Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
File: SmO14kps7e29L-j2bXl6s9jqpMk.mft (raw, json)
Hash identifier: hNExZsXkSvgS5uCRuPLqPxDpZ+pa3Xmqt5t3TzBqJUY=
Subject key identifier: DB:C9:17:82:57:D2:7A:AB:A5:6C:6F:A2:F5:B9:FD:92:B5:9D:33:9B
Authority key identifier: 4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9
Certificate issuer: /CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
Certificate serial: 019A52D2752AFF8803FAA7F42A470B5767A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
Manifest number: 1709
Signing time: Wed 05 Nov 2025 07:01:55 +0000
Manifest this update: Wed 05 Nov 2025 07:01:55 +0000
Manifest next update: Thu 06 Nov 2025 07:01:55 +0000
Files and hashes: 1: SmO14kps7e29L-j2bXl6s9jqpMk.crl (hash: 36RBU855VScdQjPmMWNAvj4P30a5lgMeDefYGh2WLzQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:75:2a:ff:88:03:fa:a7:f4:2a:47:0b:57:67:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
Validity
Not Before: Nov 5 07:01:55 2025 GMT
Not After : Nov 6 07:01:55 2025 GMT
Subject: CN=dbc9178257d27aaba56c6fa2f5b9fd92b59d339b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:a1:3c:3f:5b:85:a2:d8:64:6e:a1:f9:75:
49:9e:35:20:b0:f8:d3:0c:d4:10:9b:99:df:9e:1a:
1c:3f:3b:31:58:67:b2:60:27:7a:72:22:6b:b2:6a:
03:bf:36:e1:3b:4e:a8:35:6e:fb:ef:da:b9:b0:54:
e7:c9:ed:6e:80:a7:67:ff:5e:5c:47:3c:63:2f:8a:
6d:4d:8e:8d:52:ec:f9:c8:f0:4f:eb:45:5a:d0:96:
07:ec:5d:47:a7:3b:1b:07:eb:ac:d6:08:6e:65:3c:
be:77:66:3f:06:85:0c:76:1b:eb:76:f0:5b:a8:55:
71:5b:0c:b7:a7:b4:8b:ac:60:04:11:68:87:54:33:
98:d8:32:83:c8:03:07:31:ea:74:cc:0a:1d:62:9a:
d5:72:df:8f:42:27:34:3f:0d:4a:cf:be:52:f8:37:
05:43:f4:56:d5:3a:1e:ec:a4:03:ef:0f:84:8d:0a:
77:1c:2c:dc:b6:04:7d:d1:55:96:e2:fe:7c:b0:cb:
38:b1:fb:c9:4f:af:a4:f1:f7:0a:a0:ba:10:ea:24:
06:34:ff:22:dd:7a:32:34:0f:5f:8d:eb:60:e7:06:
52:ad:c3:8a:30:8b:b3:c7:29:3f:60:b8:bf:cb:34:
70:1b:cb:aa:49:39:cc:b7:25:17:24:37:bd:86:52:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C9:17:82:57:D2:7A:AB:A5:6C:6F:A2:F5:B9:FD:92:B5:9D:33:9B
X509v3 Authority Key Identifier:
keyid:4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a9:8c:2a:7c:ab:9a:20:4c:2c:af:7a:42:ba:9f:95:20:48:
8d:2b:a4:bb:ec:16:fc:52:ca:3b:97:11:5e:22:d8:db:3c:f3:
b9:f9:d6:d2:79:94:40:fd:8e:bb:df:5c:cf:4c:32:23:c8:0a:
52:c5:e3:bb:7e:7f:13:53:c8:6f:d4:9e:39:aa:66:c0:0d:db:
05:7f:d1:09:d3:c3:56:b8:5a:df:bd:26:c6:1c:ae:ee:c5:4b:
d9:9a:d7:93:7a:ff:b2:81:45:95:ec:55:46:a9:a3:f9:38:b7:
5b:b7:06:82:00:41:0d:23:e2:e9:95:02:fb:71:22:f3:b1:79:
aa:c4:3b:8a:cc:50:8d:17:c5:e8:8c:50:2d:dd:60:a5:69:88:
50:78:37:f0:00:fe:c8:91:45:e0:ac:ae:5b:53:41:41:31:27:
a7:74:76:2c:b7:75:bb:69:71:15:54:af:24:bb:19:88:3d:63:
1e:0f:b7:0b:10:8d:20:29:f5:a7:64:7c:b4:94:f7:fe:eb:da:
a6:8c:62:f6:5e:e1:44:b0:2d:bc:ef:0d:a1:95:93:33:e1:2d:
73:cc:5f:7d:38:cd:9e:a7:c6:87:86:8b:9a:5e:da:2f:ea:2d:
ae:6a:ce:07:ff:4e:59:59:0d:35:dc:42:c0:33:0d:09:16:1e:
00:65:fb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:31:17 2026 by rpki-client