Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
File: KEo1xF93T6_4QkXOEkvcZVx0Uos.mft (raw, json)
Hash identifier: 3Oy+XytzMbOuvjTlA+Pc6IwVbXmhGxklzl8qWManrDE=
Subject key identifier: 1C:01:92:E5:D0:B9:F6:C9:3D:37:77:C8:5E:86:80:DA:14:2E:79:3B
Authority key identifier: 28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
Certificate issuer: /CN=284a35c45f774faff84245ce124bdc655c74528b
Certificate serial: 019A7BCD82A4636E4172327EDE0374DEA08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
Manifest number: 07F5
Signing time: Thu 13 Nov 2025 06:00:56 +0000
Manifest this update: Thu 13 Nov 2025 06:00:56 +0000
Manifest next update: Fri 14 Nov 2025 06:00:56 +0000
Files and hashes: 1: KEo1xF93T6_4QkXOEkvcZVx0Uos.crl (hash: MQgpNhMUrYoWu0njo+FJaC1SS4bVJxS0Vg7kWEzILyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7b:cd:82:a4:63:6e:41:72:32:7e:de:03:74:de:a0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284a35c45f774faff84245ce124bdc655c74528b
Validity
Not Before: Nov 13 06:00:56 2025 GMT
Not After : Nov 14 06:00:56 2025 GMT
Subject: CN=1c0192e5d0b9f6c93d3777c85e8680da142e793b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:d0:38:27:7c:ec:40:95:d5:33:73:68:bf:
1d:f5:51:61:7b:13:0c:f9:3b:f1:f7:d7:a6:a3:4b:
a9:05:75:2b:99:04:68:b1:63:a5:de:37:41:ae:13:
15:ab:fa:ed:0a:81:dc:77:f8:dc:04:99:de:ea:7a:
6c:bc:dd:8e:63:32:33:16:5b:1e:9c:99:52:d7:25:
bf:24:ae:10:b9:41:41:5e:e4:d4:d5:2a:28:a0:96:
e0:1b:32:f7:0b:5a:e2:b6:62:38:cb:83:6d:94:66:
8f:b1:b1:4e:73:31:85:92:d4:d0:bc:3a:8f:10:e7:
45:66:47:e5:0b:90:f0:72:ab:e3:f1:76:c8:19:e1:
ce:55:a2:4e:ad:75:a9:3a:a6:00:df:71:38:82:92:
91:5c:03:61:f3:9d:af:7e:24:97:04:b4:21:15:b3:
01:65:2a:4e:71:51:4d:48:bf:1f:ef:81:a3:13:48:
f0:5a:0e:83:e9:91:e1:5e:9a:e7:ec:55:2c:21:0d:
20:9c:a8:5f:df:2b:8e:0e:64:ee:3d:bd:d9:25:96:
56:36:5b:ce:bf:31:a3:00:6d:e6:f5:2c:bb:ab:91:
eb:1c:c1:a6:43:e2:a8:83:fd:7b:63:27:25:72:87:
e7:13:7d:82:81:33:47:b8:79:ab:f7:ab:f0:24:51:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:01:92:E5:D0:B9:F6:C9:3D:37:77:C8:5E:86:80:DA:14:2E:79:3B
X509v3 Authority Key Identifier:
keyid:28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:37:7f:ad:49:01:ce:19:c6:aa:f6:73:90:52:36:7b:b7:59:
cf:83:b0:b2:3e:60:27:ca:5f:98:f3:ed:83:73:2e:6c:7d:10:
d9:4c:03:10:9b:f2:d5:e2:99:28:91:a9:21:b4:34:2d:c1:aa:
8b:9d:b4:c7:c8:ff:0a:a8:82:0f:4e:0e:5c:b6:88:d9:af:39:
72:d3:86:80:be:1d:57:c0:53:0e:6a:19:66:3f:53:cf:79:f1:
3a:aa:21:a9:d4:d5:60:b4:2d:c7:1a:92:d5:8e:ec:37:32:e2:
84:2c:4f:40:fc:22:f9:88:27:9e:65:0e:62:b0:13:b1:98:6d:
6e:64:32:be:10:21:68:13:78:47:f0:40:b5:53:3e:80:7d:a4:
42:ae:f9:66:b0:9c:8b:d0:62:dc:ab:bb:2b:0f:87:24:93:03:
63:c7:30:4f:7f:ab:9d:ee:3e:83:c6:99:06:88:dd:11:a3:46:
37:b9:04:cd:22:08:30:9c:48:e6:83:d6:4d:90:13:85:d2:3b:
dd:bd:29:72:36:42:21:e9:3e:42:b9:e2:d0:8f:0d:d5:ed:fe:
6f:6f:ca:28:6d:55:aa:e4:cc:d8:2f:9b:91:98:5a:b3:82:ae:
74:fa:ec:f3:12:79:ec:e0:af:cd:6b:e9:78:43:a6:0e:26:e9:
4b:c8:c6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:30:17 2026 by rpki-client