Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
File: yh3vhAA2XhysFuj3iHCS2smDtz4.mft (raw, json)
Hash identifier: 1LuK3p80n7H2UDR0PN5kpb5x5wFpfURlyG2EXkr5DiA=
Subject key identifier: 41:CE:A9:8E:F5:6A:99:EB:58:47:1F:02:B3:B4:5C:AC:51:18:1F:74
Authority key identifier: CA:1D:EF:84:00:36:5E:1C:AC:16:E8:F7:88:70:92:DA:C9:83:B7:3E
Certificate issuer: /CN=ca1def8400365e1cac16e8f7887092dac983b73e
Certificate serial: 019B126FC2555DF7501A56C4D32B941FEEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
Manifest number: 130F
Signing time: Fri 12 Dec 2025 12:01:12 +0000
Manifest this update: Fri 12 Dec 2025 12:01:12 +0000
Manifest next update: Sat 13 Dec 2025 12:01:12 +0000
Files and hashes: 1: yh3vhAA2XhysFuj3iHCS2smDtz4.crl (hash: RaGnGoY0ix2PiPkw9bEwuAYAZslBe7QbDTwsju5C664=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:12:6f:c2:55:5d:f7:50:1a:56:c4:d3:2b:94:1f:ee:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1def8400365e1cac16e8f7887092dac983b73e
Validity
Not Before: Dec 12 12:01:12 2025 GMT
Not After : Dec 13 12:01:12 2025 GMT
Subject: CN=41cea98ef56a99eb58471f02b3b45cac51181f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:b3:90:73:10:45:4c:58:e3:b8:65:ca:dd:
ec:3f:bf:1a:9c:f7:ab:f6:83:43:19:74:aa:e2:1c:
a2:38:a1:e5:4c:e7:58:10:af:d0:cc:b8:5a:9d:dc:
02:bd:13:b8:71:c3:5a:db:bf:59:ea:60:ff:a2:c1:
20:87:51:aa:7e:80:24:c8:3e:28:b6:65:b1:3f:7f:
58:41:60:4f:ac:59:32:e1:ef:3c:45:dc:dc:a5:da:
5b:2a:d6:e9:68:86:e2:e6:87:4b:b0:0b:01:1c:05:
da:7e:98:72:c8:82:9f:5d:66:7f:c2:61:7f:ab:d6:
78:3c:47:47:4d:a9:03:d2:d4:d0:4d:f6:7b:f9:67:
03:a3:84:6c:63:14:84:59:03:50:6b:1e:e3:07:3b:
35:e3:f0:c1:e0:aa:08:52:4e:b7:96:57:78:64:a6:
77:d0:fb:d5:5d:43:4a:a5:a5:6d:d2:6f:2c:f9:bc:
03:e4:42:8a:25:fa:b5:8f:07:c2:04:40:72:18:fb:
f5:0f:75:9c:63:c6:8a:c1:e2:2a:96:e0:56:67:ab:
57:f4:16:27:05:62:86:b6:91:52:32:be:5f:56:bc:
89:20:e5:a4:16:d1:40:11:32:f1:47:3e:12:d2:91:
a0:c2:8a:ae:4e:0b:85:82:81:fd:93:eb:c0:01:b1:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CE:A9:8E:F5:6A:99:EB:58:47:1F:02:B3:B4:5C:AC:51:18:1F:74
X509v3 Authority Key Identifier:
keyid:CA:1D:EF:84:00:36:5E:1C:AC:16:E8:F7:88:70:92:DA:C9:83:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:15:b2:9f:72:46:8b:dc:96:eb:e2:87:60:3a:25:c9:90:8a:
28:74:b7:b4:3e:21:86:4c:62:6e:75:c0:c5:a5:3e:37:49:17:
9a:7b:72:d5:a0:2b:57:c6:c7:ad:01:3f:fc:ec:ff:71:34:0b:
5b:9e:01:61:18:32:6e:da:27:94:58:65:c8:cc:37:28:ff:97:
69:be:eb:2c:03:0a:50:17:34:dd:30:cd:c1:60:73:97:11:58:
7a:d2:e8:7a:b5:dd:70:75:dc:37:20:00:da:25:a5:d8:ce:df:
ac:05:ec:66:dd:bb:2c:b5:6e:1c:b0:78:26:78:2c:f6:40:48:
b1:16:5a:93:45:a6:81:c1:e6:f6:9a:75:37:aa:32:59:ac:5c:
26:46:3f:86:6b:02:25:ae:0e:38:79:a4:ec:bd:8a:6f:f8:87:
cb:9e:0a:fe:3f:78:a0:de:2f:65:45:c0:81:22:1f:51:3d:5a:
c2:51:d0:c5:15:ef:6e:ba:4b:38:e8:5d:c6:83:b4:12:1c:85:
6a:22:68:2e:08:32:05:31:35:a4:0f:d7:10:c3:01:53:13:bf:
44:91:00:cd:cf:90:87:c7:b2:30:d1:4d:4c:50:4e:e5:39:7b:
78:71:9f:7e:51:e7:d0:59:68:7f:0b:d6:99:87:0a:c1:75:9b:
62:c3:07:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:44:20 2026 by rpki-client