Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
File: UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft (raw, json)
Hash identifier: JBwOWFv/YGN1EFPC7462jtmfaC6OJ1g9p/lnugJY5RE=
Subject key identifier: F7:06:FC:A9:9B:F1:80:B6:CE:BC:2E:27:C3:E5:6A:68:71:7A:77:8A
Authority key identifier: 52:D2:ED:8C:49:F5:01:BF:32:99:1C:64:23:C2:AC:EF:AF:02:49:69
Certificate issuer: /CN=52d2ed8c49f501bf32991c6423c2acefaf024969
Certificate serial: 0196F6CC2EE07A8DF49F51D740B4738C4B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
Manifest number: 01C7
Signing time: Thu 22 May 2025 07:01:38 +0000
Manifest this update: Thu 22 May 2025 07:01:38 +0000
Manifest next update: Fri 23 May 2025 07:01:38 +0000
Files and hashes: 1: MKNa-STNNQIC43-YfYTvv0QElrI.roa (hash: 5nl1biPNK+Z/9Gdw9bn2cf84K3XezIkK/OVnwTz/dio=)
2: UtLtjEn1Ab8ymRxkI8Ks768CSWk.crl (hash: H64LGQQsp+3vizqRG1UC/r/aWXDdMZjHp0A2MGWzTf8=)
3: ckdLePhoueFIYZx4kGDlV51XN1k.roa (hash: aOA0NbOYFDXcRN0IYoUzlHYQw/Z3WdJX57vq3cILcdo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f6:cc:2e:e0:7a:8d:f4:9f:51:d7:40:b4:73:8c:4b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d2ed8c49f501bf32991c6423c2acefaf024969
Validity
Not Before: May 22 07:01:38 2025 GMT
Not After : May 23 07:01:38 2025 GMT
Subject: CN=f706fca99bf180b6cebc2e27c3e56a68717a778a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:04:82:d5:9a:b2:30:fa:10:77:63:0f:f7:5f:
6a:46:8a:90:a4:3e:b5:e4:b0:27:c3:c4:c3:e1:8f:
29:d1:96:ac:f6:de:b2:86:4b:f2:27:9f:12:4c:6d:
31:a0:62:45:5d:8a:eb:7d:70:90:e4:e3:28:82:77:
a7:5a:d4:08:a4:a9:ea:ca:8b:88:f8:d9:e4:07:7f:
fc:c9:0c:2f:f6:74:cb:c7:47:bb:f5:fd:bc:0d:41:
51:67:38:6d:cb:e7:51:8c:61:cb:30:0a:1c:f5:8c:
c9:46:ff:80:1e:e2:04:98:45:37:ad:92:ba:c1:14:
e5:b2:b2:b8:fc:67:26:b1:42:55:bf:34:b3:ed:b6:
70:88:6d:f7:0d:a3:24:79:a5:15:84:01:62:73:67:
31:09:6e:77:d4:e0:7b:96:27:35:f5:ef:57:06:fb:
7d:ba:1a:62:6a:28:b4:e5:69:cd:5a:aa:1a:d3:2a:
ac:fa:3a:7c:dc:5e:8e:5d:13:32:f0:c5:cf:3a:02:
8f:43:64:88:e1:23:80:3e:c5:87:8d:25:37:48:6a:
a8:75:90:af:8c:cc:a3:cc:ab:02:5e:ed:1a:d5:3b:
27:ea:5f:a6:ca:9f:a4:b7:6f:90:31:74:4b:82:f5:
51:ad:20:34:bb:ce:1f:1f:a7:54:8b:d1:c7:d0:3a:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:06:FC:A9:9B:F1:80:B6:CE:BC:2E:27:C3:E5:6A:68:71:7A:77:8A
X509v3 Authority Key Identifier:
keyid:52:D2:ED:8C:49:F5:01:BF:32:99:1C:64:23:C2:AC:EF:AF:02:49:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7b:bc:ab:6a:16:70:ed:81:8a:73:74:7a:4a:44:63:c3:a8:
36:e8:7a:08:8a:24:fd:55:20:a6:3d:3e:0c:f6:7b:9e:73:8f:
ae:84:fb:94:06:8a:c7:5f:1f:3e:0e:7c:b4:ab:9a:a8:97:39:
a2:87:13:d7:2d:df:9e:cf:d5:4c:a6:0e:19:d9:49:0e:91:b4:
32:97:7f:dd:10:f4:a0:8d:99:75:72:64:f1:dc:51:5f:e1:0c:
d3:1c:65:50:40:33:96:44:e8:d6:f0:88:b1:d7:7c:af:d6:3b:
82:e5:17:24:50:4c:23:f3:a6:6b:8b:3a:7d:a1:31:ac:be:79:
6a:c1:52:10:6d:c9:48:8d:76:b4:32:8d:02:20:17:41:e0:14:
27:fa:4a:07:05:60:49:3d:b9:e6:f4:bc:f4:3e:15:a5:33:d4:
35:2a:00:8d:a3:72:9a:69:ed:c8:04:70:96:93:90:4e:d4:c7:
18:06:08:bf:b2:24:18:74:36:1c:8c:92:87:72:78:a3:cd:63:
01:c0:b7:c0:8c:56:d3:b5:5b:01:cc:63:93:a7:bc:26:2f:ae:
47:4f:c0:d4:e0:cf:05:6e:a6:1a:0d:f2:a5:89:9c:54:0d:85:
b5:06:4b:e7:cd:56:11:07:11:42:fa:b6:76:ac:c1:58:37:77:
b4:35:d9:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZb2zC7geo30n1HXQLRzjEsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZDJlZDhjNDlmNTAxYmYzMjk5MWM2NDIzYzJhY2VmYWYw
MjQ5NjkwHhcNMjUwNTIyMDcwMTM4WhcNMjUwNTIzMDcwMTM4WjAzMTEwLwYDVQQD
EyhmNzA2ZmNhOTliZjE4MGI2Y2ViYzJlMjdjM2U1NmE2ODcxN2E3NzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwSC1ZqyMPoQd2MP919qRoqQpD61
5LAnw8TD4Y8p0Zas9t6yhkvyJ58STG0xoGJFXYrrfXCQ5OMognenWtQIpKnqyouI
+NnkB3/8yQwv9nTLx0e79f28DUFRZzhty+dRjGHLMAoc9YzJRv+AHuIEmEU3rZK6
wRTlsrK4/GcmsUJVvzSz7bZwiG33DaMkeaUVhAFic2cxCW531OB7lic19e9XBvt9
uhpiaii05WnNWqoa0yqs+jp83F6OXRMy8MXPOgKPQ2SI4SOAPsWHjSU3SGqodZCv
jMyjzKsCXu0a1Tsn6l+myp+kt2+QMXRLgvVRrSA0u84fH6dUi9HH0DoO7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcG/Kmb8YC2zrwuJ8PlamhxeneKMB8GA1UdIwQY
MBaAFFLS7YxJ9QG/MpkcZCPCrO+vAklpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXRMdGpFbjFBYjh5bVJ4a0k4S3M3NjhDU1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85ZTBjOGMtZTY2Ni00ZTcyLWFlMjEt
N2EwNGJjYmQwZTQ2LzEvVXRMdGpFbjFBYjh5bVJ4a0k4S3M3NjhDU1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85ZTBjOGMtZTY2Ni00ZTcyLWFlMjEtN2EwNGJjYmQwZTQ2
LzEvVXRMdGpFbjFBYjh5bVJ4a0k4S3M3NjhDU1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXu8q2oW
cO2BinN0ekpEY8OoNuh6CIok/VUgpj0+DPZ7nnOProT7lAaKx18fPg58tKuaqJc5
oocT1y3fns/VTKYOGdlJDpG0Mpd/3RD0oI2ZdXJk8dxRX+EM0xxlUEAzlkTo1vCI
sdd8r9Y7guUXJFBMI/Oma4s6faExrL55asFSEG3JSI12tDKNAiAXQeAUJ/pKBwVg
ST255vS89D4VpTPUNSoAjaNymmntyARwlpOQTtTHGAYIv7IkGHQ2HIySh3J4o81j
AcC3wIxW07VbAcxjk6e8Ji+uR0/A1ODPBW6mGg3ypYmcVA2FtQZL581WEQcRQvq2
dqzBWDd3tDXZhw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:10:28 2025 by rpki-client