Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
File: HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft (raw, json)
Hash identifier: au4ALMEumd1YWbxLOQVfIQb73PJw7srt0t+6XXhVtGg=
Subject key identifier: 0C:8F:C7:EB:0D:38:87:C4:B3:32:08:51:B8:F6:4E:E1:2A:10:BB:FB
Authority key identifier: 1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8
Certificate issuer: /CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
Certificate serial: 01995E33457051218A557D8DF2099DD2B3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
Manifest number: 07AA
Signing time: Thu 18 Sep 2025 19:00:42 +0000
Manifest this update: Thu 18 Sep 2025 19:00:42 +0000
Manifest next update: Fri 19 Sep 2025 19:00:42 +0000
Files and hashes: 1: Ct9bHG4SWHTl9PMz5PXSs2vCxX8.roa (hash: N/U8cjrJKkb1U0RlpmtZn+cKz90pd4hkwgPvU1swCC0=)
2: HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl (hash: Htdhix7LbZH9KMUVrqiT08PhI0v9ffbBse4HrV8u5pc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5e:33:45:70:51:21:8a:55:7d:8d:f2:09:9d:d2:b3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
Validity
Not Before: Sep 18 19:00:42 2025 GMT
Not After : Sep 19 19:00:42 2025 GMT
Subject: CN=0c8fc7eb0d3887c4b3320851b8f64ee12a10bbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:b6:8b:ca:99:42:5d:d3:cf:8a:64:24:e6:
2f:e0:23:19:81:b0:26:8b:fd:7f:87:c5:e1:56:f2:
94:d4:f9:4d:be:3c:10:ba:51:65:e0:c6:ea:aa:eb:
bd:78:aa:b6:c2:77:83:e4:b5:fe:82:93:88:d5:dd:
7e:7f:03:6e:75:a4:3b:46:61:15:05:6e:d6:bf:6e:
0f:98:ba:04:95:44:2d:f1:b7:37:f6:b9:9b:62:99:
b9:50:e8:dc:29:76:3e:40:53:28:74:c5:ee:34:b5:
1b:d0:46:f6:e4:ab:da:f8:8d:af:d5:a2:a8:7c:15:
cd:df:76:c8:1b:9b:a7:3a:d3:81:64:58:31:92:58:
2c:ae:44:3a:4f:e2:07:e2:db:78:e4:ad:58:cb:c7:
81:79:83:9b:98:65:dc:61:64:e5:3e:f8:b5:ee:85:
9d:42:2a:10:e8:4b:da:98:06:e5:07:39:0f:66:eb:
10:f5:ec:2c:4d:84:6a:be:b5:9e:f0:81:07:9c:4e:
6d:9f:3c:8c:69:49:13:9b:c2:66:cd:3a:92:5b:25:
81:c9:12:cf:89:36:7f:9a:e6:c3:75:b5:4e:90:7c:
1c:24:a2:cd:79:89:d7:e0:c0:a7:af:b9:ba:a4:87:
e3:af:3c:7b:24:1c:8e:43:ec:be:b8:0c:50:08:f0:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8F:C7:EB:0D:38:87:C4:B3:32:08:51:B8:F6:4E:E1:2A:10:BB:FB
X509v3 Authority Key Identifier:
keyid:1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:38:d0:8e:9f:4b:56:2e:b0:65:10:4d:33:67:23:03:1d:b3:
bc:f5:b7:ff:43:39:56:89:fb:29:d7:89:f6:6a:4e:5b:b4:95:
9e:74:56:c5:3f:27:7c:c3:3e:00:5f:52:88:da:41:b0:d3:48:
f7:e4:1b:8d:fb:1c:83:63:6a:56:f4:72:29:69:46:d1:e9:6d:
0d:66:d8:20:8f:69:69:06:5b:aa:dc:51:f8:de:ba:32:ac:15:
9a:b9:de:fa:87:67:bf:1f:29:ae:22:e2:b9:98:74:77:ae:a0:
85:ba:03:a5:f6:26:a5:31:89:84:06:f3:46:e2:91:18:dd:a4:
b4:62:42:4d:7f:9a:69:36:75:ae:ca:85:55:a8:27:c3:1a:21:
d3:00:fd:b8:58:b5:44:e7:98:fa:ba:c3:84:36:a0:2b:e1:2d:
9c:87:83:40:4d:bb:78:e4:0f:3c:4d:ca:e9:f8:85:de:bf:8d:
09:08:0b:66:0b:f8:e9:a6:4a:0d:b7:e8:ac:44:e9:0d:f0:ee:
65:9c:55:4b:e0:e3:57:d1:06:2b:99:c3:41:d9:95:eb:e3:1e:
1d:05:e5:9d:54:cd:03:85:ea:06:58:e6:33:10:5c:13:78:3a:
71:30:04:8a:ce:ec:94:84:44:6c:ea:b4:ae:d2:e0:b1:90:c8:
1a:4e:b6:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZleM0VwUSGKVX2N8gmd0rOvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkM2I2NGQ5NWY2MTMxNjgyYjk5MDVjNDQwYTc4NWE2MGE4
YWM4YjgwHhcNMjUwOTE4MTkwMDQyWhcNMjUwOTE5MTkwMDQyWjAzMTEwLwYDVQQD
EygwYzhmYzdlYjBkMzg4N2M0YjMzMjA4NTFiOGY2NGVlMTJhMTBiYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCG2i8qZQl3Tz4pkJOYv4CMZgbAm
i/1/h8XhVvKU1PlNvjwQulFl4Mbqquu9eKq2wneD5LX+gpOI1d1+fwNudaQ7RmEV
BW7Wv24PmLoElUQt8bc39rmbYpm5UOjcKXY+QFModMXuNLUb0Eb25Kva+I2v1aKo
fBXN33bIG5unOtOBZFgxklgsrkQ6T+IH4tt45K1Yy8eBeYObmGXcYWTlPvi17oWd
QioQ6EvamAblBzkPZusQ9ewsTYRqvrWe8IEHnE5tnzyMaUkTm8JmzTqSWyWByRLP
iTZ/mubDdbVOkHwcJKLNeYnX4MCnr7m6pIfjrzx7JByOQ+y+uAxQCPD0qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyPx+sNOIfEszIIUbj2TuEqELv7MB8GA1UdIwQY
MBaAFB07ZNlfYTFoK5kFxECnhaYKisi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFR0azJWOWhNV2dybVFYRVFLZUZwZ3FLeUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zZTYyZDgtOWU0MS00Zjg2LTkzMTMt
NjE1Y2IzNzJlMDc3LzEvSFR0azJWOWhNV2dybVFYRVFLZUZwZ3FLeUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zZTYyZDgtOWU0MS00Zjg2LTkzMTMtNjE1Y2IzNzJlMDc3
LzEvSFR0azJWOWhNV2dybVFYRVFLZUZwZ3FLeUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATjQjp9L
Vi6wZRBNM2cjAx2zvPW3/0M5Von7KdeJ9mpOW7SVnnRWxT8nfMM+AF9SiNpBsNNI
9+Qbjfscg2NqVvRyKWlG0eltDWbYII9paQZbqtxR+N66MqwVmrne+odnvx8priLi
uZh0d66ghboDpfYmpTGJhAbzRuKRGN2ktGJCTX+aaTZ1rsqFVagnwxoh0wD9uFi1
ROeY+rrDhDagK+EtnIeDQE27eOQPPE3K6fiF3r+NCQgLZgv46aZKDbforETpDfDu
ZZxVS+DjV9EGK5nDQdmV6+MeHQXlnVTNA4XqBljmMxBcE3g6cTAEis7slIREbOq0
rtLgsZDIGk62Ag==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:03 2025 by rpki-client