Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
File: YFUi433iaw1WiVrBirB9fHhKuTw.mft (raw, json)
Hash identifier: PwQMT+W8FBsFqJtcerEdTtmVVt7kkrJaWRKidxS+tmY=
Subject key identifier: C8:A9:51:D7:C8:A4:1E:70:AA:F9:02:F0:C5:FD:83:AC:BF:80:06:B9
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Certificate issuer: /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial: 019A2E56956113AD0BE51971AD65F408B5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
Manifest number: 0FAE
Signing time: Wed 29 Oct 2025 05:00:17 +0000
Manifest this update: Wed 29 Oct 2025 05:00:17 +0000
Manifest next update: Thu 30 Oct 2025 05:00:17 +0000
Files and hashes: 1: YFUi433iaw1WiVrBirB9fHhKuTw.crl (hash: 3uRr5V0/nI9odSHeQB88YETpoVqm8C+97QJwZg72W0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:56:95:61:13:ad:0b:e5:19:71:ad:65:f4:08:b5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Validity
Not Before: Oct 29 05:00:17 2025 GMT
Not After : Oct 30 05:00:17 2025 GMT
Subject: CN=c8a951d7c8a41e70aaf902f0c5fd83acbf8006b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:9e:64:10:3e:1d:f3:3f:d6:1f:c3:48:e0:
19:6e:12:43:ed:8f:07:4a:c6:89:81:e9:80:ce:07:
02:b5:74:e5:e8:44:78:84:de:fe:8d:ee:fb:f1:89:
ae:51:52:46:a0:44:bc:2b:6f:86:90:90:af:47:4a:
9f:3f:c7:cd:cc:55:f3:29:9d:12:dc:77:00:de:48:
06:2a:05:04:24:88:b8:51:2e:db:88:1d:fe:b5:4f:
74:7b:8e:67:f1:30:db:ac:0b:44:25:8e:94:31:c4:
7f:28:95:89:2e:78:1d:79:a3:e2:88:5f:ee:ce:60:
2c:52:18:2b:08:c7:31:63:40:d9:a5:eb:18:dd:4c:
56:5f:83:fe:84:5a:0d:f6:9e:28:dd:c5:55:5b:b8:
7c:da:b5:9d:38:b5:b8:a0:9b:24:a2:82:35:4a:56:
03:f2:6e:34:7f:2a:59:da:90:ef:3e:2b:0f:40:38:
1f:26:5c:f3:3f:3e:b6:b2:fa:84:db:ac:d4:e3:e5:
2c:a7:b0:d4:32:55:9e:44:b1:0a:8a:33:07:90:1b:
ab:0a:2b:24:24:11:e0:46:f0:a0:c9:0c:2d:43:27:
29:70:91:bc:e6:34:6f:5c:1f:e2:54:cc:76:93:92:
10:da:89:95:ca:0c:f1:2b:e4:d4:a1:d8:4f:3b:a9:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A9:51:D7:C8:A4:1E:70:AA:F9:02:F0:C5:FD:83:AC:BF:80:06:B9
X509v3 Authority Key Identifier:
keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a0:46:fc:b8:e3:99:66:7d:23:af:84:41:49:d0:24:91:07:
51:0f:7f:1b:93:9c:bd:90:b0:06:f4:77:34:1d:9c:94:29:d8:
d3:10:db:4f:61:cc:dc:d7:8a:6e:e5:66:8d:e0:14:75:b6:3d:
d6:8b:36:e9:bb:53:c9:5d:cc:af:e5:96:80:59:5e:48:a8:00:
4e:1c:22:08:d3:7f:f7:60:6b:b7:74:c2:8e:d3:6a:fd:21:3e:
25:b3:07:af:03:77:b2:18:7b:db:13:7c:4f:c1:84:23:98:ad:
e3:a2:33:3d:ea:5b:57:d5:2e:49:0a:a4:f8:82:03:7b:26:36:
7a:89:1d:4d:8f:5f:95:e8:36:92:bb:ce:9b:14:c2:82:79:06:
a9:aa:bf:53:56:98:6a:8c:d1:32:51:05:d8:a5:11:29:bc:ec:
9d:15:c2:17:0d:30:fa:84:27:78:4e:c2:df:ca:b4:21:2b:77:
39:f4:64:f6:00:b4:71:9a:82:23:54:c5:e6:5b:60:b0:f5:1b:
1f:cf:ef:c7:2b:ef:da:bd:bf:09:7e:86:fa:d6:cb:46:04:d0:
f9:99:d5:8e:7e:8f:e6:c3:47:16:ef:23:d1:35:0f:27:93:94:
04:c6:74:67:78:05:4a:b7:d1:ab:43:47:73:54:82:96:22:22:
39:82:99:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZouVpVhE60L5RlxrWX0CLXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTUyMmUzN2RlMjZiMGQ1Njg5NWFjMThhYjA3ZDdjNzg0
YWI5M2MwHhcNMjUxMDI5MDUwMDE3WhcNMjUxMDMwMDUwMDE3WjAzMTEwLwYDVQQD
EyhjOGE5NTFkN2M4YTQxZTcwYWFmOTAyZjBjNWZkODNhY2JmODAwNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22aeZBA+HfM/1h/DSOAZbhJD7Y8H
SsaJgemAzgcCtXTl6ER4hN7+je778YmuUVJGoES8K2+GkJCvR0qfP8fNzFXzKZ0S
3HcA3kgGKgUEJIi4US7biB3+tU90e45n8TDbrAtEJY6UMcR/KJWJLngdeaPiiF/u
zmAsUhgrCMcxY0DZpesY3UxWX4P+hFoN9p4o3cVVW7h82rWdOLW4oJskooI1SlYD
8m40fypZ2pDvPisPQDgfJlzzPz62svqE26zU4+Usp7DUMlWeRLEKijMHkBurCisk
JBHgRvCgyQwtQycpcJG85jRvXB/iVMx2k5IQ2omVygzxK+TUodhPO6noNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMipUdfIpB5wqvkC8MX9g6y/gAa5MB8GA1UdIwQY
MBaAFGBVIuN94msNVolawYqwfXx4Srk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZVaTQzM2lhdzFXaVZyQmlyQjlmSGhLdVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8wOTYxZjktZDg1ZC00OTc2LWE0Y2Qt
YTE4ZWQxOWM0OWUzLzEvWUZVaTQzM2lhdzFXaVZyQmlyQjlmSGhLdVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8wOTYxZjktZDg1ZC00OTc2LWE0Y2QtYTE4ZWQxOWM0OWUz
LzEvWUZVaTQzM2lhdzFXaVZyQmlyQjlmSGhLdVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaBG/Ljj
mWZ9I6+EQUnQJJEHUQ9/G5OcvZCwBvR3NB2clCnY0xDbT2HM3NeKbuVmjeAUdbY9
1os26btTyV3Mr+WWgFleSKgAThwiCNN/92Brt3TCjtNq/SE+JbMHrwN3shh72xN8
T8GEI5it46IzPepbV9UuSQqk+IIDeyY2eokdTY9fleg2krvOmxTCgnkGqaq/U1aY
aozRMlEF2KURKbzsnRXCFw0w+oQneE7C38q0ISt3OfRk9gC0cZqCI1TF5ltgsPUb
H8/vxyvv2r2/CX6G+tbLRgTQ+ZnVjn6P5sNHFu8j0TUPJ5OUBMZ0Z3gFSrfRq0NH
c1SCliIiOYKZsA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:54:07 2025 by rpki-client