Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
File: DhI9xSvlTkcrv-N18u1B5JqHg-c.mft (raw, json)
Hash identifier: K6O+lYi6nWKLMRDGjhsAPA3tgGl2OElpQaVtObSG69k=
Subject key identifier: B6:E9:3F:65:8C:97:65:F6:0D:75:36:13:A8:23:59:4E:9A:0F:9E:BE
Authority key identifier: 0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
Certificate issuer: /CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Certificate serial: 019A2EFBECF719C77DEA98387BD8D81C31EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
Manifest number: 072B
Signing time: Wed 29 Oct 2025 08:00:53 +0000
Manifest this update: Wed 29 Oct 2025 08:00:53 +0000
Manifest next update: Thu 30 Oct 2025 08:00:53 +0000
Files and hashes: 1: DhI9xSvlTkcrv-N18u1B5JqHg-c.crl (hash: jiT+mLlfzAMxstUbcTi3/HsCeGV2ct6OKIOBNe7uQ4k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:fb:ec:f7:19:c7:7d:ea:98:38:7b:d8:d8:1c:31:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Validity
Not Before: Oct 29 08:00:53 2025 GMT
Not After : Oct 30 08:00:53 2025 GMT
Subject: CN=b6e93f658c9765f60d753613a823594e9a0f9ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:d3:60:21:0b:66:f7:1e:81:7a:a8:d2:91:
6f:7c:a7:80:ac:95:99:f2:da:3f:a6:21:7f:e3:bf:
10:5e:51:ab:92:1b:a9:25:53:8a:7b:2e:b9:ca:da:
c3:ef:94:b2:71:08:ed:27:bf:59:16:7e:b0:93:2a:
60:16:bd:ac:91:52:18:aa:71:54:88:18:b8:bf:7c:
80:2c:4b:92:de:aa:60:b5:c3:8e:98:6c:45:82:55:
1d:d1:e5:06:cd:53:8a:69:fe:93:ee:50:20:43:9c:
47:7b:0b:b1:79:d7:fb:ea:c9:1c:0c:18:7b:0d:13:
88:77:a4:3e:90:9a:d9:9a:a9:65:5b:90:4a:53:fe:
c9:70:99:bb:47:4d:50:64:d9:da:7e:11:32:f4:ef:
94:a4:9b:61:68:4a:e5:b3:0d:f8:dd:97:dc:70:35:
89:fd:4d:11:12:ef:1f:23:d6:86:47:2c:e4:ac:da:
28:15:fc:70:21:74:6c:38:6f:e7:79:ba:a8:73:a7:
2c:b9:be:6c:13:29:08:6e:75:f9:1a:34:b5:ae:20:
60:7d:e7:bd:91:68:3d:b0:36:97:69:01:84:5c:85:
c3:9e:85:08:0f:4f:3c:06:fb:32:5e:c0:ff:7c:98:
2b:62:47:d9:18:98:55:30:35:ed:5a:0c:f5:2a:d1:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E9:3F:65:8C:97:65:F6:0D:75:36:13:A8:23:59:4E:9A:0F:9E:BE
X509v3 Authority Key Identifier:
keyid:0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:48:63:71:1e:42:b1:01:ef:01:ed:22:7d:b7:28:74:dd:0e:
a3:53:64:bc:14:a6:c1:7f:20:c7:d4:d3:ef:dc:4f:8b:4c:66:
47:d0:b9:19:45:6d:4c:f9:a9:8e:7e:5b:57:a1:b7:a9:77:e0:
b3:7a:43:19:71:f7:3c:78:e6:ca:1f:d5:f5:ef:8b:95:82:e6:
b6:09:52:f4:94:52:87:d0:ba:2c:a1:aa:38:17:31:02:2f:10:
01:b2:90:34:6e:09:fc:28:95:68:6d:09:6a:a0:51:41:24:b7:
79:ad:00:97:a4:84:c0:98:0e:8d:da:4e:8c:41:5e:a2:69:c9:
50:0b:b1:09:5a:ad:bd:cc:c4:fd:0b:98:51:3b:f6:ae:69:c1:
f2:16:a5:0d:57:6e:46:1d:54:2f:60:85:7d:ad:d4:dd:a9:1e:
f9:bb:2f:55:dd:28:b0:cf:5c:aa:8d:c3:c4:2f:d2:c8:87:78:
d8:0b:da:a8:3f:34:49:fa:e3:1f:2e:2f:57:5c:61:03:97:be:
38:d2:b1:a4:e3:84:d3:1c:71:68:27:4f:9d:b9:33:c7:31:0c:
50:cc:db:ba:62:a1:2b:cf:dd:6c:e1:a9:4c:ba:5c:26:08:1e:
bb:a4:db:35:8a:ad:47:47:50:13:10:2f:66:be:7f:7d:98:bd:
91:d9:20:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:53:40 2026 by rpki-client