Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
File: QiYpIEOCMfMh47gQEIiyD5DAjUY.mft (raw, json)
Hash identifier: GyjMP9XnyBWel2lSx1+vdd02uaU9JymR++HBhE8z7zg=
Subject key identifier: DC:15:0B:1C:7C:EE:47:B1:40:D1:3D:04:3A:3B:1B:35:DB:F2:0A:70
Authority key identifier: 42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
Certificate issuer: /CN=42262920438231f321e3b8101088b20f90c08d46
Certificate serial: 01979BCDACEA69593F727CE904D9249241BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
Manifest number: 0509
Signing time: Mon 23 Jun 2025 08:00:36 +0000
Manifest this update: Mon 23 Jun 2025 08:00:36 +0000
Manifest next update: Tue 24 Jun 2025 08:00:36 +0000
Files and hashes: 1: QiYpIEOCMfMh47gQEIiyD5DAjUY.crl (hash: BGKrOfuFAzwywb8wUWHtYM1jr8isePGVSlGzFuUsMzU=)
2: vzK0GcfKIhsh5S1UL0NdOS-MO04.roa (hash: tbZrlZm8dX+O2bKlUBHktkojMJRjyTWeZk1UwYb3Lj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:cd:ac:ea:69:59:3f:72:7c:e9:04:d9:24:92:41:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42262920438231f321e3b8101088b20f90c08d46
Validity
Not Before: Jun 23 08:00:36 2025 GMT
Not After : Jun 24 08:00:36 2025 GMT
Subject: CN=dc150b1c7cee47b140d13d043a3b1b35dbf20a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9e:3c:57:3c:4d:dd:74:e3:fa:0b:32:c1:2d:
5f:a3:ca:b4:00:a3:21:58:84:67:13:de:45:96:2a:
e5:10:9f:71:a1:0b:a4:28:c6:c7:c8:f1:cd:c5:70:
d2:fb:6b:4d:a9:1b:b5:8f:34:fa:c5:c4:58:b0:89:
51:05:07:24:dd:09:00:18:81:3c:06:5c:c3:9d:46:
d1:bf:b0:88:04:e1:52:c2:4c:46:8e:82:8d:5f:d3:
c5:df:f0:75:79:1a:5d:da:80:0e:1c:4a:36:64:8b:
a7:47:6f:d5:cb:2f:21:c2:72:4b:9a:94:cf:42:c4:
9a:c4:c5:eb:f2:d1:ec:48:2a:b3:b9:ef:31:34:11:
b7:86:84:1a:c1:3f:41:1a:2f:2d:66:8d:eb:6f:05:
a0:18:77:a8:98:9a:f5:5a:38:57:52:37:7c:90:26:
01:b3:54:1d:c2:ac:56:5c:aa:13:1e:98:17:8f:fa:
b7:d8:cd:78:56:97:5b:34:e9:7a:11:e1:24:ea:21:
d5:a0:21:06:d4:6c:fc:ff:1f:6b:d5:e9:0c:05:1b:
3e:aa:40:63:45:22:97:92:1c:9f:94:58:5c:13:f7:
49:cb:ce:66:ee:93:9f:cc:ca:08:69:ad:9c:65:de:
6a:3d:1d:b6:10:8f:8f:e9:9c:01:ff:5c:05:8a:8d:
39:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:15:0B:1C:7C:EE:47:B1:40:D1:3D:04:3A:3B:1B:35:DB:F2:0A:70
X509v3 Authority Key Identifier:
keyid:42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2e:b5:72:de:5c:28:84:a5:81:dd:93:57:eb:8f:ba:d9:46:
ae:07:e4:a7:5a:75:f0:44:2f:5c:9e:93:a5:f5:cd:02:d2:32:
7d:40:88:03:4c:e9:c3:64:3a:c5:d4:75:b5:56:d9:f8:da:a0:
f6:41:8f:b6:9a:11:c8:0d:85:76:29:a9:f9:75:10:06:e0:b7:
02:6a:7f:f2:27:49:6e:a4:6f:7b:3a:86:4d:07:ec:ee:61:7d:
8a:ec:22:30:1e:66:f7:d6:5b:89:69:47:32:44:49:fe:a4:86:
96:79:b4:39:02:b1:7c:85:ff:1b:de:e6:63:28:09:9a:8f:04:
93:b9:0f:0b:ff:87:cb:bd:93:30:07:29:89:d7:df:5a:12:cd:
c1:3a:5e:7f:20:0d:a5:17:58:ce:9b:6c:d5:ea:1f:1e:d4:b0:
88:cf:18:c3:b6:0f:9f:17:c3:c1:e2:26:0b:e0:fc:d5:8f:f9:
22:97:76:40:b8:84:60:92:e0:07:c3:b6:4e:c3:c0:40:7d:b5:
23:4b:7b:3b:69:54:21:48:32:b9:11:fd:6a:64:43:30:c0:32:
17:6b:3c:54:f7:b1:f9:f9:4d:3f:75:9f:97:04:89:04:9c:60:
a6:04:4c:b0:6f:57:48:34:4a:a0:cf:5d:13:5c:08:ef:31:e3:
69:b1:77:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZebzazqaVk/cnzpBNkkkkG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjYyOTIwNDM4MjMxZjMyMWUzYjgxMDEwODhiMjBmOTBj
MDhkNDYwHhcNMjUwNjIzMDgwMDM2WhcNMjUwNjI0MDgwMDM2WjAzMTEwLwYDVQQD
EyhkYzE1MGIxYzdjZWU0N2IxNDBkMTNkMDQzYTNiMWIzNWRiZjIwYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ48VzxN3XTj+gsywS1fo8q0AKMh
WIRnE95FlirlEJ9xoQukKMbHyPHNxXDS+2tNqRu1jzT6xcRYsIlRBQck3QkAGIE8
BlzDnUbRv7CIBOFSwkxGjoKNX9PF3/B1eRpd2oAOHEo2ZIunR2/Vyy8hwnJLmpTP
QsSaxMXr8tHsSCqzue8xNBG3hoQawT9BGi8tZo3rbwWgGHeomJr1WjhXUjd8kCYB
s1QdwqxWXKoTHpgXj/q32M14VpdbNOl6EeEk6iHVoCEG1Gz8/x9r1ekMBRs+qkBj
RSKXkhyflFhcE/dJy85m7pOfzMoIaa2cZd5qPR22EI+P6ZwB/1wFio050wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwVCxx87kexQNE9BDo7GzXb8gpwMB8GA1UdIwQY
MBaAFEImKSBDgjHzIeO4EBCIsg+QwI1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlZcElFT0NNZk1oNDdnUUVJaXlENURBalVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jOWI3MzMtM2JiNC00YmJiLTk2MzYt
NzRlNjIwYjE4MDFiLzEvUWlZcElFT0NNZk1oNDdnUUVJaXlENURBalVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jOWI3MzMtM2JiNC00YmJiLTk2MzYtNzRlNjIwYjE4MDFi
LzEvUWlZcElFT0NNZk1oNDdnUUVJaXlENURBalVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoi61ct5c
KISlgd2TV+uPutlGrgfkp1p18EQvXJ6TpfXNAtIyfUCIA0zpw2Q6xdR1tVbZ+Nqg
9kGPtpoRyA2Fdimp+XUQBuC3Amp/8idJbqRvezqGTQfs7mF9iuwiMB5m99ZbiWlH
MkRJ/qSGlnm0OQKxfIX/G97mYygJmo8Ek7kPC/+Hy72TMAcpidffWhLNwTpefyAN
pRdYzpts1eofHtSwiM8Yw7YPnxfDweImC+D81Y/5Ipd2QLiEYJLgB8O2TsPAQH21
I0t7O2lUIUgyuRH9amRDMMAyF2s8VPex+flNP3WflwSJBJxgpgRMsG9XSDRKoM9d
E1wI7zHjabF3MQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 19:51:42 2025 by rpki-client