Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
File: DghyLSZ7Tv9ER6STM6AlqFICCpg.mft (raw, json)
Hash identifier: QtTyNheQsrWWMIPS39UgPgrQHjiAHYpYSxWYKlaE9+Q=
Subject key identifier: 5F:94:BE:52:AD:53:C3:F9:BD:58:8F:F9:9D:7E:43:1A:31:75:17:B5
Authority key identifier: 0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
Certificate issuer: /CN=0e08722d267b4eff4447a49333a025a852020a98
Certificate serial: 0199375CB99DD0973A2BB35EC2C39B18AC24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
Manifest number: 096D
Signing time: Thu 11 Sep 2025 06:00:47 +0000
Manifest this update: Thu 11 Sep 2025 06:00:47 +0000
Manifest next update: Fri 12 Sep 2025 06:00:47 +0000
Files and hashes: 1: DghyLSZ7Tv9ER6STM6AlqFICCpg.crl (hash: c8acawBelDqRlEusHDlwOFLDpG1q4cZ2F5qbTB9TX/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:b9:9d:d0:97:3a:2b:b3:5e:c2:c3:9b:18:ac:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e08722d267b4eff4447a49333a025a852020a98
Validity
Not Before: Sep 11 06:00:47 2025 GMT
Not After : Sep 12 06:00:47 2025 GMT
Subject: CN=5f94be52ad53c3f9bd588ff99d7e431a317517b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b1:cc:00:c8:f9:e1:9c:c7:5f:fd:4e:b9:8a:
5b:74:c2:9f:c8:8f:72:ea:e4:ce:b0:36:37:7e:d3:
30:bb:43:e3:eb:33:f8:09:91:66:c6:70:6d:75:9d:
d4:23:26:f4:b6:3b:fc:32:de:5e:e2:61:c2:bb:1c:
d7:86:f8:4f:87:c1:99:ab:ee:12:29:11:f8:72:b5:
a8:86:2c:a4:a3:d6:91:f5:10:a2:76:3a:9b:74:a5:
3c:67:ec:e9:0f:38:69:a4:7a:4b:86:69:f1:e8:b0:
74:1c:3c:86:48:82:0e:fd:43:c5:bb:93:72:69:d4:
19:ed:be:29:82:db:30:80:6d:b4:16:f6:1f:fe:30:
a1:35:d2:aa:06:87:ea:89:b2:cf:13:14:d5:9b:59:
bc:86:37:25:f6:44:9e:0a:21:0d:2b:cf:85:e9:98:
a8:a4:52:28:77:87:24:0d:ab:da:d6:5b:17:d4:3d:
88:42:5f:73:a5:01:18:8f:91:d2:93:2e:bf:d9:52:
8c:dc:34:4e:de:94:05:ce:32:13:0f:89:3b:7e:af:
0f:8b:fb:58:d9:7b:2e:7b:4f:48:8c:13:1b:19:3d:
cc:33:13:29:da:b1:62:2f:d0:73:8e:4e:21:38:22:
db:35:58:89:c6:45:7e:18:13:e6:e8:16:ee:08:08:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:BE:52:AD:53:C3:F9:BD:58:8F:F9:9D:7E:43:1A:31:75:17:B5
X509v3 Authority Key Identifier:
keyid:0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f8:ce:6a:f6:3d:88:16:46:ca:9f:28:27:ab:fc:e8:3c:29:
a3:23:c8:44:c5:8d:ee:00:a8:41:08:1d:e7:c6:3c:88:31:0f:
0a:84:15:9c:c8:a2:2c:48:97:73:b2:de:5f:00:92:9a:a3:93:
8d:e0:7a:e7:8c:ad:6e:3a:6c:83:ce:60:ca:ea:67:e7:0b:0d:
db:75:a8:15:fc:22:d2:41:93:2a:2a:46:9a:a8:2c:d1:0d:28:
cd:d8:d1:53:f7:c3:4d:9e:a2:ac:48:e3:43:22:a9:4f:9c:a9:
cb:e9:04:9d:8a:b1:d5:88:f2:ad:cc:6e:e5:a9:1f:e0:a6:75:
05:22:3d:70:d8:21:06:59:9c:f5:04:c5:63:7f:79:bd:b5:db:
cd:2c:b8:52:54:23:e6:b7:bf:a6:3d:a5:c3:87:e1:21:03:13:
2d:bf:97:47:a3:6a:d7:c7:d3:86:f1:47:88:41:fa:e6:87:72:
71:48:de:c4:c1:66:7d:44:c3:40:f6:ee:02:e6:df:04:21:52:
60:75:22:61:0d:f0:85:6a:cf:3c:c8:ab:11:c1:52:54:2f:2d:
a7:d8:25:17:52:51:b9:71:ac:2d:39:6d:cd:4b:85:7b:ab:72:
bd:1d:02:e2:70:b0:12:3f:a9:f7:30:81:4a:6f:e5:16:e4:4b:
53:86:5c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:25 2026 by rpki-client