Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
File: k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft (raw, json)
Hash identifier: F9gl/6qeJ7SyLSK15iHTaONxTT1/SPnq5DeDe1DPNow=
Subject key identifier: 20:E0:41:02:D3:9B:82:97:E6:4F:84:8A:11:85:B6:D1:4A:A5:D7:6D
Authority key identifier: 93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
Certificate issuer: /CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Certificate serial: 019A383562E659243FB502132A7982B41A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
Manifest number: 0ECB
Signing time: Fri 31 Oct 2025 03:00:14 +0000
Manifest this update: Fri 31 Oct 2025 03:00:14 +0000
Manifest next update: Sat 01 Nov 2025 03:00:14 +0000
Files and hashes: 1: k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl (hash: HUMlwIxfYt2k02cW4kG3uYyt6koKNfXF8mc474caPfs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:38:35:62:e6:59:24:3f:b5:02:13:2a:79:82:b4:1a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Validity
Not Before: Oct 31 03:00:14 2025 GMT
Not After : Nov 1 03:00:14 2025 GMT
Subject: CN=20e04102d39b8297e64f848a1185b6d14aa5d76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:4c:2e:b9:53:cc:0c:41:05:fe:42:eb:74:
85:98:8f:69:16:f2:66:d1:4f:6b:e5:d4:5c:9f:ff:
24:97:b9:41:21:21:49:4a:16:27:96:05:bd:fd:2d:
8a:66:f4:18:e1:3f:e8:a2:d0:a1:da:70:ea:0d:68:
a8:3b:81:f5:d3:e2:1b:df:83:17:9a:c3:cf:6a:66:
bb:31:05:5c:aa:3b:a2:40:86:4c:c9:54:c3:8f:68:
21:30:31:bf:19:43:73:37:86:4c:5a:14:63:c1:a6:
f6:8a:5e:f0:7c:5a:f4:16:1e:7c:54:0a:1b:f4:c3:
0d:48:a3:f6:01:24:52:a9:7c:5d:8b:36:69:99:e8:
70:3f:99:f9:bf:0a:04:c8:6e:ee:5d:e8:f3:ae:30:
6b:65:bf:a1:79:eb:33:72:2f:11:95:70:fb:ba:5b:
0c:12:b0:ff:ba:0c:5d:84:65:86:7d:6e:6a:1b:93:
d2:e2:e4:28:c9:58:d7:28:2a:41:58:27:c8:57:d8:
2c:f8:88:5a:e2:46:57:64:dc:d6:44:ca:11:24:58:
d2:15:db:76:66:99:fc:21:86:02:26:af:c1:08:29:
f1:da:20:a5:32:85:0c:0e:da:c7:20:e0:6f:f3:cd:
70:48:16:76:c3:42:fd:e6:90:c5:b2:c4:c5:2f:3b:
c5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E0:41:02:D3:9B:82:97:E6:4F:84:8A:11:85:B6:D1:4A:A5:D7:6D
X509v3 Authority Key Identifier:
keyid:93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:65:35:41:37:d0:0d:89:60:c6:82:f7:42:ae:e0:e0:13:76:
74:e9:0d:46:c8:e4:cc:3c:99:ed:91:69:61:61:af:50:99:3a:
e6:45:30:8e:61:cc:95:12:a3:4c:92:43:95:65:ab:db:18:94:
4f:e3:05:ab:5b:6d:6a:24:61:fc:87:35:da:4a:29:ff:c3:cd:
29:77:ae:22:36:f7:5b:3d:82:e9:2e:71:15:07:bf:54:55:77:
50:8c:11:c4:c0:b4:e1:cb:dc:1a:0a:d5:53:ee:6a:e6:a9:eb:
28:d3:b1:51:60:7f:f5:00:9f:18:2e:3b:24:06:ba:b5:68:3d:
9b:59:19:80:a0:f6:7f:39:7d:9e:33:11:3f:c8:d5:85:ca:89:
58:b6:ad:9f:01:8b:d3:59:27:c3:a6:ee:8d:5a:f8:a8:02:5a:
49:17:68:bf:63:19:84:95:36:b4:ff:50:e9:6f:c0:10:24:4d:
ac:0e:d1:34:d7:3a:d6:3c:df:3a:a4:bc:07:31:ab:c5:2a:54:
65:57:d3:fd:7e:38:59:6e:58:16:c5:fd:e2:d5:00:e2:d5:3e:
f2:b6:ad:47:a6:11:2f:ca:ae:a2:4b:89:d1:4a:82:af:42:33:
71:d6:78:62:88:8f:76:ab:f6:54:60:78:53:f1:19:ae:8c:80:
d7:ef:a2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:37:56 2026 by rpki-client