Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
File: 5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft (raw, json)
Hash identifier: mZskeq3eZlqDMYFgeotIAy9lztvgOATTsnmNsdhZGZQ=
Subject key identifier: 80:14:E4:47:3A:3C:66:51:B0:A6:14:13:F1:BC:98:04:88:8C:2C:56
Authority key identifier: E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
Certificate issuer: /CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Certificate serial: 0199A31450A51360783579DC495FAC52D79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
Manifest number: 09C7
Signing time: Thu 02 Oct 2025 04:00:41 +0000
Manifest this update: Thu 02 Oct 2025 04:00:41 +0000
Manifest next update: Fri 03 Oct 2025 04:00:41 +0000
Files and hashes: 1: 5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl (hash: ACv9bVS82dqKQBysReIKc1krLZZ9xNHNAJ4OZAHYQYA=)
2: 6xUnoc1wAnSrf2dpU2UTzibFAZU.roa (hash: tiXyyLUhxSiIfoFFtQDRMAVp44XARQDTShxLyIGBRKM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a3:14:50:a5:13:60:78:35:79:dc:49:5f:ac:52:d7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Validity
Not Before: Oct 2 04:00:41 2025 GMT
Not After : Oct 3 04:00:41 2025 GMT
Subject: CN=8014e4473a3c6651b0a61413f1bc9804888c2c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:00:73:de:11:fc:03:04:d3:ed:7f:c6:00:
ba:31:54:70:85:1c:af:ed:bd:21:f8:17:87:93:87:
0f:d7:3c:97:89:d1:d1:b6:7f:c8:32:af:f0:e4:3e:
9b:88:96:c6:c0:04:29:a2:7d:96:6a:f1:da:e5:dc:
0b:5f:f5:fc:7a:83:b9:4b:f7:f6:9c:1d:7b:ac:c9:
60:56:31:5c:a4:58:a6:f6:9c:3c:fe:38:e2:11:8d:
a7:ea:13:23:2b:d4:b4:56:c4:fe:7e:8e:a1:2e:09:
d5:c7:7a:4b:82:c1:75:d6:0c:68:c5:24:06:8e:4e:
10:6b:9c:b9:7a:7f:c3:03:67:03:29:6c:8b:2b:b0:
46:48:2c:d9:f7:dc:d6:65:37:2d:da:38:57:39:ad:
46:43:65:d9:2c:87:60:de:ef:c5:f9:e5:7a:8c:57:
9e:e5:43:8f:4e:10:c7:67:68:84:0a:b1:53:59:5f:
d3:ba:f7:19:e6:d8:aa:99:70:ae:bb:0b:af:4f:51:
73:fb:3f:33:80:06:6b:85:d1:f4:f6:0f:a6:cf:8f:
c4:15:48:57:10:f8:e9:f1:d2:8b:39:de:16:ab:62:
77:fd:3e:8e:fc:6a:3f:d3:22:1d:30:8b:34:f3:7c:
f8:90:8d:07:47:71:43:34:b1:17:d1:40:ca:dd:66:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:14:E4:47:3A:3C:66:51:B0:A6:14:13:F1:BC:98:04:88:8C:2C:56
X509v3 Authority Key Identifier:
keyid:E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:32:5d:2b:b5:36:f1:01:a0:20:7b:c8:c1:86:13:21:98:42:
de:f2:a4:09:25:1d:05:23:17:9b:a8:08:9f:d8:5b:15:f1:08:
28:d8:6b:7b:6f:49:c5:37:54:a9:1e:87:be:b7:e5:d1:92:8f:
38:11:6e:4c:19:b1:ec:f3:2f:ad:aa:cc:7d:da:1c:77:29:a5:
f8:17:1b:a0:4a:4c:bc:92:e8:5a:03:77:bb:ee:db:ea:ff:12:
3a:31:c8:b0:43:67:fe:e6:e2:30:ad:35:70:11:0d:46:df:08:
5f:bb:b4:5e:e4:33:09:05:35:5f:38:ce:41:28:1c:31:88:51:
ec:4c:71:bf:d8:32:59:0f:87:21:0c:e5:73:e4:05:2b:23:41:
f3:0e:39:83:71:87:4a:cb:2f:b3:e8:e8:b8:b4:38:7e:a5:98:
ca:1b:c2:41:65:ff:7f:0c:b7:cb:e7:0b:f4:b9:7b:81:8d:ff:
0b:3f:72:cc:6c:f3:79:5e:e8:e8:01:c2:ec:6d:e1:d5:a4:61:
1e:03:3b:a2:77:7e:7a:ca:74:ba:f1:83:12:8d:e7:11:a0:51:
63:42:df:b5:73:7c:a0:05:37:5c:1d:97:16:44:e0:6d:0b:6b:
81:4b:ea:4c:d7:5d:5e:fc:4d:8c:7f:7d:ea:09:cd:6c:06:9f:
1f:70:be:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZmjFFClE2B4NXncSV+sUtefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDMyYTNlMThiODRlZTNjNTRlMzRmYTY3ZGM2OGVmMTlk
MmI3YjMwHhcNMjUxMDAyMDQwMDQxWhcNMjUxMDAzMDQwMDQxWjAzMTEwLwYDVQQD
Eyg4MDE0ZTQ0NzNhM2M2NjUxYjBhNjE0MTNmMWJjOTgwNDg4OGMyYzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVQAc94R/AME0+1/xgC6MVRwhRyv
7b0h+BeHk4cP1zyXidHRtn/IMq/w5D6biJbGwAQpon2WavHa5dwLX/X8eoO5S/f2
nB17rMlgVjFcpFim9pw8/jjiEY2n6hMjK9S0VsT+fo6hLgnVx3pLgsF11gxoxSQG
jk4Qa5y5en/DA2cDKWyLK7BGSCzZ99zWZTct2jhXOa1GQ2XZLIdg3u/F+eV6jFee
5UOPThDHZ2iECrFTWV/TuvcZ5tiqmXCuuwuvT1Fz+z8zgAZrhdH09g+mz4/EFUhX
EPjp8dKLOd4Wq2J3/T6O/Go/0yIdMIs083z4kI0HR3FDNLEX0UDK3WbMKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAU5Ec6PGZRsKYUE/G8mASIjCxWMB8GA1UdIwQY
MBaAFOTTKj4YuE7jxU40+mfcaO8Z0rezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lMDM4MDgtZDJkYi00MGQ5LTgxZjQt
ODdjMmU4ZjM5MTRlLzEvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lMDM4MDgtZDJkYi00MGQ5LTgxZjQtODdjMmU4ZjM5MTRl
LzEvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDJdK7U2
8QGgIHvIwYYTIZhC3vKkCSUdBSMXm6gIn9hbFfEIKNhre29JxTdUqR6Hvrfl0ZKP
OBFuTBmx7PMvrarMfdocdyml+BcboEpMvJLoWgN3u+7b6v8SOjHIsENn/ubiMK01
cBENRt8IX7u0XuQzCQU1XzjOQSgcMYhR7Exxv9gyWQ+HIQzlc+QFKyNB8w45g3GH
Sssvs+jouLQ4fqWYyhvCQWX/fwy3y+cL9Ll7gY3/Cz9yzGzzeV7o6AHC7G3h1aRh
HgM7ond+esp0uvGDEo3nEaBRY0LftXN8oAU3XB2XFkTgbQtrgUvqTNddXvxNjH99
6gnNbAafH3C+dw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:24 2025 by rpki-client