Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
File: bO30FYremPFFfOyFiVVibxYdKu8.mft (raw, json)
Hash identifier: QuiRKot1LSbzdGjQDJAb+rMddqRbVFi0pyxLk0Zne3E=
Subject key identifier: CE:C4:65:15:5F:E7:41:79:1B:C1:C4:43:3F:35:7A:C0:87:45:21:6F
Authority key identifier: 6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
Certificate issuer: /CN=6cedf4158ade98f1457cec858955626f161d2aef
Certificate serial: 01994C64F53D0438A659D9C8D3CD0E08BDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
Manifest number: 168F
Signing time: Mon 15 Sep 2025 08:01:48 +0000
Manifest this update: Mon 15 Sep 2025 08:01:48 +0000
Manifest next update: Tue 16 Sep 2025 08:01:48 +0000
Files and hashes: 1: Flwvhhtmnugnw0Jq8XM4728h_tc.roa (hash: mMPxIGgY2ZdP2DRf7AHcBe/zEjvkKGfWdlZtEbsX1hw=)
2: Mz05BHBSbafMl08a8_UKVe_gGso.roa (hash: 41KbWqupO1eNtLpQemjc0X3ZgLWHI1W8tciFt0xry74=)
3: bO30FYremPFFfOyFiVVibxYdKu8.crl (hash: +IixA+sWrxynVcJu/dtQiXdCdThLy1k2oxoUjAPDFJM=)
4: nfbw8nkOWLMFYeRpQFZBC2lYZWg.roa (hash: uMfkd4wLt8gDn0VUwsQBSdryskjaJgQtls/Bs/4236o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4c:64:f5:3d:04:38:a6:59:d9:c8:d3:cd:0e:08:bd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cedf4158ade98f1457cec858955626f161d2aef
Validity
Not Before: Sep 15 08:01:48 2025 GMT
Not After : Sep 16 08:01:48 2025 GMT
Subject: CN=cec465155fe741791bc1c4433f357ac08745216f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:1b:bb:f8:2f:fb:22:e2:0e:80:f0:3d:93:
c2:c3:43:d0:f0:99:f1:0d:e9:35:a1:73:b5:39:d8:
78:b5:ae:ae:96:b2:2d:52:01:d9:ba:f3:05:ac:cb:
4b:b0:12:fd:58:82:66:75:db:39:35:89:e6:4c:be:
4c:24:05:27:29:5e:e6:35:91:54:b9:cc:ff:4c:56:
4c:f4:be:58:32:f9:8f:18:ac:77:27:ac:e6:84:ab:
b8:ec:27:b4:af:39:95:24:e5:a1:ac:8b:c4:24:07:
4a:5e:4c:91:c5:0c:f3:fd:15:d4:bc:6c:89:3b:bb:
2c:1b:e9:e3:6e:b6:dd:65:ea:e7:a4:0c:cc:b0:ca:
98:d7:9e:15:cc:1e:30:6b:43:d0:43:bd:41:84:26:
49:d6:07:06:5f:45:d3:7c:48:b9:45:8c:9b:a5:d2:
44:15:4a:81:32:53:9f:c7:cf:e4:61:9c:46:a3:dc:
c2:90:7f:8a:d5:22:0d:54:f1:c5:56:91:09:1b:11:
6e:a4:d8:d2:28:17:7c:65:3c:9b:07:3b:03:48:6c:
fc:ae:16:aa:e9:cf:93:5a:3a:88:69:97:df:93:c0:
0c:03:1a:d3:fc:f7:bb:50:1e:18:af:68:ba:23:36:
5d:9a:2b:b7:fb:1b:31:a7:bf:3b:54:6b:6e:2b:d8:
c2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C4:65:15:5F:E7:41:79:1B:C1:C4:43:3F:35:7A:C0:87:45:21:6F
X509v3 Authority Key Identifier:
keyid:6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:94:6a:36:94:9d:06:70:be:fe:f5:ad:e5:39:44:4f:33:ae:
53:9e:47:14:48:96:0b:fb:d3:28:37:fc:9e:01:00:66:37:34:
44:1e:67:2d:1b:fe:3b:9d:8e:b4:f4:f4:ab:5c:73:24:b9:8e:
74:84:5f:45:45:87:f5:46:4d:8d:22:28:59:f8:3f:82:7b:4b:
8b:25:08:2e:e6:0a:df:c9:46:5c:d4:02:65:28:a9:c6:69:6b:
7d:f8:46:e8:08:8a:4f:13:02:c6:a9:27:c8:29:4d:76:43:79:
a2:bf:ac:65:99:cd:5c:0c:e6:8a:61:67:0e:c4:c8:68:9e:42:
39:d5:f9:bf:82:7b:c9:41:3c:2e:77:da:53:b8:51:4a:3a:4c:
ef:39:81:f0:48:00:13:ed:2c:f6:1f:83:1f:bf:eb:07:29:7a:
c9:3e:70:ae:fa:04:6a:11:ac:d5:3b:cb:12:53:b4:29:4c:de:
d0:a8:c3:59:e2:62:ac:9a:42:5e:36:b3:31:63:c2:e8:0f:08:
8d:b0:af:33:f9:8f:a3:83:20:8c:58:46:f8:ac:18:95:30:8d:
6f:98:de:2f:45:1f:4d:6c:49:d1:39:fd:50:b6:56:67:5e:f9:
50:37:a1:0f:0c:81:17:72:0e:0f:61:45:48:87:a1:51:54:a0:
b3:ec:69:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlMZPU9BDimWdnI080OCL3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZWRmNDE1OGFkZTk4ZjE0NTdjZWM4NTg5NTU2MjZmMTYx
ZDJhZWYwHhcNMjUwOTE1MDgwMTQ4WhcNMjUwOTE2MDgwMTQ4WjAzMTEwLwYDVQQD
EyhjZWM0NjUxNTVmZTc0MTc5MWJjMWM0NDMzZjM1N2FjMDg3NDUyMTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW0bu/gv+yLiDoDwPZPCw0PQ8Jnx
Dek1oXO1Odh4ta6ulrItUgHZuvMFrMtLsBL9WIJmdds5NYnmTL5MJAUnKV7mNZFU
ucz/TFZM9L5YMvmPGKx3J6zmhKu47Ce0rzmVJOWhrIvEJAdKXkyRxQzz/RXUvGyJ
O7ssG+njbrbdZernpAzMsMqY154VzB4wa0PQQ71BhCZJ1gcGX0XTfEi5RYybpdJE
FUqBMlOfx8/kYZxGo9zCkH+K1SINVPHFVpEJGxFupNjSKBd8ZTybBzsDSGz8rhaq
6c+TWjqIaZffk8AMAxrT/Pe7UB4Yr2i6IzZdmiu3+xsxp787VGtuK9jCwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7EZRVf50F5G8HEQz81esCHRSFvMB8GA1UdIwQY
MBaAFGzt9BWK3pjxRXzshYlVYm8WHSrvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk8zMEZZcmVtUEZGZk95RmlWVmlieFlkS3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jNDIxM2QtMGRlMC00ZGI0LWE1MDgt
ODIyZDlmODU1OTg0LzEvYk8zMEZZcmVtUEZGZk95RmlWVmlieFlkS3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jNDIxM2QtMGRlMC00ZGI0LWE1MDgtODIyZDlmODU1OTg0
LzEvYk8zMEZZcmVtUEZGZk95RmlWVmlieFlkS3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJRqNpSd
BnC+/vWt5TlETzOuU55HFEiWC/vTKDf8ngEAZjc0RB5nLRv+O52OtPT0q1xzJLmO
dIRfRUWH9UZNjSIoWfg/gntLiyUILuYK38lGXNQCZSipxmlrffhG6AiKTxMCxqkn
yClNdkN5or+sZZnNXAzmimFnDsTIaJ5COdX5v4J7yUE8LnfaU7hRSjpM7zmB8EgA
E+0s9h+DH7/rByl6yT5wrvoEahGs1TvLElO0KUze0KjDWeJirJpCXjazMWPC6A8I
jbCvM/mPo4MgjFhG+KwYlTCNb5jeL0UfTWxJ0Tn9ULZWZ175UDehDwyBF3IOD2FF
SIehUVSgs+xpUA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:29 2025 by rpki-client