Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
File: gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft (raw, json)
Hash identifier: Rq6ei2NHHQXoLK+QXt43I9gkT7lsGPTcY9avc1SVnrg=
Subject key identifier: FC:94:2F:05:3B:3B:40:CD:49:B4:EE:25:45:5A:7C:AC:48:19:60:4A
Authority key identifier: 81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
Certificate issuer: /CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Certificate serial: 019993A10FB8398EB09BBB04401F1B27B36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
Manifest number: 09D7
Signing time: Mon 29 Sep 2025 04:00:29 +0000
Manifest this update: Mon 29 Sep 2025 04:00:29 +0000
Manifest next update: Tue 30 Sep 2025 04:00:29 +0000
Files and hashes: 1: gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl (hash: 9x7FeYOcAk/LXmSHCubkksVowN1Nj5ggGu2dXlg3d2U=)
2: h8JOFdoRpj6qGDNJuivBHNvrSRk.roa (hash: Vj2EQ4BWrvbCavVD4y/JlI7mb4cVKOnw+wqYqtWQ88Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:93:a1:0f:b8:39:8e:b0:9b:bb:04:40:1f:1b:27:b3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Validity
Not Before: Sep 29 04:00:29 2025 GMT
Not After : Sep 30 04:00:29 2025 GMT
Subject: CN=fc942f053b3b40cd49b4ee25455a7cac4819604a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:cf:b8:f6:a6:e8:17:19:13:21:a5:bc:ae:
09:ba:3c:ad:d4:6d:0f:52:88:6c:08:4f:5d:18:dc:
0b:49:fd:e3:26:8a:53:31:3e:f2:14:38:24:d2:85:
48:2d:c6:7e:c4:ee:2e:52:db:8f:0a:f0:30:f7:8c:
74:a8:a2:aa:9a:26:06:c2:e3:d5:7a:f8:3a:ee:fd:
a1:0e:46:ea:c9:ed:02:2f:26:d9:15:ae:6e:6a:c2:
fa:08:87:f2:57:91:ef:d4:75:ca:95:31:d2:00:f5:
e7:00:2a:64:b2:a3:fd:7f:05:bb:bc:b4:32:15:ea:
e0:de:a2:fc:03:bb:6c:a8:2a:f4:7e:7e:68:11:02:
02:5f:d8:02:72:c9:43:c6:f5:dd:98:98:49:f9:e1:
7c:3b:d8:8f:b5:d5:66:c5:49:50:07:ca:ea:14:9c:
12:68:68:4f:3a:2a:4d:89:17:c3:55:49:32:b7:a5:
57:11:15:84:d9:5d:92:4b:10:32:96:07:c2:e8:91:
52:cc:bf:ea:9c:80:c9:13:10:5d:7e:8c:9a:68:1e:
71:69:20:38:2a:de:88:97:ac:2c:f4:a5:8f:2e:d6:
62:42:71:92:e8:d2:28:61:7a:47:ea:ea:d2:b7:10:
c8:91:30:17:e3:cf:c6:0b:12:0b:25:f7:db:8c:16:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:94:2F:05:3B:3B:40:CD:49:B4:EE:25:45:5A:7C:AC:48:19:60:4A
X509v3 Authority Key Identifier:
keyid:81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:43:4f:57:04:2d:a3:6c:c2:1e:d2:36:ae:96:7a:e9:7f:3d:
f1:e3:3a:ea:25:73:d5:67:f9:7f:4a:2a:a3:2f:00:a3:91:5f:
80:e7:e2:60:52:7a:61:b5:10:d1:fc:e2:45:51:10:8b:94:2d:
cc:46:4c:3e:1f:5e:51:de:cf:2d:d3:03:d6:a7:86:f9:e7:09:
7e:bd:59:c1:c0:36:e5:d9:bc:00:a5:a9:c0:b0:b7:58:66:88:
87:7e:a7:40:eb:1f:4c:75:a1:b5:9a:05:2e:d8:fc:d0:5e:04:
fd:03:c9:e9:59:0b:0d:5f:85:c8:f2:14:15:11:a6:e2:49:43:
ac:43:8b:9c:7c:c9:6b:97:88:cf:24:a9:91:e8:c2:51:70:e7:
0b:6b:93:72:cf:f4:a8:d1:66:23:e0:cc:3f:fa:71:b7:ba:1a:
14:03:15:7b:a6:c6:cc:19:17:26:a1:29:99:59:cb:f3:c5:9b:
7c:32:99:e0:5e:cc:d7:9e:ee:6c:22:b9:5a:b5:16:3c:16:51:
96:16:1d:ef:a7:e2:54:5f:ad:76:dd:8d:0b:1b:99:0e:54:33:
67:50:3c:06:44:1b:c9:9e:f9:6e:6d:8c:dc:07:7d:dd:98:8d:
f1:09:1f:72:f6:bc:36:62:d0:d9:0c:57:b3:99:94:55:72:0e:
31:58:84:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZmToQ+4OY6wm7sEQB8bJ7NrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZDExYzlkNDAyZTEyZWE5NGFlYThkMTNkNTM2MGNhZjdj
NDNiMjEwHhcNMjUwOTI5MDQwMDI5WhcNMjUwOTMwMDQwMDI5WjAzMTEwLwYDVQQD
EyhmYzk0MmYwNTNiM2I0MGNkNDliNGVlMjU0NTVhN2NhYzQ4MTk2MDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQPPuPam6BcZEyGlvK4Jujyt1G0P
UohsCE9dGNwLSf3jJopTMT7yFDgk0oVILcZ+xO4uUtuPCvAw94x0qKKqmiYGwuPV
evg67v2hDkbqye0CLybZFa5uasL6CIfyV5Hv1HXKlTHSAPXnACpksqP9fwW7vLQy
Ferg3qL8A7tsqCr0fn5oEQICX9gCcslDxvXdmJhJ+eF8O9iPtdVmxUlQB8rqFJwS
aGhPOipNiRfDVUkyt6VXERWE2V2SSxAylgfC6JFSzL/qnIDJExBdfoyaaB5xaSA4
Kt6Il6ws9KWPLtZiQnGS6NIoYXpH6urStxDIkTAX48/GCxILJffbjBaVMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyULwU7O0DNSbTuJUVafKxIGWBKMB8GA1UdIwQY
MBaAFIHRHJ1ALhLqlK6o0T1TYMr3xDshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2RFY25VQXVFdXFVcnFqUlBWTmd5dmZFT3lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yZDJjNTctMGZhNS00M2U2LWI3YjEt
Zjk5YzMzZDZhNjBmLzEvZ2RFY25VQXVFdXFVcnFqUlBWTmd5dmZFT3lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yZDJjNTctMGZhNS00M2U2LWI3YjEtZjk5YzMzZDZhNjBm
LzEvZ2RFY25VQXVFdXFVcnFqUlBWTmd5dmZFT3lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkNPVwQt
o2zCHtI2rpZ66X898eM66iVz1Wf5f0oqoy8Ao5FfgOfiYFJ6YbUQ0fziRVEQi5Qt
zEZMPh9eUd7PLdMD1qeG+ecJfr1ZwcA25dm8AKWpwLC3WGaIh36nQOsfTHWhtZoF
Ltj80F4E/QPJ6VkLDV+FyPIUFRGm4klDrEOLnHzJa5eIzySpkejCUXDnC2uTcs/0
qNFmI+DMP/pxt7oaFAMVe6bGzBkXJqEpmVnL88WbfDKZ4F7M157ubCK5WrUWPBZR
lhYd76fiVF+tdt2NCxuZDlQzZ1A8BkQbyZ75bm2M3Ad93ZiN8Qkfcva8NmLQ2QxX
s5mUVXIOMViE3g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:13:40 2025 by rpki-client