Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File: OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier: 8lkTOIf8Os2d/+rcLF+90EwLNwCwM/U7qAdeo8Bw5kc=
Subject key identifier: C3:25:EE:D1:5C:47:38:7B:BB:89:87:82:99:F0:07:09:52:BE:8E:B8
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer: /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial: 019A2E2002572843AF33697BE9BEC3285BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number: 168E
Signing time: Wed 29 Oct 2025 04:00:40 +0000
Manifest this update: Wed 29 Oct 2025 04:00:40 +0000
Manifest next update: Thu 30 Oct 2025 04:00:40 +0000
Files and hashes: 1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: nIG47leo7QgJWue/RnVj/yv1GuBvBx1/Rc6CFaegJig=)
2: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (hash: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:02:57:28:43:af:33:69:7b:e9:be:c3:28:5b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Validity
Not Before: Oct 29 04:00:40 2025 GMT
Not After : Oct 30 04:00:40 2025 GMT
Subject: CN=c325eed15c47387bbb89878299f0070952be8eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:8e:cc:98:3a:d2:38:12:55:a2:25:22:22:
ad:34:ba:18:f6:05:82:29:93:9e:02:c4:12:61:99:
42:48:93:f5:de:ff:56:be:e5:70:9b:98:73:8f:7a:
59:f1:c6:14:54:10:15:f1:9e:62:32:d9:3c:3d:82:
8d:d8:6e:76:30:9a:79:22:b3:c4:7f:f1:22:89:d3:
b7:3e:ff:1d:f4:c6:d3:d7:ba:5e:9b:ce:5f:52:cf:
19:55:7e:88:c7:26:29:91:c2:09:ed:9d:64:9c:59:
78:b9:04:ca:56:d6:c4:86:05:6d:63:66:19:c1:1a:
0a:c9:4c:9f:23:c4:1a:1f:70:54:31:86:f1:fb:3d:
0c:da:3d:a6:11:e3:db:d3:86:6b:94:dc:6f:1f:c1:
61:63:66:91:04:2c:fb:36:57:50:45:ce:8b:cf:6a:
56:77:1c:ee:d1:0f:01:3b:c6:08:ae:76:52:ad:7b:
e1:75:fc:d5:31:31:a0:26:2d:23:d6:1e:82:37:04:
76:e4:f9:d1:58:92:c2:5d:3f:26:c5:07:cb:bf:70:
01:4c:6a:c0:dc:5a:93:16:2e:ca:30:c3:e3:57:d1:
18:45:a1:84:ed:54:0d:01:1f:30:d1:ff:e0:d4:9f:
52:4a:9c:46:41:85:60:01:79:69:2b:d6:dd:00:e8:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:25:EE:D1:5C:47:38:7B:BB:89:87:82:99:F0:07:09:52:BE:8E:B8
X509v3 Authority Key Identifier:
keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ba:78:5f:1a:e6:98:29:65:27:bf:24:7d:1f:29:62:18:1b:
f5:12:1f:c4:00:da:0b:b7:35:ed:80:4f:91:2c:ea:c7:77:d1:
fb:a0:cc:25:c8:66:6b:2b:28:a5:c8:f5:16:08:40:93:78:d5:
29:33:7d:1b:36:de:e0:fc:94:24:3d:82:20:c4:cd:50:bb:98:
bb:0a:fe:82:f3:05:33:18:d2:0d:01:7c:13:71:81:16:17:75:
b6:a4:ed:d4:1b:96:4a:da:b5:6b:7f:fe:7d:32:a6:42:7d:50:
a8:05:e6:8f:4e:ce:c4:6b:ac:cf:d7:a3:dc:af:eb:94:fb:d3:
66:6f:b6:2a:5a:f7:36:c6:2f:54:e3:52:86:a2:b9:34:a0:5d:
53:00:9a:94:8a:86:85:a3:c3:be:6b:25:69:58:55:fc:dd:13:
fc:08:d5:2d:44:f4:95:a1:d8:d6:89:9e:ff:a1:0c:37:63:2d:
89:3b:12:52:c5:d4:28:b9:27:49:32:a7:53:7a:8d:a9:9b:c5:
ba:c3:9f:0b:e5:c5:32:89:b1:25:dc:9b:62:a6:c8:bf:8e:c6:
d2:bb:50:84:95:35:5f:50:39:f8:25:5b:d2:46:ed:bc:0b:7d:
21:4b:3e:15:1a:c4:97:2e:7c:ae:87:ac:d4:aa:c3:dd:d2:cb:
18:ff:7e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:01 2025 by rpki-client