Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
File: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft (raw, json)
Hash identifier: IZOS0nrGOI98dtVSb0dy35mBTjbI8fhTgWmM2SXCz3Y=
Subject key identifier: 29:CC:06:37:4C:CF:57:66:28:DA:EA:A4:83:0C:CC:57:39:A0:29:13
Authority key identifier: 7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
Certificate issuer: /CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Certificate serial: 0199326D1C8C3147E341A86A90741CB893A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
Manifest number: 086F
Signing time: Wed 10 Sep 2025 07:00:35 +0000
Manifest this update: Wed 10 Sep 2025 07:00:35 +0000
Manifest next update: Thu 11 Sep 2025 07:00:35 +0000
Files and hashes: 1: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl (hash: BKx2Xu5vudv5vPmcMr5XgJ9Lr3auP+JRR9OMOH7oiq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:1c:8c:31:47:e3:41:a8:6a:90:74:1c:b8:93:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Validity
Not Before: Sep 10 07:00:35 2025 GMT
Not After : Sep 11 07:00:35 2025 GMT
Subject: CN=29cc06374ccf576628daeaa4830ccc5739a02913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:e4:e5:5f:ca:2c:8b:f7:04:5f:2d:21:e0:
30:7e:83:a8:a8:1b:fd:96:fc:f4:e7:d5:de:d4:9f:
9f:d1:cd:99:f4:18:52:40:90:01:1e:f8:d6:77:0e:
59:e6:a8:84:bf:6d:78:29:06:96:b5:97:84:1b:b2:
8b:89:17:13:37:c8:57:b6:53:db:4c:3d:55:1f:64:
f1:76:83:41:f0:e6:46:3a:16:38:de:d5:f2:ed:a1:
7c:37:0f:61:e4:2a:73:d2:e9:e3:e6:6c:ae:29:9d:
e6:83:36:a3:4c:ae:6c:0c:77:26:ed:76:c5:7f:9a:
16:f4:b1:75:71:37:e4:e8:71:05:f2:4d:ce:5a:61:
37:55:76:1d:bf:55:fe:33:3d:71:b9:56:00:5d:ee:
35:2b:c3:cd:dc:14:7d:0d:a9:af:b4:a1:9f:35:c0:
cf:54:93:94:d2:61:28:8c:fe:59:bf:05:95:1a:cc:
dc:cb:34:30:4b:64:18:d2:59:fa:50:c7:62:bc:1d:
63:77:a1:df:c2:2c:cb:a6:19:32:5d:c8:0f:5f:74:
ce:26:98:43:bc:50:34:34:2c:b9:68:4c:1a:65:53:
44:ea:a7:f6:24:96:ef:60:15:0c:3d:be:27:6b:88:
d0:e1:80:2d:e2:b3:1b:c7:ae:bf:68:e8:e2:e8:b3:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CC:06:37:4C:CF:57:66:28:DA:EA:A4:83:0C:CC:57:39:A0:29:13
X509v3 Authority Key Identifier:
keyid:7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:99:2e:cd:ec:4e:2b:b7:c4:c5:a5:89:65:1e:8c:0a:97:6a:
db:c6:ae:96:12:10:8d:d8:7a:fc:e7:3a:3c:85:9a:88:a6:7e:
c9:26:dd:56:43:43:f5:8f:e7:84:65:42:b8:7e:b4:3c:29:be:
02:82:54:2c:72:61:ec:4e:b9:df:29:39:39:26:51:c9:97:25:
d7:ca:09:68:6c:01:8d:25:f0:12:51:8c:89:ef:dd:cf:d6:a2:
a5:56:e2:3a:d1:28:d4:ff:93:06:68:89:63:26:cc:87:e1:3b:
e2:72:0d:46:b1:c9:05:1b:f0:8c:a0:8f:7a:33:6a:5b:4b:81:
af:cd:51:01:83:16:5e:7b:cf:8e:4f:25:f0:0e:27:be:e3:ed:
d1:25:9a:71:66:4b:8d:55:3a:f4:49:1d:cf:e9:27:23:53:e8:
d8:5f:9b:f2:8d:d5:60:57:cf:81:19:ca:cb:27:bf:b7:fe:71:
88:07:59:0b:89:7d:e2:5c:99:aa:41:24:d8:ca:87:32:58:12:
1c:25:fd:e3:c6:82:0b:dc:2f:a8:c1:33:1e:dc:06:d8:4b:9e:
e2:2b:2c:63:56:ee:56:22:ce:27:42:65:f8:2d:f0:b8:91:cf:
83:eb:89:d3:2e:5d:ec:3b:97:09:a0:f7:6d:a3:4f:53:58:04:
4d:13:e4:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkybRyMMUfjQahqkHQcuJOjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDkzZjZjODkwNzhkY2VlZjY3YmM5YzA4MTZlOTQ3ZWMx
NWI3YWMwHhcNMjUwOTEwMDcwMDM1WhcNMjUwOTExMDcwMDM1WjAzMTEwLwYDVQQD
EygyOWNjMDYzNzRjY2Y1NzY2MjhkYWVhYTQ4MzBjY2M1NzM5YTAyOTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBzk5V/KLIv3BF8tIeAwfoOoqBv9
lvz059Xe1J+f0c2Z9BhSQJABHvjWdw5Z5qiEv214KQaWtZeEG7KLiRcTN8hXtlPb
TD1VH2TxdoNB8OZGOhY43tXy7aF8Nw9h5Cpz0unj5myuKZ3mgzajTK5sDHcm7XbF
f5oW9LF1cTfk6HEF8k3OWmE3VXYdv1X+Mz1xuVYAXe41K8PN3BR9DamvtKGfNcDP
VJOU0mEojP5ZvwWVGszcyzQwS2QY0ln6UMdivB1jd6HfwizLphkyXcgPX3TOJphD
vFA0NCy5aEwaZVNE6qf2JJbvYBUMPb4na4jQ4YAt4rMbx66/aOji6LN4QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnMBjdMz1dmKNrqpIMMzFc5oCkTMB8GA1UdIwQY
MBaAFH0JP2yJB43O72e8nAgW6UfsFbesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFrX2JJa0hqYzd2Wjd5Y0NCYnBSLXdWdDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yYWIzNzUtNDU5OC00OWExLWE0YTQt
YzFiNTYyYzU3NzAzLzEvZlFrX2JJa0hqYzd2Wjd5Y0NCYnBSLXdWdDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yYWIzNzUtNDU5OC00OWExLWE0YTQtYzFiNTYyYzU3NzAz
LzEvZlFrX2JJa0hqYzd2Wjd5Y0NCYnBSLXdWdDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5kuzexO
K7fExaWJZR6MCpdq28aulhIQjdh6/Oc6PIWaiKZ+ySbdVkND9Y/nhGVCuH60PCm+
AoJULHJh7E653yk5OSZRyZcl18oJaGwBjSXwElGMie/dz9aipVbiOtEo1P+TBmiJ
YybMh+E74nINRrHJBRvwjKCPejNqW0uBr81RAYMWXnvPjk8l8A4nvuPt0SWacWZL
jVU69Ekdz+knI1Po2F+b8o3VYFfPgRnKyye/t/5xiAdZC4l94lyZqkEk2MqHMlgS
HCX948aCC9wvqMEzHtwG2Eue4issY1buViLOJ0Jl+C3wuJHPg+uJ0y5d7DuXCaD3
baNPU1gETRPkEQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:49 2025 by rpki-client