Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
File: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft (raw, json)
Hash identifier: sK6wvJs88s4O0FixniSQVBwLWU4ILftR1J4euioT1F0=
Subject key identifier: AD:3D:73:AA:03:6C:6E:24:6F:F9:27:FC:E9:B7:A0:E7:B4:4A:68:1B
Authority key identifier: 8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
Certificate issuer: /CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Certificate serial: 0198876914E7FA6F23D3D617F59539C18DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
Manifest number: 125D
Signing time: Fri 08 Aug 2025 02:01:07 +0000
Manifest this update: Fri 08 Aug 2025 02:01:07 +0000
Manifest next update: Sat 09 Aug 2025 02:01:07 +0000
Files and hashes: 1: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl (hash: 9WFqokqdj9YgOIDLnDRdYKJyRfflLSW6OSvMzCfT4tE=)
2: vWNF9c9xh0UQ-FU-UmVlKKmFXu0.roa (hash: 6rkEiKqMQhH3x9WDxfo0uMKCtMaKKNiS0hRACYb4UZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:69:14:e7:fa:6f:23:d3:d6:17:f5:95:39:c1:8d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Validity
Not Before: Aug 8 02:01:07 2025 GMT
Not After : Aug 9 02:01:07 2025 GMT
Subject: CN=ad3d73aa036c6e246ff927fce9b7a0e7b44a681b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:be:eb:7e:51:08:2d:7e:8e:83:71:c8:1e:
a8:60:c9:cc:25:fc:08:40:36:fa:65:0c:fc:63:d4:
4a:94:89:4a:1b:cc:66:33:a2:9e:98:de:6d:a3:39:
fd:18:a2:6b:01:d2:42:d3:9c:49:40:40:4b:53:3f:
d2:9d:32:2c:76:9f:85:0a:9e:45:6d:a0:8a:d6:56:
50:ed:ba:de:db:65:4f:63:fe:bb:ad:b6:0c:5a:08:
d6:66:a1:d3:7c:4f:7a:90:ae:2e:47:eb:ac:14:58:
27:6c:7b:40:c2:45:d0:26:b2:5c:73:a8:f8:a9:c0:
28:47:a8:f7:49:22:ca:9f:90:82:44:ad:a0:b9:aa:
6e:c2:32:33:62:ad:fe:9c:fc:1b:07:cd:f9:f0:b1:
f1:c9:33:21:92:ba:19:5e:79:23:0c:09:ea:66:14:
c5:6b:92:2a:c4:94:1b:fe:d4:47:5d:8f:2e:d8:a5:
64:18:2e:66:e6:40:69:c3:bc:7b:b0:a0:47:7a:6a:
36:0d:8f:4f:69:06:06:02:91:e0:68:52:73:d0:8b:
8f:a7:e0:a4:f1:1a:b9:4c:01:65:f9:2b:a8:7a:53:
f7:d5:5b:9d:c7:41:05:b7:5b:19:a2:38:87:b9:78:
f8:e5:be:fc:dd:e8:81:dc:d3:b6:8e:09:a8:a2:7f:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3D:73:AA:03:6C:6E:24:6F:F9:27:FC:E9:B7:A0:E7:B4:4A:68:1B
X509v3 Authority Key Identifier:
keyid:8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2d:28:a2:0f:0e:b9:70:aa:59:1c:f9:c5:a8:94:1c:72:2e:
5f:71:d7:fb:fc:aa:65:61:51:3e:c7:00:ad:b6:92:38:f8:07:
ce:4e:9d:76:d5:e9:45:22:12:68:18:40:99:85:7c:93:b6:43:
9f:ac:77:a3:62:cd:75:6e:34:9f:98:77:94:91:fc:b9:7a:f9:
b3:e3:2f:27:1a:cb:e2:9d:11:ce:fd:82:93:ef:89:11:69:c2:
ef:83:ab:1a:04:46:2f:eb:39:61:96:17:64:70:f7:45:06:0d:
c5:cf:62:bc:4b:ee:4a:3a:50:a6:9f:c9:06:b6:fe:ee:69:68:
98:e5:1d:f0:94:e9:72:f3:a0:d3:14:9a:8e:1e:8c:2d:b4:d0:
b0:01:23:3b:55:74:02:b4:da:68:11:36:ce:47:f6:9c:fa:34:
c2:fc:72:2e:93:d2:0f:46:0e:f8:2e:56:a0:20:a0:b9:bb:43:
c7:a6:90:d8:ed:10:f0:ba:e2:77:19:f3:b7:ac:03:57:09:e3:
4a:36:c4:18:d1:5e:de:b2:8f:6e:86:5f:20:e3:b0:cb:cf:06:
f3:b6:6e:b3:ca:5b:7e:92:01:63:03:f1:f7:76:77:2e:71:d3:
af:ce:05:90:85:f2:63:5a:25:0d:1b:6d:fe:81:54:e8:de:51:
8f:83:65:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiHaRTn+m8j09YX9ZU5wY3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNTExODY1OTMwMjk5NzYzZTBlNWYyZDgyNTY3ZGM1YTFk
NTNlNzkwHhcNMjUwODA4MDIwMTA3WhcNMjUwODA5MDIwMTA3WjAzMTEwLwYDVQQD
EyhhZDNkNzNhYTAzNmM2ZTI0NmZmOTI3ZmNlOWI3YTBlN2I0NGE2ODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNO+635RCC1+joNxyB6oYMnMJfwI
QDb6ZQz8Y9RKlIlKG8xmM6KemN5tozn9GKJrAdJC05xJQEBLUz/SnTIsdp+FCp5F
baCK1lZQ7bre22VPY/67rbYMWgjWZqHTfE96kK4uR+usFFgnbHtAwkXQJrJcc6j4
qcAoR6j3SSLKn5CCRK2guapuwjIzYq3+nPwbB8358LHxyTMhkroZXnkjDAnqZhTF
a5IqxJQb/tRHXY8u2KVkGC5m5kBpw7x7sKBHemo2DY9PaQYGApHgaFJz0IuPp+Ck
8Rq5TAFl+SuoelP31Vudx0EFt1sZojiHuXj45b783eiB3NO2jgmoon9tAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK09c6oDbG4kb/kn/Om3oOe0SmgbMB8GA1UdIwQY
MBaAFItRGGWTApl2Pg5fLYJWfcWh1T55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTFFWVpaTUNtWFktRGw4dGdsWjl4YUhWUG5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9hOGYwMmItNjU2My00MGE5LWEzNWEt
MWYwOWJiNmRiMWI2LzEvaTFFWVpaTUNtWFktRGw4dGdsWjl4YUhWUG5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9hOGYwMmItNjU2My00MGE5LWEzNWEtMWYwOWJiNmRiMWI2
LzEvaTFFWVpaTUNtWFktRGw4dGdsWjl4YUhWUG5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGS0oog8O
uXCqWRz5xaiUHHIuX3HX+/yqZWFRPscArbaSOPgHzk6ddtXpRSISaBhAmYV8k7ZD
n6x3o2LNdW40n5h3lJH8uXr5s+MvJxrL4p0Rzv2Ck++JEWnC74OrGgRGL+s5YZYX
ZHD3RQYNxc9ivEvuSjpQpp/JBrb+7mlomOUd8JTpcvOg0xSajh6MLbTQsAEjO1V0
ArTaaBE2zkf2nPo0wvxyLpPSD0YO+C5WoCCgubtDx6aQ2O0Q8Lridxnzt6wDVwnj
SjbEGNFe3rKPboZfIOOwy88G87Zus8pbfpIBYwPx93Z3LnHTr84FkIXyY1olDRtt
/oFU6N5Rj4Nliw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:29:04 2025 by rpki-client