Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
File: opYekZxsdKh1zuBhj-zF_WP5WVE.mft (raw, json)
Hash identifier: HCcWZTxSe7o7gSpPsjwgEtcYQJJg6FwiQQn+CVcgGOk=
Subject key identifier: 77:00:87:39:15:90:91:E2:9D:66:EB:82:44:48:CB:D5:C1:8C:49:CE
Authority key identifier: A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
Certificate issuer: /CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Certificate serial: 0199CEA36F2949B128CAD99912B725A9BF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
Manifest number: 04E7
Signing time: Fri 10 Oct 2025 15:00:41 +0000
Manifest this update: Fri 10 Oct 2025 15:00:41 +0000
Manifest next update: Sat 11 Oct 2025 15:00:41 +0000
Files and hashes: 1: opYekZxsdKh1zuBhj-zF_WP5WVE.crl (hash: yLws8yA9TRDAOeVqxA9Wut9hQi9J2Wfp+6dVZRKzOYc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:a3:6f:29:49:b1:28:ca:d9:99:12:b7:25:a9:bf:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Validity
Not Before: Oct 10 15:00:41 2025 GMT
Not After : Oct 11 15:00:41 2025 GMT
Subject: CN=77008739159091e29d66eb824448cbd5c18c49ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:9a:64:c3:71:a1:75:c4:92:ed:76:9f:bc:
ad:41:87:e9:54:48:f1:38:89:33:54:5b:b0:d8:84:
16:62:6e:b0:51:02:ba:e9:bb:8c:b1:11:f2:8d:f4:
7f:e7:7d:4e:78:5f:1d:d1:3b:d2:f4:cb:e0:66:96:
2a:4e:bb:f1:14:a5:d1:79:e8:14:00:d2:73:e8:32:
4a:5c:06:79:d8:8e:b6:c3:75:37:fe:83:b0:ed:08:
c7:85:95:e9:f0:1c:97:28:e4:f5:0a:cb:f5:78:cf:
15:05:6b:dc:67:1b:47:a8:77:f5:b8:be:dd:2a:bc:
2e:66:d3:d8:53:cd:10:7a:59:7c:81:4b:96:8f:51:
4e:9f:40:a5:4d:3a:41:61:79:18:ee:9f:d5:ea:33:
47:54:e9:2a:7a:da:ec:5e:b7:2a:dc:0d:b8:68:49:
4e:77:19:d3:9b:ae:d8:a2:4a:2c:e9:2b:27:55:e6:
b3:5c:53:19:05:23:b3:01:7e:e6:28:f8:61:f9:08:
a3:83:76:87:45:da:88:c2:a2:03:65:48:92:ea:17:
54:25:e0:8a:86:f7:04:fa:45:48:91:4f:dc:fa:9c:
d1:3d:2e:8f:e5:6b:4d:2d:20:9a:57:f0:2a:d3:ca:
cd:54:1e:0c:01:f9:cb:ed:b6:35:c5:b2:5f:01:61:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:00:87:39:15:90:91:E2:9D:66:EB:82:44:48:CB:D5:C1:8C:49:CE
X509v3 Authority Key Identifier:
keyid:A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:20:a6:4f:1f:98:d1:ec:b9:34:77:31:3a:ea:f3:19:8e:70:
88:ef:f8:9a:b1:c3:b2:46:a9:a9:41:75:ce:4f:1c:82:16:0f:
99:40:ef:e7:50:69:28:a3:0f:be:b2:7f:0f:e0:ef:1b:bf:1e:
b9:19:c6:f4:1c:f8:af:fe:6f:f6:1f:82:e9:9f:b4:86:46:85:
bc:63:c5:6f:e7:97:d5:f3:05:ef:d1:8d:a3:9a:3e:8c:6a:dd:
bb:bd:9b:80:5d:d7:86:b8:25:5c:c4:ad:a0:d4:08:49:f8:7d:
f5:b6:dc:3e:3d:d2:35:c8:7a:38:dd:de:fc:83:3f:a6:b3:a9:
fe:c0:3a:73:3b:f5:22:94:11:e9:f8:85:2a:45:a8:d1:0d:59:
02:89:d1:8d:b3:76:5b:6e:83:36:a0:b3:36:5e:cd:c7:1e:d6:
f1:af:77:d2:f6:a7:fc:87:99:13:73:93:41:b9:74:04:d8:dd:
fd:44:20:48:9f:4d:fe:45:d9:81:33:c4:e9:d7:c3:b3:a6:9e:
e8:d5:f1:e0:67:ce:0d:21:93:ef:c1:ed:63:9a:fd:c6:56:4d:
a4:4e:9f:95:bc:b1:08:33:fc:6b:3d:a6:84:01:64:ec:a9:8d:
93:e4:cd:5b:5b:af:d3:ce:5c:ca:f1:41:e1:b5:87:56:f8:dc:
c3:5f:8a:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnOo28pSbEoytmZErclqb+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTYxZTkxOWM2Yzc0YTg3NWNlZTA2MThmZWNjNWZkNjNm
OTU5NTEwHhcNMjUxMDEwMTUwMDQxWhcNMjUxMDExMTUwMDQxWjAzMTEwLwYDVQQD
Eyg3NzAwODczOTE1OTA5MWUyOWQ2NmViODI0NDQ4Y2JkNWMxOGM0OWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+WaZMNxoXXEku12n7ytQYfpVEjx
OIkzVFuw2IQWYm6wUQK66buMsRHyjfR/531OeF8d0TvS9MvgZpYqTrvxFKXReegU
ANJz6DJKXAZ52I62w3U3/oOw7QjHhZXp8ByXKOT1Csv1eM8VBWvcZxtHqHf1uL7d
KrwuZtPYU80Qell8gUuWj1FOn0ClTTpBYXkY7p/V6jNHVOkqetrsXrcq3A24aElO
dxnTm67Yokos6SsnVeazXFMZBSOzAX7mKPhh+Qijg3aHRdqIwqIDZUiS6hdUJeCK
hvcE+kVIkU/c+pzRPS6P5WtNLSCaV/Aq08rNVB4MAfnL7bY1xbJfAWEEBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcAhzkVkJHinWbrgkRIy9XBjEnOMB8GA1UdIwQY
MBaAFKKWHpGcbHSodc7gYY/sxf1j+VlRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BZZWtaeHNkS2gxenVCaGotekZfV1A1V1ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xMDA4MzEtMzlmOC00YmYzLWJlMWEt
NGY1ZTI2NWQxNjc5LzEvb3BZZWtaeHNkS2gxenVCaGotekZfV1A1V1ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8xMDA4MzEtMzlmOC00YmYzLWJlMWEtNGY1ZTI2NWQxNjc5
LzEvb3BZZWtaeHNkS2gxenVCaGotekZfV1A1V1ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSCmTx+Y
0ey5NHcxOurzGY5wiO/4mrHDskapqUF1zk8cghYPmUDv51BpKKMPvrJ/D+DvG78e
uRnG9Bz4r/5v9h+C6Z+0hkaFvGPFb+eX1fMF79GNo5o+jGrdu72bgF3XhrglXMSt
oNQISfh99bbcPj3SNch6ON3e/IM/prOp/sA6czv1IpQR6fiFKkWo0Q1ZAonRjbN2
W26DNqCzNl7Nxx7W8a930van/IeZE3OTQbl0BNjd/UQgSJ9N/kXZgTPE6dfDs6ae
6NXx4GfODSGT78HtY5r9xlZNpE6flbyxCDP8az2mhAFk7KmNk+TNW1uv085cyvFB
4bWHVvjcw1+Ksw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:00:55 2025 by rpki-client