:
17:72:f2:73:0d:1c:eb:51:1f:53:23:ff:a7:e4:a5:ec:e2:9d:
01:05:df:7e:1c:52:c3:25:2e:d7:a3:b1:5a:81:07:64:fe:21:
93:0b:9e:31:93:6f:54:09:11:7e:ec:33:17:34:7a:09:7a:43:
ee:19:ac:bd:08:f5:9a:e8:5d:da:e1:f0:6c:fb:c0:31:66:db:
67:81:3e:16:70:66:30:ca:b4:9f:0b:38:c1:41:e6:0b:4f:0a:
59:66:dd:1c:a0:ad:3b:c2:90:c2:25:5d:b6:b7:24:f3:be:20:
b4:62:11:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:06 2026 by rpki-client