Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
File: CDMy0vYHhPErstIQrsgKtBu_EVk.mft (raw, json)
Hash identifier: D4451Dtx9xMmnu7KbPHPczDvx+yu19h9Ii4a2Q39p+s=
Subject key identifier: 25:77:4B:9E:E5:0E:A8:72:74:CB:D7:9B:B0:76:BC:B5:88:FA:1B:56
Authority key identifier: 08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59
Certificate issuer: /CN=083332d2f60784f12bb2d210aec80ab41bbf1159
Certificate serial: 01972FDF7E67FB3FF4199C1BC0E549842D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
Manifest number: 0D63
Signing time: Mon 02 Jun 2025 09:01:05 +0000
Manifest this update: Mon 02 Jun 2025 09:01:05 +0000
Manifest next update: Tue 03 Jun 2025 09:01:05 +0000
Files and hashes: 1: CDMy0vYHhPErstIQrsgKtBu_EVk.crl (hash: X1RIPlc5xQQclFcCMR4Hh7HffoCVqxn3Gq8ncnW2ZMw=)
2: q4mxRw2cAHFj9M7Ih5d-g_-dD-s.roa (hash: 8Y6K+beCDjCkbb41/Xu0GZqKC19CcyaH+HxETt6eMGQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:df:7e:67:fb:3f:f4:19:9c:1b:c0:e5:49:84:2d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083332d2f60784f12bb2d210aec80ab41bbf1159
Validity
Not Before: Jun 2 09:01:05 2025 GMT
Not After : Jun 3 09:01:05 2025 GMT
Subject: CN=25774b9ee50ea87274cbd79bb076bcb588fa1b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:91:8f:6b:a2:44:1b:b2:d1:6f:04:2c:4c:
8d:55:b4:d9:19:27:53:2a:29:3e:70:0f:89:b5:16:
e8:b1:b2:76:00:69:d0:31:1a:c9:1b:bb:a9:9f:ba:
c7:6c:ea:77:7a:f4:3e:d3:30:01:f2:d4:73:5e:bc:
20:0b:28:53:46:07:e3:cc:2e:61:dd:83:f6:0b:23:
3f:a5:76:f6:d6:ef:df:cf:4d:09:7f:48:b3:d9:9a:
91:d6:d4:18:2e:cb:85:c6:80:69:ef:1f:c2:22:00:
f6:e9:03:85:9d:2d:91:2a:aa:99:a5:05:cb:45:1c:
9b:5e:aa:97:9e:d5:c0:cb:02:5f:c7:ce:2c:d4:46:
0e:e6:87:fc:8a:26:5e:fc:af:c3:ba:26:37:04:39:
db:1a:87:9d:fa:70:82:46:69:c4:f2:9e:39:73:99:
98:66:ee:e7:3f:1a:1a:26:f3:d5:f1:11:8d:02:cd:
37:19:7c:93:ff:32:1d:19:1a:ba:c3:0d:13:95:89:
03:6f:36:31:80:0a:92:90:0a:0b:a1:ac:75:f6:7d:
1a:03:a1:86:3f:c3:8f:16:9e:89:66:42:7a:79:96:
ee:44:64:5e:b3:e5:d2:8a:cb:cd:6c:29:d5:34:a3:
82:df:55:88:b4:1d:70:69:4c:c3:09:6c:fd:00:d6:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:77:4B:9E:E5:0E:A8:72:74:CB:D7:9B:B0:76:BC:B5:88:FA:1B:56
X509v3 Authority Key Identifier:
keyid:08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:43:44:fc:66:b5:80:4f:4b:fa:fc:fe:81:99:82:b0:78:69:
4e:bc:d0:b1:71:5a:9d:d1:7d:80:af:f2:44:39:ca:b3:96:e2:
49:db:fa:d9:f0:c3:92:06:78:a0:b9:c7:ef:f5:2a:b0:bc:03:
4a:33:ee:c0:c3:57:c0:90:de:a4:c9:9a:3f:df:6b:96:d2:78:
37:6d:e5:f5:3c:1a:8c:b5:b2:2d:e0:aa:72:ac:1a:63:61:d8:
f7:44:4f:e6:b8:16:ff:22:04:83:a9:67:4c:ed:db:07:5a:ed:
20:74:81:b2:0e:dd:cd:57:86:dc:fe:dd:1a:c6:21:a2:be:bb:
42:70:a8:04:9e:35:ed:49:cd:d0:56:f7:a3:e9:c0:16:32:47:
77:f0:18:d2:6b:a1:62:64:b8:54:82:a7:46:bd:51:48:e3:47:
0f:0c:ed:5d:2a:c7:ff:4d:40:b3:e1:83:e5:30:2d:f9:f8:a7:
9d:8f:05:ec:2e:12:b8:5a:fb:ac:33:9a:a8:a2:3c:32:6c:88:
f0:25:79:83:6d:b0:b8:d2:49:95:00:b4:24:69:9a:f3:48:fb:
ae:f9:33:5f:71:54:7d:7a:b0:87:56:6a:66:69:96:1c:a7:46:
b1:4e:e3:e1:55:cb:8b:c0:b9:e4:da:08:1f:64:79:df:d0:f8:
6e:bb:ee:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZcv335n+z/0GZwbwOVJhC0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzMzMmQyZjYwNzg0ZjEyYmIyZDIxMGFlYzgwYWI0MWJi
ZjExNTkwHhcNMjUwNjAyMDkwMTA1WhcNMjUwNjAzMDkwMTA1WjAzMTEwLwYDVQQD
EygyNTc3NGI5ZWU1MGVhODcyNzRjYmQ3OWJiMDc2YmNiNTg4ZmExYjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFaRj2uiRBuy0W8ELEyNVbTZGSdT
Kik+cA+JtRbosbJ2AGnQMRrJG7upn7rHbOp3evQ+0zAB8tRzXrwgCyhTRgfjzC5h
3YP2CyM/pXb21u/fz00Jf0iz2ZqR1tQYLsuFxoBp7x/CIgD26QOFnS2RKqqZpQXL
RRybXqqXntXAywJfx84s1EYO5of8iiZe/K/DuiY3BDnbGoed+nCCRmnE8p45c5mY
Zu7nPxoaJvPV8RGNAs03GXyT/zIdGRq6ww0TlYkDbzYxgAqSkAoLoax19n0aA6GG
P8OPFp6JZkJ6eZbuRGRes+XSisvNbCnVNKOC31WItB1waUzDCWz9ANaeJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCV3S57lDqhydMvXm7B2vLWI+htWMB8GA1UdIwQY
MBaAFAgzMtL2B4TxK7LSEK7ICrQbvxFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RNeTB2WUhoUEVyc3RJUXJzZ0t0QnVfRVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zZWExYWUtMWY4Ny00Y2ZiLTk0MTIt
ZGY1NDJjZGMzOTc2LzEvQ0RNeTB2WUhoUEVyc3RJUXJzZ0t0QnVfRVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8zZWExYWUtMWY4Ny00Y2ZiLTk0MTItZGY1NDJjZGMzOTc2
LzEvQ0RNeTB2WUhoUEVyc3RJUXJzZ0t0QnVfRVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkNE/Ga1
gE9L+vz+gZmCsHhpTrzQsXFandF9gK/yRDnKs5biSdv62fDDkgZ4oLnH7/UqsLwD
SjPuwMNXwJDepMmaP99rltJ4N23l9TwajLWyLeCqcqwaY2HY90RP5rgW/yIEg6ln
TO3bB1rtIHSBsg7dzVeG3P7dGsYhor67QnCoBJ417UnN0Fb3o+nAFjJHd/AY0muh
YmS4VIKnRr1RSONHDwztXSrH/01As+GD5TAt+finnY8F7C4SuFr7rDOaqKI8MmyI
8CV5g22wuNJJlQC0JGma80j7rvkzX3FUfXqwh1ZqZmmWHKdGsU7j4VXLi8C55NoI
H2R539D4brvuXg==
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:05:14 2025 by rpki-client