Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
File: s5hg55nVMGYfFSE1RiKOmSmlPJw.mft (raw, json)
Hash identifier: ztEF8cfPjFG/2vPgGO6s2SrNIHCfX5wi5AiI5BBLN/Q=
Subject key identifier: DC:6F:E9:99:9B:FB:D3:06:74:39:D1:6F:4E:AC:54:2D:92:F6:D2:77
Authority key identifier: B3:98:60:E7:99:D5:30:66:1F:15:21:35:46:22:8E:99:29:A5:3C:9C
Certificate issuer: /CN=b39860e799d530661f15213546228e9929a53c9c
Certificate serial: 019A3B365DF27D87DD94A53FD41B8BAA75FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
Manifest number: 0509
Signing time: Fri 31 Oct 2025 17:00:09 +0000
Manifest this update: Fri 31 Oct 2025 17:00:09 +0000
Manifest next update: Sat 01 Nov 2025 17:00:09 +0000
Files and hashes: 1: s5hg55nVMGYfFSE1RiKOmSmlPJw.crl (hash: MIWE3GWgbrgVwYWEnmg7L6/ukh4RsOFqiRIwMJOAM10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3b:36:5d:f2:7d:87:dd:94:a5:3f:d4:1b:8b:aa:75:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39860e799d530661f15213546228e9929a53c9c
Validity
Not Before: Oct 31 17:00:09 2025 GMT
Not After : Nov 1 17:00:09 2025 GMT
Subject: CN=dc6fe9999bfbd3067439d16f4eac542d92f6d277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:fb:88:3d:ec:d1:89:df:ca:ce:d9:a1:72:
a6:aa:98:57:dd:72:13:40:68:f7:13:0b:4c:c0:08:
0a:0b:e6:51:10:2c:e8:a2:e4:8d:34:25:a5:02:6f:
78:9c:38:08:4d:2f:e9:a7:c9:41:be:9f:d3:70:a1:
b1:55:b8:0d:a6:dd:32:ea:c8:90:6f:a7:ee:97:75:
30:9e:2a:9e:47:17:65:67:46:21:a4:02:0f:c8:5b:
d5:9c:02:29:4d:c3:29:cb:be:a2:9c:10:34:30:8e:
70:04:6d:a3:36:43:3b:51:91:5d:e3:58:f4:6f:be:
64:cb:67:e6:53:0f:7d:e2:1d:4c:50:2f:ed:0d:67:
d3:6f:0e:c8:0e:3a:1b:84:73:ed:b1:5d:1f:ba:54:
5e:77:4e:73:50:26:a4:b3:8e:9d:6b:e3:d7:f4:eb:
47:7d:a4:92:26:3b:5e:7a:44:e6:57:93:64:22:6a:
df:db:1f:d0:73:d8:de:c5:97:b5:c3:c0:ae:d4:88:
e5:ba:15:fa:82:7d:e6:3d:8e:1a:12:31:3f:76:08:
62:37:a3:12:2b:e5:38:7c:86:08:fc:49:e2:44:87:
c3:74:41:1f:b9:51:fe:c5:c2:c0:d4:92:f4:78:5e:
50:74:9e:cd:ab:9e:cb:c1:e0:99:c4:d9:09:54:93:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6F:E9:99:9B:FB:D3:06:74:39:D1:6F:4E:AC:54:2D:92:F6:D2:77
X509v3 Authority Key Identifier:
keyid:B3:98:60:E7:99:D5:30:66:1F:15:21:35:46:22:8E:99:29:A5:3C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2e:da:d9:ae:e5:a7:26:44:cf:8c:89:2c:3d:80:97:d1:9f:
e4:8c:96:c3:a9:cc:8a:92:bd:ba:2e:5d:80:c5:57:07:e0:a4:
49:19:7c:a0:32:bd:c4:f9:9f:c1:49:e3:86:13:5e:51:b1:11:
2a:44:5e:59:9e:b5:19:ae:ad:37:69:97:44:74:c0:38:4d:e4:
12:b9:fc:91:78:06:4f:c2:04:ca:b6:83:7c:50:c5:38:a0:e0:
7e:a9:3a:dd:88:9c:f6:43:42:31:c6:97:3d:58:19:df:29:06:
c5:ca:83:46:57:b6:6b:d1:76:e2:17:30:2d:86:0d:43:72:0c:
2e:7e:8e:f5:c0:64:d0:c7:2a:1d:65:5c:ae:c4:a9:a9:07:60:
24:68:92:39:73:61:d3:c3:62:63:2b:be:b9:c9:0d:f2:3b:03:
8a:09:55:69:05:73:c3:65:a2:a9:4b:22:af:6d:8f:0d:e8:32:
f7:b1:00:04:84:b9:16:5a:5f:b1:68:c6:25:b1:ce:78:3e:23:
ed:65:51:42:51:8c:6d:44:f9:31:d6:14:3a:af:15:e0:bb:1a:
7f:35:d2:06:18:61:09:9e:ea:ed:31:eb:74:02:d8:83:81:05:
45:53:7f:c2:4a:8a:90:7b:24:90:af:53:32:ab:88:79:5f:96:
2f:de:a2:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo7Nl3yfYfdlKU/1BuLqnX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOTg2MGU3OTlkNTMwNjYxZjE1MjEzNTQ2MjI4ZTk5Mjlh
NTNjOWMwHhcNMjUxMDMxMTcwMDA5WhcNMjUxMTAxMTcwMDA5WjAzMTEwLwYDVQQD
EyhkYzZmZTk5OTliZmJkMzA2NzQzOWQxNmY0ZWFjNTQyZDkyZjZkMjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSv7iD3s0Ynfys7ZoXKmqphX3XIT
QGj3EwtMwAgKC+ZRECzoouSNNCWlAm94nDgITS/pp8lBvp/TcKGxVbgNpt0y6siQ
b6ful3UwniqeRxdlZ0YhpAIPyFvVnAIpTcMpy76inBA0MI5wBG2jNkM7UZFd41j0
b75ky2fmUw994h1MUC/tDWfTbw7IDjobhHPtsV0fulRed05zUCaks46da+PX9OtH
faSSJjteekTmV5NkImrf2x/Qc9jexZe1w8Cu1IjluhX6gn3mPY4aEjE/dghiN6MS
K+U4fIYI/EniRIfDdEEfuVH+xcLA1JL0eF5QdJ7Nq57LweCZxNkJVJNBpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxv6Zmb+9MGdDnRb06sVC2S9tJ3MB8GA1UdIwQY
MBaAFLOYYOeZ1TBmHxUhNUYijpkppTycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczVoZzU1blZNR1lmRlNFMVJpS09tU21sUEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80ZTIwNmUtMGM5NS00YzhlLTg0N2Qt
YzEzZjMwZmRjYWRkLzEvczVoZzU1blZNR1lmRlNFMVJpS09tU21sUEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS80ZTIwNmUtMGM5NS00YzhlLTg0N2QtYzEzZjMwZmRjYWRk
LzEvczVoZzU1blZNR1lmRlNFMVJpS09tU21sUEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADC7a2a7l
pyZEz4yJLD2Al9Gf5IyWw6nMipK9ui5dgMVXB+CkSRl8oDK9xPmfwUnjhhNeUbER
KkReWZ61Ga6tN2mXRHTAOE3kErn8kXgGT8IEyraDfFDFOKDgfqk63Yic9kNCMcaX
PVgZ3ykGxcqDRle2a9F24hcwLYYNQ3IMLn6O9cBk0McqHWVcrsSpqQdgJGiSOXNh
08NiYyu+uckN8jsDiglVaQVzw2WiqUsir22PDegy97EABIS5FlpfsWjGJbHOeD4j
7WVRQlGMbUT5MdYUOq8V4LsafzXSBhhhCZ7q7THrdALYg4EFRVN/wkqKkHskkK9T
MquIeV+WL96ifw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:08 2025 by rpki-client