Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
File: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft (raw, json)
Hash identifier: I15pGTfLvEX2PwL/MfKuXmUOM0gLhk0cufu+zm0Tqp8=
Subject key identifier: D4:13:FB:9D:B7:7B:33:64:A9:7B:E2:63:6E:C8:97:F1:89:0D:6B:B5
Authority key identifier: 2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
Certificate issuer: /CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Certificate serial: 019B07474AE25B65CFA59B2775B7FED7A1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
Manifest number: 067A
Signing time: Wed 10 Dec 2025 08:01:11 +0000
Manifest this update: Wed 10 Dec 2025 08:01:11 +0000
Manifest next update: Thu 11 Dec 2025 08:01:11 +0000
Files and hashes: 1: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl (hash: h+/URzkEC9/MLHvuPf037z0n27pw5OYXIBfLxmkkU/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:07:47:4a:e2:5b:65:cf:a5:9b:27:75:b7:fe:d7:a1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Validity
Not Before: Dec 10 08:01:11 2025 GMT
Not After : Dec 11 08:01:11 2025 GMT
Subject: CN=d413fb9db77b3364a97be2636ec897f1890d6bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:bc:2b:fd:cd:cb:70:b5:c2:c6:66:f1:57:
df:b1:5e:c7:81:b6:3b:8c:06:7e:a1:59:62:de:31:
0c:49:48:c4:10:20:50:8b:3b:e4:91:61:96:02:86:
cb:7e:a5:60:7c:bf:f0:ec:d0:93:69:bf:9a:34:ec:
cf:a3:b3:e1:a8:75:a3:6c:e3:f6:4d:b7:26:71:f2:
09:9c:fd:33:e9:9e:06:a5:0d:8f:67:fb:3b:db:ab:
06:a0:72:32:85:b5:48:ad:80:61:ac:96:44:1e:43:
47:68:33:d8:9f:3d:69:7f:30:be:62:ae:e7:7f:22:
0f:9d:8a:12:b0:2a:42:da:78:d1:2f:9a:fc:58:1d:
41:79:eb:6b:b5:e6:09:94:e8:5a:93:46:eb:97:98:
5c:88:eb:64:fe:81:15:29:ac:46:36:2e:16:b1:f3:
14:48:e8:6f:fe:46:8b:6c:a0:06:0e:f2:8b:4e:63:
b3:76:63:dc:9e:5e:ea:c1:f5:e2:b7:46:17:80:f7:
e5:f9:48:95:db:c5:17:f2:63:a5:bd:92:0e:3c:f1:
1d:60:1e:cd:97:a9:4a:50:49:d6:d8:28:16:ee:c4:
33:1a:39:c3:50:e1:cf:c6:44:93:dd:1e:49:fa:ba:
ff:1f:eb:70:dd:f2:0e:7f:a1:9c:3f:78:d1:e7:ef:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:13:FB:9D:B7:7B:33:64:A9:7B:E2:63:6E:C8:97:F1:89:0D:6B:B5
X509v3 Authority Key Identifier:
keyid:2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d6:83:a8:d3:40:aa:37:79:4d:5c:13:64:e5:02:3f:1e:fb:
b8:d4:5c:bf:a2:91:5e:27:55:6e:27:85:fd:49:5f:af:a3:aa:
df:14:eb:07:32:b9:14:2c:39:f8:24:ee:bc:c0:8a:38:f0:cc:
91:62:59:45:f0:9b:e8:f2:27:76:e9:b3:49:ff:50:08:71:2d:
1e:e2:29:bb:74:b3:c1:07:94:c4:37:05:fd:9f:da:0c:c0:ee:
ca:be:10:97:10:f5:9b:e2:00:47:35:5a:09:c8:1c:c2:0e:b3:
ca:2e:10:a1:ae:f6:f7:ff:79:1f:2c:e8:b9:9a:d6:eb:7b:91:
69:e1:7a:29:2f:84:5c:a6:04:c5:70:87:ea:52:97:d2:43:aa:
8d:c2:bf:1c:b0:b9:70:80:1c:b3:72:12:d6:39:28:1e:97:b3:
e5:2c:64:2b:b9:17:bf:d3:cf:62:f5:13:49:8e:49:2a:e3:52:
ef:c1:24:30:bb:4d:44:1f:81:20:f6:7e:cc:1a:9d:ef:24:a9:
63:00:5e:bb:ee:9c:9d:5b:f3:3b:a8:b5:3e:e6:5b:b1:7c:63:
ed:fc:f0:44:4c:8a:ff:9e:78:9d:17:ea:81:44:69:29:2a:04:
01:f9:5e:d1:04:d5:00:1e:c0:71:69:54:ea:d7:09:c6:af:42:
14:e7:0c:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsHR0riW2XPpZsndbf+16HCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOWMwOGJmMjFjN2Y1OTg4NWJiNWE2ZDQ4MWZmYzMwNjc5
NjlhMTkwHhcNMjUxMjEwMDgwMTExWhcNMjUxMjExMDgwMTExWjAzMTEwLwYDVQQD
EyhkNDEzZmI5ZGI3N2IzMzY0YTk3YmUyNjM2ZWM4OTdmMTg5MGQ2YmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTy8K/3Ny3C1wsZm8VffsV7HgbY7
jAZ+oVli3jEMSUjEECBQizvkkWGWAobLfqVgfL/w7NCTab+aNOzPo7PhqHWjbOP2
TbcmcfIJnP0z6Z4GpQ2PZ/s726sGoHIyhbVIrYBhrJZEHkNHaDPYnz1pfzC+Yq7n
fyIPnYoSsCpC2njRL5r8WB1BeetrteYJlOhak0brl5hciOtk/oEVKaxGNi4WsfMU
SOhv/kaLbKAGDvKLTmOzdmPcnl7qwfXit0YXgPfl+UiV28UX8mOlvZIOPPEdYB7N
l6lKUEnW2CgW7sQzGjnDUOHPxkST3R5J+rr/H+tw3fIOf6GcP3jR5+/XfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQT+523ezNkqXviY27Il/GJDWu1MB8GA1UdIwQY
MBaAFCycCL8hx/WYhbtabUgf/DBnlpoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEp3SXZ5SEg5WmlGdTFwdFNCXzhNR2VXbWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xMDk1NTgtNDMxOS00NmMwLTlhYjIt
MTJlYTEwNzE0YTU2LzEvTEp3SXZ5SEg5WmlGdTFwdFNCXzhNR2VXbWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xMDk1NTgtNDMxOS00NmMwLTlhYjItMTJlYTEwNzE0YTU2
LzEvTEp3SXZ5SEg5WmlGdTFwdFNCXzhNR2VXbWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtaDqNNA
qjd5TVwTZOUCPx77uNRcv6KRXidVbieF/Ulfr6Oq3xTrBzK5FCw5+CTuvMCKOPDM
kWJZRfCb6PIndumzSf9QCHEtHuIpu3SzwQeUxDcF/Z/aDMDuyr4QlxD1m+IARzVa
Ccgcwg6zyi4Qoa729/95HyzouZrW63uRaeF6KS+EXKYExXCH6lKX0kOqjcK/HLC5
cIAcs3IS1jkoHpez5SxkK7kXv9PPYvUTSY5JKuNS78EkMLtNRB+BIPZ+zBqd7ySp
YwBeu+6cnVvzO6i1PuZbsXxj7fzwREyK/554nRfqgURpKSoEAfle0QTVAB7AcWlU
6tcJxq9CFOcMag==
-----END CERTIFICATE-----
Generated at Fri Mar 20 08:29:33 2026 by rpki-client