Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
File: dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft (raw, json)
Hash identifier: YSCET8ahCYnvtR+NxVrTMG2uv46RlV7EEhMlxQ9UKFk=
Subject key identifier: DF:A4:D8:D3:3A:29:2C:5D:ED:FF:11:A6:D1:E3:E5:CF:3E:73:3D:62
Authority key identifier: 76:57:21:1F:8A:66:56:1B:57:70:FF:19:B4:71:AE:F5:11:E8:37:78
Certificate issuer: /CN=7657211f8a66561b5770ff19b471aef511e83778
Certificate serial: 0198CACA263FE0AF2C25A369284181ECA7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
Manifest number: 04FF
Signing time: Thu 21 Aug 2025 04:01:42 +0000
Manifest this update: Thu 21 Aug 2025 04:01:42 +0000
Manifest next update: Fri 22 Aug 2025 04:01:42 +0000
Files and hashes: 1: dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl (hash: VWafJV/p2YfGb0bvPZh1rrPXzF6XoJv7dKAvVz0kSKI=)
2: yLtjzto1Tw0b7DlDBQrKX87uiq0.roa (hash: qEZ4slqleS/pMqHZqm26TIAeJ329Oueymvehs7DZe3Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:ca:26:3f:e0:af:2c:25:a3:69:28:41:81:ec:a7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7657211f8a66561b5770ff19b471aef511e83778
Validity
Not Before: Aug 21 04:01:42 2025 GMT
Not After : Aug 22 04:01:42 2025 GMT
Subject: CN=dfa4d8d33a292c5dedff11a6d1e3e5cf3e733d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:08:48:b7:49:8b:84:a7:d0:21:2f:73:25:c6:
3f:a3:68:05:ff:bf:45:a1:c0:c7:49:37:18:2d:95:
bd:14:a1:23:2e:7a:7c:9e:af:64:48:ba:15:46:81:
4a:c5:e5:ad:c7:4d:52:0f:c2:5f:88:30:50:bb:0b:
cf:8b:72:75:8e:ba:95:74:87:0e:65:54:de:a9:90:
51:3d:da:9c:6b:60:db:61:40:1a:3e:56:27:da:6f:
18:55:4b:fc:1d:c4:27:05:15:09:a8:c4:ec:99:9b:
ce:02:07:67:6d:e5:b2:43:c4:67:49:f3:85:6c:bf:
2a:78:39:3e:e6:a5:b0:2a:7d:b8:fd:6f:89:02:c7:
a4:a8:81:17:14:63:84:9e:08:ea:1f:91:52:23:ee:
78:a7:d6:1c:86:ae:d4:b9:fa:b3:cc:39:bc:ff:4f:
a0:ec:7c:7d:a9:3d:80:b1:8f:9e:ed:75:25:c6:4d:
76:86:c0:cc:d2:46:5d:96:12:24:bd:9d:ba:b4:32:
ff:ab:a0:33:ec:f4:62:a0:db:d6:2a:e0:2f:f4:48:
13:bb:37:9c:4d:77:c0:94:6e:03:53:bf:7a:6b:d2:
54:c3:2f:d9:e8:7a:42:3c:3b:bf:69:3c:b8:fe:e9:
02:b5:fc:55:66:3f:ad:0c:d4:97:65:68:9d:24:d2:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A4:D8:D3:3A:29:2C:5D:ED:FF:11:A6:D1:E3:E5:CF:3E:73:3D:62
X509v3 Authority Key Identifier:
keyid:76:57:21:1F:8A:66:56:1B:57:70:FF:19:B4:71:AE:F5:11:E8:37:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4f:a9:4c:a2:4a:6c:16:c7:d8:bd:6d:2c:02:86:36:7e:36:
32:b8:ee:7a:33:e9:09:dd:75:01:aa:dd:25:8c:7d:75:6c:5f:
05:df:5b:b8:63:b0:2f:17:22:0b:63:cd:27:8f:29:e5:ff:12:
3a:dd:29:58:ae:03:48:cb:c4:fd:76:81:ff:6f:c6:38:3b:a3:
a0:89:b6:8f:70:cf:ad:bb:4f:41:17:a2:01:a8:e8:41:e1:6c:
f3:a3:03:2c:f2:43:5b:bf:bb:66:28:f2:35:2e:2b:ba:4b:88:
22:90:da:87:1e:3f:45:40:04:db:66:48:9f:66:f7:24:74:9b:
6a:67:f6:65:f5:9c:c0:ab:b8:81:17:4e:c6:04:62:05:94:cd:
d3:26:d4:69:15:a6:e0:42:a9:a3:c6:d5:12:89:7a:fc:f4:6a:
47:a2:42:f8:1e:5b:20:91:6b:c5:6a:d5:17:f8:10:ef:51:a1:
c6:d8:4a:36:c6:d9:06:db:5e:fe:b1:8d:a7:76:83:31:e1:f4:
71:8a:bc:f1:c7:fe:df:f4:02:a3:12:6a:e5:28:b7:38:c2:16:
3a:8d:da:66:97:92:ec:a3:f8:62:5e:88:38:1e:fc:8b:60:98:
a6:cd:18:6e:d0:e8:28:ac:32:e4:9b:b9:43:10:d3:13:d2:c3:
1d:ce:13:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjKyiY/4K8sJaNpKEGB7KfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTcyMTFmOGE2NjU2MWI1NzcwZmYxOWI0NzFhZWY1MTFl
ODM3NzgwHhcNMjUwODIxMDQwMTQyWhcNMjUwODIyMDQwMTQyWjAzMTEwLwYDVQQD
EyhkZmE0ZDhkMzNhMjkyYzVkZWRmZjExYTZkMWUzZTVjZjNlNzMzZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQhIt0mLhKfQIS9zJcY/o2gF/79F
ocDHSTcYLZW9FKEjLnp8nq9kSLoVRoFKxeWtx01SD8JfiDBQuwvPi3J1jrqVdIcO
ZVTeqZBRPdqca2DbYUAaPlYn2m8YVUv8HcQnBRUJqMTsmZvOAgdnbeWyQ8RnSfOF
bL8qeDk+5qWwKn24/W+JAsekqIEXFGOEngjqH5FSI+54p9Ychq7UufqzzDm8/0+g
7Hx9qT2AsY+e7XUlxk12hsDM0kZdlhIkvZ26tDL/q6Az7PRioNvWKuAv9EgTuzec
TXfAlG4DU796a9JUwy/Z6HpCPDu/aTy4/ukCtfxVZj+tDNSXZWidJNJqlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+k2NM6KSxd7f8RptHj5c8+cz1iMB8GA1UdIwQY
MBaAFHZXIR+KZlYbV3D/GbRxrvUR6Dd4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxjaEg0cG1WaHRYY1A4WnRIR3U5UkhvTjNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xZTA2YmUtNDUxMS00NWZjLTg5NDkt
NzQzMWQ2ODlhOGU4LzEvZGxjaEg0cG1WaHRYY1A4WnRIR3U5UkhvTjNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xZTA2YmUtNDUxMS00NWZjLTg5NDktNzQzMWQ2ODlhOGU4
LzEvZGxjaEg0cG1WaHRYY1A4WnRIR3U5UkhvTjNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0+pTKJK
bBbH2L1tLAKGNn42MrjuejPpCd11AardJYx9dWxfBd9buGOwLxciC2PNJ48p5f8S
Ot0pWK4DSMvE/XaB/2/GODujoIm2j3DPrbtPQReiAajoQeFs86MDLPJDW7+7Zijy
NS4rukuIIpDahx4/RUAE22ZIn2b3JHSbamf2ZfWcwKu4gRdOxgRiBZTN0ybUaRWm
4EKpo8bVEol6/PRqR6JC+B5bIJFrxWrVF/gQ71GhxthKNsbZBtte/rGNp3aDMeH0
cYq88cf+3/QCoxJq5Si3OMIWOo3aZpeS7KP4Yl6IOB78i2CYps0YbtDoKKwy5Ju5
QxDTE9LDHc4Tcg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:24 2025 by rpki-client