Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
File: CEaS7DDzfffcteR600auvetx_DA.mft (raw, json)
Hash identifier: t9KraTtWn5vI5s4zFRt5E6wwyHSESyDXdP4NCotA8Vg=
Subject key identifier: 39:51:A7:FD:7D:E2:29:38:85:40:8C:85:FA:0C:22:D5:D8:55:D3:3C
Authority key identifier: 08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
Certificate issuer: /CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Certificate serial: 019F235A2EE73CB7F7206D98DCF43D8DC234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
Manifest number: 1989
Signing time: Thu 02 Jul 2026 15:02:20 +0000
Manifest this update: Thu 02 Jul 2026 15:02:20 +0000
Manifest next update: Fri 03 Jul 2026 15:02:20 +0000
Files and hashes: 1: CEaS7DDzfffcteR600auvetx_DA.crl (hash: Idc/xrhSEhcOcBKWJcqs7g+EGaIjs0XgaT24v+/312U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:5a:2e:e7:3c:b7:f7:20:6d:98:dc:f4:3d:8d:c2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Validity
Not Before: Jul 2 15:02:20 2026 GMT
Not After : Jul 3 15:02:20 2026 GMT
Subject: CN=3951a7fd7de2293885408c85fa0c22d5d855d33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:35:e9:1b:a4:ca:13:f0:30:e7:3b:fc:ec:
84:31:3c:31:23:e9:1b:46:8b:f2:7a:8b:3b:90:3e:
0c:f7:3d:12:0e:96:cf:e5:84:d8:a1:cc:6c:74:f6:
97:67:9c:f2:85:9c:ba:df:ad:2a:44:a6:5a:c9:93:
7c:83:2e:46:82:77:d0:7f:a1:87:4d:72:68:24:75:
9d:1a:9d:a0:d5:8c:f3:79:a4:75:b0:16:ae:0c:e6:
fa:02:e1:8c:26:02:b5:25:5d:1c:3a:08:b9:a3:40:
89:cb:e0:e4:f0:90:4c:59:ef:da:1d:7e:10:b6:7e:
35:28:04:b4:1a:1d:c4:84:8f:10:04:f5:95:c5:89:
d8:8e:bc:2f:37:16:f1:af:1d:63:4a:63:b8:f3:f6:
0c:d2:5f:e9:d9:22:80:e2:75:c3:3f:3c:6e:6c:db:
8e:ed:96:0f:70:3d:e6:73:2d:50:33:99:a2:fc:2c:
0f:65:b4:64:b8:12:00:4c:51:85:52:85:fa:da:1c:
d6:d7:3e:27:7b:3d:fa:1b:ee:87:79:03:c8:ba:08:
dc:99:17:4b:97:a4:ec:8d:7b:4c:a2:e2:c9:9f:3a:
e6:2a:d1:c2:0c:67:9f:54:08:06:7b:e8:e8:6e:be:
67:7d:ed:09:89:65:5b:49:52:83:7f:b1:95:d7:91:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:51:A7:FD:7D:E2:29:38:85:40:8C:85:FA:0C:22:D5:D8:55:D3:3C
X509v3 Authority Key Identifier:
keyid:08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:69:8e:d8:45:8b:d2:69:87:38:cf:b8:e2:ff:7e:48:5c:b3:
39:94:df:95:6a:ad:e7:ec:4f:70:c9:ec:d4:b1:57:09:95:60:
1f:2a:00:4c:d0:37:e1:ec:28:ed:c1:39:f9:ea:99:7e:86:11:
c8:9e:6d:e7:81:fc:bd:76:4c:ea:50:28:e3:d7:48:92:37:5a:
fa:81:50:74:b8:ad:11:2f:5e:fb:50:b5:57:50:24:82:5c:42:
df:3d:07:39:77:cb:39:53:5d:31:6b:63:95:62:db:8e:a6:94:
86:bd:b0:40:a0:22:9f:a6:a1:2c:a4:a7:ca:0f:f1:1e:08:37:
ce:57:46:21:db:7b:03:11:90:55:54:24:db:83:44:17:5b:43:
62:b7:7e:d0:1c:53:72:65:3e:30:15:89:73:48:8a:b9:e0:a5:
36:b3:fc:bc:bc:dd:31:39:82:4b:e1:5b:95:db:69:e7:5f:77:
d3:1e:fc:c5:db:d7:b2:ef:09:0f:21:19:f8:4f:92:26:b5:c7:
fa:16:33:21:0f:dc:28:9c:0e:ce:af:43:a3:06:a4:51:9d:1d:
d2:ee:24:c3:70:c3:57:cb:61:af:36:f3:7f:29:ce:fd:07:a0:
44:73:1a:9b:d8:4b:51:1b:7e:fc:34:af:d3:6e:91:fc:55:3e:
5c:eb:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:44 2026 by rpki-client