
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
File: Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft (raw, json)
Hash identifier: m+y5lRUc/3cKxx0fpWpaM8Bf47O+AOT3CH/azE963yc=
Subject key identifier: 00:E4:68:0A:89:1E:92:0E:43:B0:55:B7:4B:D0:B7:D9:C9:5B:04:DD
Authority key identifier: 4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
Certificate issuer: /CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Certificate serial: 0198597D93B3C441AB38960C82725C6191D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
Manifest number: 160B
Signing time: Wed 30 Jul 2025 04:00:58 +0000
Manifest this update: Wed 30 Jul 2025 04:00:58 +0000
Manifest next update: Thu 31 Jul 2025 04:00:58 +0000
Files and hashes: 1: Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl (hash: I2hY0i5BXXTh438OXELl8aDXdP43Z68GMjZMGmstkqo=)
2: j2scll5jpWJtbLkshsiLm7lQWV4.roa (hash: oBr/N8q4deuJLs5MxsiKxc5IMYfXJKPf/aAvK/FNRFg=)
3: kZMSHFwhjt5ByeIL4QTKEiDJjZQ.roa (hash: WpstqOcmslj7HDAeoS/gg7u0eBQmjbTvTylTqyOzeKc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:7d:93:b3:c4:41:ab:38:96:0c:82:72:5c:61:91:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Validity
Not Before: Jul 30 04:00:58 2025 GMT
Not After : Jul 31 04:00:58 2025 GMT
Subject: CN=00e4680a891e920e43b055b74bd0b7d9c95b04dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:90:27:67:e7:de:35:3c:fa:24:a5:f9:0c:
07:f6:64:09:a3:62:aa:00:fc:af:a2:d4:ae:4f:bc:
6b:53:ab:ac:00:5f:7a:65:6f:02:88:45:80:c7:7b:
a8:18:ec:79:ff:91:54:72:60:95:02:2e:c3:94:67:
a1:f3:05:16:81:73:d9:12:bf:71:cf:7b:e0:ca:6d:
4a:da:0c:f2:e9:ef:6c:cd:2e:8c:86:b4:10:b7:1e:
b1:06:92:2e:b7:59:31:e4:b6:23:4d:32:e0:68:f5:
e8:66:ff:e1:84:0b:2d:be:1e:48:a0:b7:f9:3f:6b:
3b:3e:35:1f:46:c5:13:8c:e0:46:f3:29:26:de:77:
cd:01:b3:31:85:aa:b7:8b:10:2b:d7:81:4a:27:2b:
95:b9:c9:f8:29:30:e6:ce:ef:de:15:01:61:ef:5c:
63:ec:3d:61:4b:eb:9b:e2:6e:06:e7:04:40:54:82:
11:88:e0:2b:db:6f:04:fb:d8:84:66:13:f1:49:b7:
70:0b:74:fe:d1:97:b2:f1:a4:df:23:bc:e5:f2:5e:
8e:2c:20:09:b4:43:b0:1d:6b:28:24:24:5a:2b:4e:
b7:7f:d3:e9:5c:b9:01:68:8c:69:a0:6d:14:f2:3e:
46:af:ba:b8:46:a8:8f:af:7c:5c:75:d1:c8:e9:7e:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E4:68:0A:89:1E:92:0E:43:B0:55:B7:4B:D0:B7:D9:C9:5B:04:DD
X509v3 Authority Key Identifier:
keyid:4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bb:24:e2:f6:de:e5:3d:f6:32:d1:fe:1a:4c:e3:3a:f5:9d:
4d:55:ba:26:7e:0c:47:6c:ed:7f:bd:87:5a:2b:dd:9e:fe:01:
91:29:01:93:1c:b9:18:0b:b1:02:19:7f:ee:27:53:37:b8:d0:
ec:79:4f:82:f6:34:43:d0:27:bb:28:06:ac:14:5e:09:01:15:
ce:39:e0:ab:e8:23:05:f0:6c:c6:a4:cc:87:ce:3e:f3:29:4f:
9c:fd:66:4c:48:68:eb:3a:15:e8:b4:12:b0:0b:00:22:d0:40:
3f:be:d4:ec:84:de:34:ce:96:30:61:24:f8:42:44:8d:9e:a5:
4c:ec:f2:7f:22:4e:a3:49:01:51:b2:27:02:49:29:6d:78:5a:
68:67:ef:42:14:cc:a0:80:71:37:12:cd:8d:34:6f:d0:77:6c:
c6:f3:2d:19:e6:9f:28:a7:50:a0:7b:01:63:5d:23:99:59:9f:
cc:01:e4:2c:04:bc:c5:1a:21:b1:b3:a6:aa:0b:7c:5a:01:5a:
2a:5b:72:89:c6:eb:20:62:81:64:d8:5e:c7:e9:b6:fd:83:63:
e5:83:b5:b6:28:2f:79:5f:55:4d:67:c3:51:f8:0f:8c:8d:80:
f4:b5:df:31:02:3f:43:7a:92:7f:3f:90:80:b3:c5:0a:39:27:
37:17:be:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhZfZOzxEGrOJYMgnJcYZHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZGQwZjlkY2Q4ODk0OWI4ZjNhMzc3MTA2MzU2MmEwNTc2
NzkyOTAwHhcNMjUwNzMwMDQwMDU4WhcNMjUwNzMxMDQwMDU4WjAzMTEwLwYDVQQD
EygwMGU0NjgwYTg5MWU5MjBlNDNiMDU1Yjc0YmQwYjdkOWM5NWIwNGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1GQJ2fn3jU8+iSl+QwH9mQJo2Kq
APyvotSuT7xrU6usAF96ZW8CiEWAx3uoGOx5/5FUcmCVAi7DlGeh8wUWgXPZEr9x
z3vgym1K2gzy6e9szS6MhrQQtx6xBpIut1kx5LYjTTLgaPXoZv/hhAstvh5IoLf5
P2s7PjUfRsUTjOBG8ykm3nfNAbMxhaq3ixAr14FKJyuVucn4KTDmzu/eFQFh71xj
7D1hS+ub4m4G5wRAVIIRiOAr228E+9iEZhPxSbdwC3T+0Zey8aTfI7zl8l6OLCAJ
tEOwHWsoJCRaK063f9PpXLkBaIxpoG0U8j5Gr7q4RqiPr3xcddHI6X7COQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADkaAqJHpIOQ7BVt0vQt9nJWwTdMB8GA1UdIwQY
MBaAFE3dD53NiJSbjzo3cQY1YqBXZ5KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGQwUG5jMklsSnVQT2pkeEJqVmlvRmRua3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zYTdlNDktOWQyNy00ZTRlLWFhMzYt
NmY2Y2NiNmUyY2RhLzEvVGQwUG5jMklsSnVQT2pkeEJqVmlvRmRua3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zYTdlNDktOWQyNy00ZTRlLWFhMzYtNmY2Y2NiNmUyY2Rh
LzEvVGQwUG5jMklsSnVQT2pkeEJqVmlvRmRua3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLsk4vbe
5T32MtH+GkzjOvWdTVW6Jn4MR2ztf72HWivdnv4BkSkBkxy5GAuxAhl/7idTN7jQ
7HlPgvY0Q9AnuygGrBReCQEVzjngq+gjBfBsxqTMh84+8ylPnP1mTEho6zoV6LQS
sAsAItBAP77U7ITeNM6WMGEk+EJEjZ6lTOzyfyJOo0kBUbInAkkpbXhaaGfvQhTM
oIBxNxLNjTRv0HdsxvMtGeafKKdQoHsBY10jmVmfzAHkLAS8xRohsbOmqgt8WgFa
KltyicbrIGKBZNhex+m2/YNj5YO1tigveV9VTWfDUfgPjI2A9LXfMQI/Q3qSfz+Q
gLPFCjknNxe+8Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:36:25 2025 by rpki-client