Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.mft
File: oVoQX1umJ-W-bx_5HyWXJ4IJkx8.mft (raw, json)
Hash identifier: j24UFuNbhGTbHUs0NTRkl/h891ekS12p/AOtG/dvVSs=
Subject key identifier: 80:39:12:F3:B5:E6:D0:BB:FD:CE:CE:B6:63:AF:77:13:0E:09:5B:04
Authority key identifier: A1:5A:10:5F:5B:A6:27:E5:BE:6F:1F:F9:1F:25:97:27:82:09:93:1F
Certificate issuer: /CN=a15a105f5ba627e5be6f1ff91f2597278209931f
Certificate serial: 019912AB5707E51F2E9173CD0B300744AF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.mft
Manifest number: 14DF
Signing time: Thu 04 Sep 2025 03:00:42 +0000
Manifest this update: Thu 04 Sep 2025 03:00:42 +0000
Manifest next update: Fri 05 Sep 2025 03:00:42 +0000
Files and hashes: 1: ZcTmzRVwzbIZI35RxAQspNK8wA0.roa (hash: CvHPermbD4g/guqKSz7nbFfdIQ834453x2yMIE8CXZg=)
2: oVoQX1umJ-W-bx_5HyWXJ4IJkx8.crl (hash: o4WFGeLVBYase1JaAd9Eca+zEjh9Sd9B3ewYXIDQWx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:12:ab:57:07:e5:1f:2e:91:73:cd:0b:30:07:44:af:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15a105f5ba627e5be6f1ff91f2597278209931f
Validity
Not Before: Sep 4 03:00:42 2025 GMT
Not After : Sep 5 03:00:42 2025 GMT
Subject: CN=803912f3b5e6d0bbfdceceb663af77130e095b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c8:93:68:89:3a:5d:2e:65:61:ac:96:60:aa:
e2:49:dd:05:bc:ac:d6:55:3a:90:1f:05:b6:27:80:
90:d7:53:2c:15:01:ba:64:7f:73:ad:87:5c:a8:92:
ec:c4:f1:c6:ad:eb:64:c2:b3:b4:b3:af:22:64:95:
5c:5a:5a:a3:9d:3c:6c:63:a0:cc:50:19:49:42:c9:
37:1e:1b:92:f5:8f:f5:05:e8:5c:cd:26:d9:84:7e:
f1:44:c6:a0:3c:c3:c4:3a:5b:17:17:ee:fc:13:ba:
bd:c3:6b:13:6b:f3:2b:e9:0a:d5:78:33:25:a5:d3:
3d:3e:ef:e9:07:43:31:0b:f4:5a:11:1d:07:40:c6:
65:82:1b:55:53:d1:84:8c:b3:fa:1f:8c:be:7b:a2:
ed:e9:88:0a:c1:7d:8e:92:b7:41:04:27:38:2f:99:
fd:b3:70:54:f1:b4:20:92:9c:a5:32:10:f3:1c:4d:
5e:20:7b:29:b9:bc:e0:d4:8d:61:60:4a:6b:8e:79:
a7:ab:00:4f:d2:90:90:6b:15:07:3f:75:51:77:d4:
0b:96:95:2e:b3:5a:f3:a7:11:0a:7f:bb:bb:95:1c:
4b:e0:6c:55:de:f2:3e:be:ed:da:a6:f6:cb:3d:50:
c2:73:eb:27:e4:ba:ce:e0:48:24:b0:12:15:99:0a:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:39:12:F3:B5:E6:D0:BB:FD:CE:CE:B6:63:AF:77:13:0E:09:5B:04
X509v3 Authority Key Identifier:
keyid:A1:5A:10:5F:5B:A6:27:E5:BE:6F:1F:F9:1F:25:97:27:82:09:93:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:07:52:b8:c0:67:e1:47:bf:0a:14:b8:31:02:a5:70:36:2d:
60:b8:8b:7b:30:4d:33:22:c4:9c:f2:60:75:fa:33:7a:21:5c:
35:e1:90:96:43:f6:b9:8c:db:18:c3:a3:b4:46:5e:de:07:85:
3b:e7:12:1d:9e:2b:42:3f:92:e3:ea:e9:29:04:2a:e5:7e:ca:
13:ab:fb:c1:f0:31:dc:77:3b:c3:9b:e7:b2:6f:a4:ed:52:f6:
a9:01:b3:55:9e:8b:6d:c5:fb:71:f9:be:34:96:a8:7f:63:46:
6f:64:db:f7:4c:0b:6d:3e:29:bb:4b:22:57:45:78:b8:82:93:
07:31:5a:23:46:15:cf:16:74:1c:86:e2:a0:a5:55:d3:00:cf:
5f:af:af:cd:af:46:92:cf:11:08:6f:d8:c7:c2:fa:f1:33:81:
be:73:72:be:70:85:44:08:d5:22:da:d7:f3:90:05:27:aa:f1:
dc:1e:a7:d2:9e:59:aa:fa:64:e8:7c:00:a8:bd:bb:1f:49:a1:
d1:0a:f3:b9:9d:6c:22:ec:0d:00:32:13:33:2f:9e:66:cf:d4:
99:7f:87:54:13:25:90:45:35:0f:a5:c6:1c:ae:2e:9d:20:aa:
13:af:ac:13:96:59:97:9b:c8:e7:03:3f:8c:35:26:a6:a1:6c:
8d:51:fe:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkSq1cH5R8ukXPNCzAHRK+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNWExMDVmNWJhNjI3ZTViZTZmMWZmOTFmMjU5NzI3ODIw
OTkzMWYwHhcNMjUwOTA0MDMwMDQyWhcNMjUwOTA1MDMwMDQyWjAzMTEwLwYDVQQD
Eyg4MDM5MTJmM2I1ZTZkMGJiZmRjZWNlYjY2M2FmNzcxMzBlMDk1YjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ciTaIk6XS5lYayWYKriSd0FvKzW
VTqQHwW2J4CQ11MsFQG6ZH9zrYdcqJLsxPHGretkwrO0s68iZJVcWlqjnTxsY6DM
UBlJQsk3HhuS9Y/1BehczSbZhH7xRMagPMPEOlsXF+78E7q9w2sTa/Mr6QrVeDMl
pdM9Pu/pB0MxC/RaER0HQMZlghtVU9GEjLP6H4y+e6Lt6YgKwX2OkrdBBCc4L5n9
s3BU8bQgkpylMhDzHE1eIHspubzg1I1hYEprjnmnqwBP0pCQaxUHP3VRd9QLlpUu
s1rzpxEKf7u7lRxL4GxV3vI+vu3apvbLPVDCc+sn5LrO4EgksBIVmQox8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIA5EvO15tC7/c7OtmOvdxMOCVsEMB8GA1UdIwQY
MBaAFKFaEF9bpiflvm8f+R8llyeCCZMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZvUVgxdW1KLVctYnhfNUh5V1hKNElKa3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80NTM0MGMtNTQwYy00ZmFmLThhOWYt
MDVjZTQ4ZDVmMmQ4LzEvb1ZvUVgxdW1KLVctYnhfNUh5V1hKNElKa3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80NTM0MGMtNTQwYy00ZmFmLThhOWYtMDVjZTQ4ZDVmMmQ4
LzEvb1ZvUVgxdW1KLVctYnhfNUh5V1hKNElKa3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgdSuMBn
4Ue/ChS4MQKlcDYtYLiLezBNMyLEnPJgdfozeiFcNeGQlkP2uYzbGMOjtEZe3geF
O+cSHZ4rQj+S4+rpKQQq5X7KE6v7wfAx3Hc7w5vnsm+k7VL2qQGzVZ6LbcX7cfm+
NJaof2NGb2Tb90wLbT4pu0siV0V4uIKTBzFaI0YVzxZ0HIbioKVV0wDPX6+vza9G
ks8RCG/Yx8L68TOBvnNyvnCFRAjVItrX85AFJ6rx3B6n0p5Zqvpk6HwAqL27H0mh
0QrzuZ1sIuwNADITMy+eZs/UmX+HVBMlkEU1D6XGHK4unSCqE6+sE5ZZl5vI5wM/
jDUmpqFsjVH+zg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:51 2025 by rpki-client