Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
File: S4UouKy8h0J2SlgajZeaGEKVZj4.mft (raw, json)
Hash identifier: mbqL7F1tNvmRq3Bp7sH+TNdmc1Obd1rglsd3thw7G2A=
Subject key identifier: 43:10:C7:E7:00:73:BE:5B:9B:18:23:63:EC:F3:29:51:D0:02:C2:73
Authority key identifier: 4B:85:28:B8:AC:BC:87:42:76:4A:58:1A:8D:97:9A:18:42:95:66:3E
Certificate issuer: /CN=4b8528b8acbc8742764a581a8d979a184295663e
Certificate serial: 019978CEB23FA2B751759E382F4253E1C891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4UouKy8h0J2SlgajZeaGEKVZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
Manifest number: 044D
Signing time: Tue 23 Sep 2025 23:00:35 +0000
Manifest this update: Tue 23 Sep 2025 23:00:35 +0000
Manifest next update: Wed 24 Sep 2025 23:00:35 +0000
Files and hashes: 1: S4UouKy8h0J2SlgajZeaGEKVZj4.crl (hash: S3ZK+Zlggg6lSydfDWQ73Nhsdnykclir5JUzK4Hsmv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:78:ce:b2:3f:a2:b7:51:75:9e:38:2f:42:53:e1:c8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8528b8acbc8742764a581a8d979a184295663e
Validity
Not Before: Sep 23 23:00:35 2025 GMT
Not After : Sep 24 23:00:35 2025 GMT
Subject: CN=4310c7e70073be5b9b182363ecf32951d002c273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:a4:60:73:5f:f3:0a:a8:ea:52:df:2a:28:
67:67:b5:78:70:4c:c3:61:d7:03:99:1f:7e:16:f8:
34:f2:0b:ce:dc:d1:3d:9f:34:7f:5a:b9:db:48:51:
51:f6:ee:f5:26:e1:44:d2:24:51:52:75:c3:c2:6f:
85:0b:30:7b:00:d2:74:9f:b7:e9:04:b6:73:6b:93:
7f:8f:21:bd:98:07:95:de:17:7c:0d:d7:3a:7a:45:
f2:1c:3a:7f:59:df:6b:fe:2d:bc:ef:94:86:20:fd:
8b:30:d8:9c:c5:66:bc:3a:00:85:ca:f2:10:fe:07:
84:28:00:6d:32:e0:b4:b4:b3:ce:39:ec:68:f6:dd:
39:61:69:0b:04:4e:3e:a2:95:dd:4e:e0:d9:cf:5b:
57:5a:1d:59:17:23:00:f7:d7:3f:5a:b9:7f:04:3f:
44:f5:19:dc:4c:24:16:ee:d3:db:74:ad:da:d8:4d:
f2:b8:9c:4c:d8:89:20:21:8f:2f:18:70:39:50:b7:
cb:95:d8:31:b2:a8:e5:ee:54:e1:ef:e0:8c:df:6a:
94:81:9e:f7:a5:78:ae:42:69:75:71:79:24:7d:50:
08:f5:fa:fe:d5:01:b2:65:dc:c1:aa:41:c7:fc:d4:
29:72:17:bf:91:36:45:07:bb:2a:4c:71:f8:40:3d:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:10:C7:E7:00:73:BE:5B:9B:18:23:63:EC:F3:29:51:D0:02:C2:73
X509v3 Authority Key Identifier:
keyid:4B:85:28:B8:AC:BC:87:42:76:4A:58:1A:8D:97:9A:18:42:95:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4UouKy8h0J2SlgajZeaGEKVZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f1:69:01:a6:3a:c9:ce:a1:80:0b:76:36:64:0f:cd:d7:89:
23:fa:db:d0:45:5e:4b:ae:d1:27:ae:23:78:5f:d8:dc:5c:f9:
c6:b8:31:5d:f1:cf:74:48:4f:f7:fd:b4:99:c4:62:df:79:44:
d2:c6:fa:d7:a8:39:5c:44:a4:8a:2a:4a:d0:3a:08:c5:4f:74:
fd:bc:d6:75:e6:ba:00:97:f5:ec:60:43:63:01:14:56:f4:d4:
44:95:7a:d2:d7:d4:13:58:2a:30:0f:50:f9:c6:a8:03:5d:06:
bb:c2:b5:ae:50:ed:45:f9:fd:f4:22:62:e9:50:d0:a5:f7:d7:
06:46:81:16:8e:58:18:8a:36:e0:ff:65:7d:90:2d:9d:d9:54:
05:83:55:00:2c:c9:93:aa:b8:e8:e3:3d:f8:78:f1:d3:64:47:
9b:9c:28:36:94:47:86:cd:bb:46:fc:dd:db:46:61:90:e1:82:
fa:c2:07:0c:f8:c6:82:50:8a:08:98:49:e3:d7:01:47:27:63:
2d:22:78:3e:39:58:e8:6b:7d:22:eb:15:56:c5:d6:5a:df:86:
3c:2e:cc:79:a3:22:8d:7a:88:46:cd:61:d3:75:23:41:d4:2a:
ed:41:f1:86:71:24:b8:ef:0e:e4:5d:ea:d6:6a:c1:84:1f:f1:
b9:7b:1d:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZl4zrI/ordRdZ44L0JT4ciRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiODUyOGI4YWNiYzg3NDI3NjRhNTgxYThkOTc5YTE4NDI5
NTY2M2UwHhcNMjUwOTIzMjMwMDM1WhcNMjUwOTI0MjMwMDM1WjAzMTEwLwYDVQQD
Eyg0MzEwYzdlNzAwNzNiZTViOWIxODIzNjNlY2YzMjk1MWQwMDJjMjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j6kYHNf8wqo6lLfKihnZ7V4cEzD
YdcDmR9+Fvg08gvO3NE9nzR/WrnbSFFR9u71JuFE0iRRUnXDwm+FCzB7ANJ0n7fp
BLZza5N/jyG9mAeV3hd8Ddc6ekXyHDp/Wd9r/i2875SGIP2LMNicxWa8OgCFyvIQ
/geEKABtMuC0tLPOOexo9t05YWkLBE4+opXdTuDZz1tXWh1ZFyMA99c/Wrl/BD9E
9RncTCQW7tPbdK3a2E3yuJxM2IkgIY8vGHA5ULfLldgxsqjl7lTh7+CM32qUgZ73
pXiuQml1cXkkfVAI9fr+1QGyZdzBqkHH/NQpche/kTZFB7sqTHH4QD2eBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMQx+cAc75bmxgjY+zzKVHQAsJzMB8GA1UdIwQY
MBaAFEuFKLisvIdCdkpYGo2XmhhClWY+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzRVb3VLeThoMEoyU2xnYWpaZWFHRUtWWmo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kNzc3ZTYtMGU1OC00MzQ1LWIwYTQt
NGNiZDIyOTE3ZDY1LzEvUzRVb3VLeThoMEoyU2xnYWpaZWFHRUtWWmo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9kNzc3ZTYtMGU1OC00MzQ1LWIwYTQtNGNiZDIyOTE3ZDY1
LzEvUzRVb3VLeThoMEoyU2xnYWpaZWFHRUtWWmo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfFpAaY6
yc6hgAt2NmQPzdeJI/rb0EVeS67RJ64jeF/Y3Fz5xrgxXfHPdEhP9/20mcRi33lE
0sb616g5XESkiipK0DoIxU90/bzWdea6AJf17GBDYwEUVvTURJV60tfUE1gqMA9Q
+caoA10Gu8K1rlDtRfn99CJi6VDQpffXBkaBFo5YGIo24P9lfZAtndlUBYNVACzJ
k6q46OM9+Hjx02RHm5woNpRHhs27Rvzd20ZhkOGC+sIHDPjGglCKCJhJ49cBRydj
LSJ4PjlY6Gt9IusVVsXWWt+GPC7MeaMijXqIRs1h03UjQdQq7UHxhnEkuO8O5F3q
1mrBhB/xuXsdHg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 03:15:13 2026 by rpki-client