Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.mft
File: 3VBysTiAwfG6hvzExAKX9dn0N3Q.mft (raw, json)
Hash identifier: ugmBNrr6HiPwkWOOb9o/rW7QyqpVNM2eTtkxugXskOA=
Subject key identifier: 50:66:57:46:91:F9:95:35:A2:08:F2:25:2F:04:B5:E6:58:9B:34:05
Authority key identifier: DD:50:72:B1:38:80:C1:F1:BA:86:FC:C4:C4:02:97:F5:D9:F4:37:74
Certificate issuer: /CN=dd5072b13880c1f1ba86fcc4c40297f5d9f43774
Certificate serial: 01979C724ACD74E3E069E6830A6E3B5581E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VBysTiAwfG6hvzExAKX9dn0N3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.mft
Manifest number: 15A8
Signing time: Mon 23 Jun 2025 11:00:25 +0000
Manifest this update: Mon 23 Jun 2025 11:00:25 +0000
Manifest next update: Tue 24 Jun 2025 11:00:25 +0000
Files and hashes: 1: 3VBysTiAwfG6hvzExAKX9dn0N3Q.crl (hash: lZpVDHn7xt+1CYFXfhsn792T2YAMPk8c9r0iynTNaTM=)
2: PJZXdpkwhKYbc-mgI8o-ftVhCug.roa (hash: SBqSW5ehFYdMdBJe2odGE82C7AsVO9/yZgJ8RXmPXUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:72:4a:cd:74:e3:e0:69:e6:83:0a:6e:3b:55:81:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5072b13880c1f1ba86fcc4c40297f5d9f43774
Validity
Not Before: Jun 23 11:00:25 2025 GMT
Not After : Jun 24 11:00:25 2025 GMT
Subject: CN=5066574691f99535a208f2252f04b5e6589b3405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9b:af:3e:7c:29:b7:f9:d6:11:e0:3e:3b:12:
b1:6c:11:27:ce:98:4c:72:27:c0:16:fa:83:bf:b4:
7d:be:68:d4:e3:3a:23:7a:c2:cf:cc:74:e6:02:75:
29:8a:cb:15:bb:cf:1c:86:c5:45:2d:99:c9:f0:6c:
d5:82:73:9f:8a:87:8d:3f:cc:4a:4a:26:bc:77:73:
7f:f9:0a:2b:9f:b0:fc:1f:bd:18:6d:7b:b4:33:9f:
54:34:80:42:e1:97:81:87:9c:07:08:0e:48:99:54:
ce:4c:00:57:95:20:73:fb:76:7b:73:3d:cb:7b:59:
40:e8:1d:eb:52:e3:a2:d4:c3:8f:b9:19:e2:db:f8:
7f:bc:a6:bb:a4:e4:15:cf:94:f4:7c:d6:9b:86:1e:
40:0d:c9:50:d9:f0:1b:71:07:77:76:96:7e:b1:6f:
9e:09:9f:a9:cc:c8:5a:ea:94:b4:80:35:38:04:33:
ae:62:4e:10:75:e0:c6:90:62:a8:09:f6:8f:66:5c:
f7:b7:28:f1:ee:37:9a:59:3d:7b:6c:3e:5b:69:e7:
1a:c2:94:ce:5c:35:b0:71:2e:c8:e2:e9:05:a4:13:
a6:27:9f:de:fa:3a:56:9f:91:1c:01:12:4e:8b:c5:
23:5c:57:4e:0a:ab:17:3d:dd:93:69:1f:ad:39:ae:
7f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:66:57:46:91:F9:95:35:A2:08:F2:25:2F:04:B5:E6:58:9B:34:05
X509v3 Authority Key Identifier:
keyid:DD:50:72:B1:38:80:C1:F1:BA:86:FC:C4:C4:02:97:F5:D9:F4:37:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VBysTiAwfG6hvzExAKX9dn0N3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:65:78:13:92:d4:60:5f:9e:4f:31:ce:6d:c5:fb:df:1f:a8:
44:b6:78:dc:c0:28:f4:4f:b2:7c:84:62:6a:ad:03:f4:be:14:
c8:5b:3e:5f:36:6f:17:a8:ae:ac:88:f9:ae:44:96:5b:b9:11:
44:ec:f0:4b:c2:de:7a:a7:9c:4d:5d:04:31:45:5b:5f:df:47:
41:52:20:d6:8c:db:18:ed:43:c3:1c:82:ee:fa:cb:0d:f7:39:
9a:a6:88:aa:ba:be:ed:25:c1:a3:1b:ba:e8:ab:32:c7:86:e6:
77:31:bd:da:43:8e:de:92:9c:6c:00:11:9f:28:a7:cc:7c:92:
20:83:1b:87:a8:61:a5:83:5a:2d:90:ab:48:d2:37:20:b9:54:
b0:27:8e:99:c6:ac:f0:ff:af:5c:81:a1:c1:4b:b6:a2:8b:71:
e8:ed:7f:b2:a6:94:4b:ba:df:a5:84:c5:64:7e:51:7e:9c:0e:
12:b0:8e:0b:0f:00:1e:e3:1b:91:5b:43:7f:28:a7:61:f3:4c:
08:1f:cf:34:cd:9d:cc:46:fb:f9:56:ab:fe:ad:48:af:d8:85:
f7:a0:5b:c5:8d:c2:0f:1f:26:70:bc:46:9a:af:f0:c8:0d:91:
05:91:c3:5b:50:96:fb:dd:34:1d:3b:06:2a:4f:e7:1d:8d:4d:
f3:af:89:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZecckrNdOPgaeaDCm47VYHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTA3MmIxMzg4MGMxZjFiYTg2ZmNjNGM0MDI5N2Y1ZDlm
NDM3NzQwHhcNMjUwNjIzMTEwMDI1WhcNMjUwNjI0MTEwMDI1WjAzMTEwLwYDVQQD
Eyg1MDY2NTc0NjkxZjk5NTM1YTIwOGYyMjUyZjA0YjVlNjU4OWIzNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpuvPnwpt/nWEeA+OxKxbBEnzphM
cifAFvqDv7R9vmjU4zojesLPzHTmAnUpissVu88chsVFLZnJ8GzVgnOfioeNP8xK
Sia8d3N/+Qorn7D8H70YbXu0M59UNIBC4ZeBh5wHCA5ImVTOTABXlSBz+3Z7cz3L
e1lA6B3rUuOi1MOPuRni2/h/vKa7pOQVz5T0fNabhh5ADclQ2fAbcQd3dpZ+sW+e
CZ+pzMha6pS0gDU4BDOuYk4QdeDGkGKoCfaPZlz3tyjx7jeaWT17bD5baecawpTO
XDWwcS7I4ukFpBOmJ5/e+jpWn5EcARJOi8UjXFdOCqsXPd2TaR+tOa5/WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBmV0aR+ZU1ogjyJS8EteZYmzQFMB8GA1UdIwQY
MBaAFN1QcrE4gMHxuob8xMQCl/XZ9Dd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZCeXNUaUF3Zkc2aHZ6RXhBS1g5ZG4wTjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jYmMxOGYtZTZkYi00YmQ2LTg0Mjct
NjRkMWJjNzM1YmFjLzEvM1ZCeXNUaUF3Zkc2aHZ6RXhBS1g5ZG4wTjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jYmMxOGYtZTZkYi00YmQ2LTg0MjctNjRkMWJjNzM1YmFj
LzEvM1ZCeXNUaUF3Zkc2aHZ6RXhBS1g5ZG4wTjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2V4E5LU
YF+eTzHObcX73x+oRLZ43MAo9E+yfIRiaq0D9L4UyFs+XzZvF6iurIj5rkSWW7kR
ROzwS8LeeqecTV0EMUVbX99HQVIg1ozbGO1DwxyC7vrLDfc5mqaIqrq+7SXBoxu6
6Ksyx4bmdzG92kOO3pKcbAARnyinzHySIIMbh6hhpYNaLZCrSNI3ILlUsCeOmcas
8P+vXIGhwUu2ootx6O1/sqaUS7rfpYTFZH5RfpwOErCOCw8AHuMbkVtDfyinYfNM
CB/PNM2dzEb7+Var/q1Ir9iF96BbxY3CDx8mcLxGmq/wyA2RBZHDW1CW+900HTsG
Kk/nHY1N86+JDA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:07 2025 by rpki-client