Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
File: wXO75fcjeEWsqNMmO41R7zePwSA.mft (raw, json)
Hash identifier: B+mqwz+S7HJ/JGfBnjXIBLjjc/ytU2kQ/hSNkm4X/p0=
Subject key identifier: E9:5A:D6:91:60:34:D3:F0:9E:90:17:3B:4E:42:80:AE:4D:B6:F2:8E
Authority key identifier: C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
Certificate issuer: /CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Certificate serial: 0199E0E1D8832BF4E41C17CDC3340F6042F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
Manifest number: 03C7
Signing time: Tue 14 Oct 2025 04:02:01 +0000
Manifest this update: Tue 14 Oct 2025 04:02:01 +0000
Manifest next update: Wed 15 Oct 2025 04:02:01 +0000
Files and hashes: 1: nTT0TyM5N3ly5yMdXzhx4HHtEso.roa (hash: RLNwdKAN6eUr14/Qkl0nwCAt9mev9qzfdg1E2WS7ZdA=)
2: wXO75fcjeEWsqNMmO41R7zePwSA.crl (hash: +s2RsqyX44NtpqYShQCk1LfEoMN/kpHZGychBITkuIM=)
3: wkDz4piEW6E8TjjPv3mOyqzv81A.roa (hash: eds8liA7bmXrlLWfOe2ZVl6NU4VaLq7onyWiImSwEm8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e0:e1:d8:83:2b:f4:e4:1c:17:cd:c3:34:0f:60:42:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Validity
Not Before: Oct 14 04:02:01 2025 GMT
Not After : Oct 15 04:02:01 2025 GMT
Subject: CN=e95ad6916034d3f09e90173b4e4280ae4db6f28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:dc:18:c5:95:6e:9e:bb:0e:f0:50:77:2e:
24:19:2f:21:01:55:a6:27:46:f4:d3:96:7d:b7:29:
85:a1:9d:a1:b8:a6:b9:7e:63:c6:85:47:da:87:80:
10:cb:36:b1:c6:29:de:cd:dd:dc:9d:5a:11:39:43:
07:9a:62:e9:e2:f5:a9:d5:d7:51:61:68:8b:2c:b4:
c1:e1:ce:d0:d1:6a:e5:ce:41:65:a2:9a:e5:24:ab:
f2:6f:d8:67:e0:92:a5:6d:bf:8b:17:d5:f1:56:25:
b9:08:25:4d:63:32:40:a1:35:4b:9f:6c:30:7f:e5:
3a:61:16:18:c5:b3:96:c3:3c:b2:6d:32:63:b3:50:
38:6f:f3:ec:fb:9e:63:41:75:04:a3:94:c0:95:eb:
cd:fb:20:41:2b:31:39:5d:67:f1:f1:03:5f:4d:9b:
33:da:f6:fd:26:aa:24:dd:00:6b:cd:cf:08:72:48:
2b:dc:15:8b:c4:af:c5:10:22:00:e0:2e:d5:88:26:
7e:1a:0c:31:d7:83:13:1b:24:8e:a6:76:7f:bc:b5:
3a:4c:5a:d5:db:9b:8e:a0:fa:b6:33:73:b0:94:57:
1c:e4:61:d1:fe:7b:7c:50:1d:ff:57:73:6f:4b:7d:
b1:da:83:9b:b4:fb:74:c5:8d:32:a1:27:da:fd:5e:
92:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5A:D6:91:60:34:D3:F0:9E:90:17:3B:4E:42:80:AE:4D:B6:F2:8E
X509v3 Authority Key Identifier:
keyid:C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bb:90:e8:4c:94:95:2b:a9:b4:aa:fd:52:32:97:19:a2:70:
b2:39:59:c8:d5:9f:53:7e:40:60:0d:01:42:76:48:ba:c3:dc:
6b:8d:de:63:7c:4f:66:81:db:a6:e4:79:18:d7:e6:49:34:aa:
5b:a5:f6:e1:44:91:35:dc:45:3d:17:59:62:b7:95:c1:20:84:
4d:e3:ee:2c:4a:2d:a9:0e:1e:5e:a8:ed:4d:0d:c6:31:c3:12:
a8:2a:3c:89:55:59:59:35:e8:f5:da:39:55:ad:33:03:12:28:
60:15:c0:2e:6e:8b:50:30:50:0a:16:f3:2c:e9:71:2a:c2:14:
d6:24:e5:de:17:e4:0c:77:34:f9:14:92:64:65:a8:77:e0:d7:
6d:c5:77:a9:c8:a3:a1:76:eb:41:5d:44:2b:bb:3b:8b:2d:0f:
a3:9a:e4:42:83:c1:00:ba:3d:ee:b2:87:52:bc:61:6d:71:8b:
52:2d:91:59:e7:4c:6d:5a:fc:b2:11:c1:5a:22:49:a2:64:bf:
33:b4:32:b6:00:b1:8e:cf:a1:dd:da:5a:72:63:40:20:b0:6e:
f4:7c:40:90:7c:19:90:d6:6d:b8:fd:ee:2e:f5:ba:9f:98:37:
6a:9a:1c:ca:a2:be:e4:b3:86:70:5f:e0:0a:07:f5:b1:27:51:
0d:43:bc:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZng4diDK/TkHBfNwzQPYELwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzNiYmU1ZjcyMzc4NDVhY2E4ZDMyNjNiOGQ1MWVmMzc4
ZmMxMjAwHhcNMjUxMDE0MDQwMjAxWhcNMjUxMDE1MDQwMjAxWjAzMTEwLwYDVQQD
EyhlOTVhZDY5MTYwMzRkM2YwOWU5MDE3M2I0ZTQyODBhZTRkYjZmMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R/cGMWVbp67DvBQdy4kGS8hAVWm
J0b005Z9tymFoZ2huKa5fmPGhUfah4AQyzaxxinezd3cnVoROUMHmmLp4vWp1ddR
YWiLLLTB4c7Q0WrlzkFloprlJKvyb9hn4JKlbb+LF9XxViW5CCVNYzJAoTVLn2ww
f+U6YRYYxbOWwzyybTJjs1A4b/Ps+55jQXUEo5TAlevN+yBBKzE5XWfx8QNfTZsz
2vb9Jqok3QBrzc8Ickgr3BWLxK/FECIA4C7ViCZ+Ggwx14MTGySOpnZ/vLU6TFrV
25uOoPq2M3OwlFcc5GHR/nt8UB3/V3NvS32x2oObtPt0xY0yoSfa/V6STwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOla1pFgNNPwnpAXO05CgK5NtvKOMB8GA1UdIwQY
MBaAFMFzu+X3I3hFrKjTJjuNUe83j8EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hPNzVmY2plRVdzcU5NbU80MVI3emVQd1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85OWQyZjUtMTgwMC00YzA4LWJjYWQt
OGE3NTFiMGUwMTcwLzEvd1hPNzVmY2plRVdzcU5NbU80MVI3emVQd1NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85OWQyZjUtMTgwMC00YzA4LWJjYWQtOGE3NTFiMGUwMTcw
LzEvd1hPNzVmY2plRVdzcU5NbU80MVI3emVQd1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLuQ6EyU
lSuptKr9UjKXGaJwsjlZyNWfU35AYA0BQnZIusPca43eY3xPZoHbpuR5GNfmSTSq
W6X24USRNdxFPRdZYreVwSCETePuLEotqQ4eXqjtTQ3GMcMSqCo8iVVZWTXo9do5
Va0zAxIoYBXALm6LUDBQChbzLOlxKsIU1iTl3hfkDHc0+RSSZGWod+DXbcV3qcij
oXbrQV1EK7s7iy0Po5rkQoPBALo97rKHUrxhbXGLUi2RWedMbVr8shHBWiJJomS/
M7QytgCxjs+h3dpacmNAILBu9HxAkHwZkNZtuP3uLvW6n5g3apocyqK+5LOGcF/g
Cgf1sSdRDUO8jw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:07 2025 by rpki-client