
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
File: pW_3HkuOwkscYysvoiSHOcxXIgU.mft (raw, json)
Hash identifier: vStfBTak/dNYDiQePcumLe0bJPMtWut5b/jIPNuLUa0=
Subject key identifier: 9A:DF:19:A3:D6:8D:3D:EE:20:B1:9A:02:6D:C3:62:44:5B:17:89:17
Authority key identifier: A5:6F:F7:1E:4B:8E:C2:4B:1C:63:2B:2F:A2:24:87:39:CC:57:22:05
Certificate issuer: /CN=a56ff71e4b8ec24b1c632b2fa2248739cc572205
Certificate serial: 019A3421FF6419BE83AF0A36EF6366D20CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
Manifest number: 16FF
Signing time: Thu 30 Oct 2025 08:00:34 +0000
Manifest this update: Thu 30 Oct 2025 08:00:34 +0000
Manifest next update: Fri 31 Oct 2025 08:00:34 +0000
Files and hashes: 1: pW_3HkuOwkscYysvoiSHOcxXIgU.crl (hash: K8EerIIQFcs0LJ3DgKNaLKd6jPzrFsmW4DjYboNHXqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:21:ff:64:19:be:83:af:0a:36:ef:63:66:d2:0c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56ff71e4b8ec24b1c632b2fa2248739cc572205
Validity
Not Before: Oct 30 08:00:34 2025 GMT
Not After : Oct 31 08:00:34 2025 GMT
Subject: CN=9adf19a3d68d3dee20b19a026dc362445b178917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f8:ea:a4:6b:d0:55:9e:42:96:d8:34:07:43:
6f:84:88:f6:02:12:da:1d:bd:e1:b6:31:93:ef:5a:
4b:72:4d:ea:9a:21:e9:85:0f:18:1d:e4:b5:29:a8:
8b:f7:e0:dd:ca:cf:f4:9f:44:e1:d6:3c:d3:d0:e6:
73:b4:f3:fe:a1:20:45:e6:71:ec:04:0d:39:92:b6:
1e:04:49:38:b3:b2:5e:49:cb:27:cf:11:80:82:f5:
ad:23:f3:9e:50:a2:5e:ac:29:cc:a3:28:03:d1:e8:
70:dc:10:ee:5a:62:ae:a3:ca:9a:ba:52:c8:78:2a:
52:b9:70:35:99:47:49:47:f4:7d:49:cc:34:61:12:
57:2e:9d:b7:79:39:b2:03:95:ff:0f:06:92:41:2b:
b9:6f:57:ee:cc:bf:9c:19:23:0a:77:ab:26:2a:be:
88:dc:24:2b:7b:c6:0d:32:d7:9a:29:07:c2:89:49:
ef:34:17:97:9b:10:64:72:c4:16:24:8b:51:b0:ea:
3b:ca:ee:34:fb:b6:60:9c:4b:b0:c4:04:16:4e:78:
5c:da:4a:cd:ab:0f:a1:a6:36:c3:4c:bd:a2:20:76:
d3:38:f8:a0:be:ba:d8:ee:1b:c5:82:9f:13:a5:6a:
b8:e9:21:e9:34:97:6e:a6:12:af:84:f6:36:d7:cd:
ae:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DF:19:A3:D6:8D:3D:EE:20:B1:9A:02:6D:C3:62:44:5B:17:89:17
X509v3 Authority Key Identifier:
keyid:A5:6F:F7:1E:4B:8E:C2:4B:1C:63:2B:2F:A2:24:87:39:CC:57:22:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:75:96:fd:02:55:0d:59:d8:c2:41:0e:4c:c2:06:f3:e9:e3:
91:2a:49:28:c4:98:29:e9:79:55:18:96:41:0d:17:b7:34:e1:
3f:d3:56:5f:2a:59:d2:8b:74:e1:7c:c9:c6:03:ef:9d:aa:47:
7e:e5:30:a0:ee:cf:23:6e:53:60:00:a0:fd:93:e6:9e:d8:d5:
59:8f:c6:86:0d:07:44:cb:06:5b:61:60:77:1b:87:2f:d1:9f:
5f:ea:8f:1a:eb:8e:fc:5d:04:9f:3b:af:04:91:d9:84:79:e9:
c1:ba:31:1c:e6:f6:02:45:a6:46:b9:94:00:b3:fc:df:34:7c:
11:81:98:a9:a0:c4:83:01:d2:90:bf:67:c5:6a:d5:ea:5a:a9:
25:77:df:da:c2:16:c9:e0:87:05:8f:67:38:60:84:19:0d:6d:
a7:59:f1:fa:4a:56:cf:57:eb:db:0b:08:0a:af:6f:3b:43:d6:
8b:8d:84:c7:de:35:dd:6d:e1:3d:2c:6c:9c:47:ce:b8:0f:44:
42:a3:58:46:50:66:31:25:8e:2f:d3:ac:89:c4:a8:d5:97:3b:
7f:62:93:db:5d:57:b4:5a:81:7c:52:42:83:78:4f:f9:f2:7b:
85:3b:d6:65:89:ea:09:21:f9:76:d5:5e:e7:63:99:29:20:05:
d4:4a:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:51 2026 by rpki-client