Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
File: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft (raw, json)
Hash identifier: 5HpX7ZWuOOQKEVo3PT925nBVH9gAAbQOLzuyAYqcdds=
Subject key identifier: 8E:9D:D6:6E:81:86:90:F7:67:9A:0E:4D:52:D4:80:50:C7:54:6D:A0
Authority key identifier: DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
Certificate issuer: /CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Certificate serial: 019A247825C71143B265910D9C6360702635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
Manifest number: 04B1
Signing time: Mon 27 Oct 2025 07:00:45 +0000
Manifest this update: Mon 27 Oct 2025 07:00:45 +0000
Manifest next update: Tue 28 Oct 2025 07:00:45 +0000
Files and hashes: 1: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl (hash: BHFmWwomV/UIt67HIecWdI9YDjU0KFyU0GLJDt6a6Vs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:25:c7:11:43:b2:65:91:0d:9c:63:60:70:26:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Validity
Not Before: Oct 27 07:00:45 2025 GMT
Not After : Oct 28 07:00:45 2025 GMT
Subject: CN=8e9dd66e818690f7679a0e4d52d48050c7546da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:b9:52:03:f8:e0:ed:57:11:41:02:70:62:
52:57:8e:76:f3:91:e6:41:3d:6a:a9:a8:8e:73:e3:
2c:4d:38:8e:9d:a7:92:7a:72:54:75:7b:cd:14:d7:
a5:20:ad:c7:09:14:da:1b:0b:e8:40:10:09:52:8b:
af:d1:07:bf:9b:37:75:2a:a7:81:b4:74:e1:32:03:
b8:f3:b5:05:fc:06:e6:96:6c:d6:98:db:34:34:89:
df:d8:11:a3:7a:5e:36:ec:42:db:11:2b:e8:25:e5:
e8:7f:a1:7e:a4:cb:f1:e8:11:63:3a:e4:83:28:7a:
46:b9:cd:e4:35:f1:1a:7f:8e:cb:12:1b:a0:3d:e8:
fa:80:51:e5:9f:a9:51:5c:f7:c4:fa:1f:38:15:a7:
03:4c:c2:ac:03:42:47:89:2c:c6:27:5d:18:f5:c7:
fb:34:57:ec:7b:cf:a2:b6:38:cf:8a:a9:08:8b:60:
d0:a5:96:50:a3:0f:bf:95:9b:83:03:3f:bf:56:c1:
ba:c0:af:f9:77:36:81:4a:2f:7f:31:79:7d:39:d7:
3e:80:b0:0e:35:dc:26:23:e7:51:e6:e2:e8:b3:ee:
6c:7e:ef:ba:63:89:25:42:82:df:3d:94:74:00:fa:
d5:3d:f9:86:16:26:6b:09:0c:dd:84:4e:20:af:6b:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9D:D6:6E:81:86:90:F7:67:9A:0E:4D:52:D4:80:50:C7:54:6D:A0
X509v3 Authority Key Identifier:
keyid:DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:40:fd:aa:26:b7:4b:95:a9:97:b7:a4:89:b4:78:2c:7a:25:
f8:23:f6:3f:d7:ee:bc:cf:ce:ca:59:8d:28:f6:f3:12:fd:3e:
fa:12:9d:1a:f9:9e:8d:bf:4b:7c:50:2f:06:5d:0f:c7:50:8c:
bc:24:5b:23:0c:38:45:8a:fd:fa:41:f2:40:63:43:24:91:a6:
76:87:cd:3c:37:95:19:2a:87:de:b0:1e:28:56:2a:b5:22:00:
1f:05:59:1b:2d:5a:be:2b:45:6a:cd:30:51:f0:d3:6a:bb:58:
12:cc:d4:b6:48:60:79:b9:f2:95:f5:7c:f6:f4:bc:77:f7:8d:
0a:82:83:5f:7f:0d:d9:67:f5:17:f9:ce:9e:61:b5:08:6d:fb:
2a:1a:55:b4:99:7e:5e:3b:cf:04:ca:78:d4:38:75:a0:b9:e4:
51:3b:23:b9:a9:f9:00:7b:f7:1b:3a:d6:1f:66:04:0d:e6:14:
2a:b9:1a:2f:f6:36:92:1e:4d:0a:04:6b:f2:2c:c1:ba:b4:67:
ac:21:3d:46:8b:68:22:78:9c:85:05:3d:5a:12:65:69:32:6c:
7a:3c:04:1d:87:e9:af:18:7c:37:bc:43:2a:b6:3b:69:33:29:
bf:1f:1b:bb:17:25:4f:bc:f7:b3:f1:80:58:70:79:df:bd:04:
56:53:d2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:49:59 2026 by rpki-client