Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
File: QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft (raw, json)
Hash identifier: WnZWhOXe9frO/BjnMXdr3iIqBtX7yxg7bsRnuIw0L9s=
Subject key identifier: 9E:CF:55:37:B5:20:EE:4F:1D:CC:22:B1:07:1D:A9:A5:D6:C4:26:8A
Authority key identifier: 42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76
Certificate issuer: /CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
Certificate serial: 019A300E37114AA1C01DC42E9004B249336A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
Manifest number: 0CFC
Signing time: Wed 29 Oct 2025 13:00:29 +0000
Manifest this update: Wed 29 Oct 2025 13:00:29 +0000
Manifest next update: Thu 30 Oct 2025 13:00:29 +0000
Files and hashes: 1: Pi86dWn6x9Vtc8GH3REzDrMrSX0.roa (hash: geFyDSt8c1EYU/IR6IGQVBM3q8GhN/Mt5BfwBL1upLs=)
2: QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl (hash: oGAvNzE6WMDVvLwODRpYTABd2gAfvLVuUQgUZbvObyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:0e:37:11:4a:a1:c0:1d:c4:2e:90:04:b2:49:33:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
Validity
Not Before: Oct 29 13:00:29 2025 GMT
Not After : Oct 30 13:00:29 2025 GMT
Subject: CN=9ecf5537b520ee4f1dcc22b1071da9a5d6c4268a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c8:49:65:85:09:38:f9:6a:b4:19:13:de:d4:
cc:ec:a6:a9:c1:3d:23:4a:32:66:ea:8d:fe:d5:d7:
fe:53:93:2d:48:37:10:79:fb:d5:9b:21:99:db:62:
2d:5b:4c:4e:38:be:bd:e0:c8:29:26:4c:bd:a0:3e:
e3:f8:1e:9f:bf:29:a4:46:1a:1e:1e:00:32:00:c3:
48:db:4a:cc:6a:e1:12:31:5f:29:da:79:4a:98:12:
4a:13:90:7d:ed:0d:4e:1d:2b:66:d0:7f:90:27:1b:
80:04:33:05:5f:33:68:55:24:21:62:41:b1:99:d0:
ed:00:c6:d7:ad:07:c7:87:7e:f6:9c:e7:2d:83:9d:
df:df:27:2e:51:b3:2e:9a:d7:50:b7:9d:a1:f3:9d:
92:69:29:64:5e:4a:ed:18:d3:34:c7:20:b7:ba:cb:
e2:04:50:04:36:06:a0:1b:03:ca:79:71:de:a8:d0:
eb:ab:77:64:69:6c:4f:f4:7a:68:de:c9:b3:2a:06:
34:d8:b4:75:cb:8a:43:ea:00:01:14:16:55:10:db:
cb:0a:a9:54:a1:78:1c:e7:da:40:e9:e0:eb:52:c0:
e9:1e:c6:c2:78:e1:9b:22:57:2f:24:40:c6:89:9c:
5b:e2:75:91:3f:31:5c:1a:66:bf:61:ff:52:06:6b:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CF:55:37:B5:20:EE:4F:1D:CC:22:B1:07:1D:A9:A5:D6:C4:26:8A
X509v3 Authority Key Identifier:
keyid:42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:44:80:97:8c:9d:65:9a:71:cf:13:bc:e4:ed:b9:7d:36:36:
e1:e0:37:92:bc:e0:a8:6f:31:18:0d:77:f4:00:4b:cb:3d:78:
34:e1:61:d0:8c:b5:4c:cb:1d:2f:da:e4:66:58:79:4a:f2:bf:
17:76:74:2c:57:b5:0d:3c:77:a5:a6:a5:24:53:08:4d:74:da:
2c:bb:be:4c:80:82:a3:ee:f9:f7:83:73:81:95:39:64:33:fc:
09:11:d7:b5:ff:4b:f9:37:c9:f5:c5:f2:cd:e0:80:78:b5:94:
e7:82:16:c0:68:b7:13:83:7d:0d:c8:ad:1f:5d:43:0f:cb:53:
c9:0c:94:a4:15:ed:12:8c:f1:12:8d:c5:e5:c1:1c:d7:ef:e5:
d1:57:e5:9c:6d:6a:51:ec:a3:a0:da:c1:a8:00:20:da:8a:70:
74:bb:b8:56:52:39:79:8a:42:cd:34:2d:db:45:6f:bb:ec:f9:
94:be:37:6b:09:e1:82:85:be:7c:fe:ee:52:8c:2a:01:f8:07:
76:64:12:5a:82:d8:91:8f:23:19:70:23:2f:4d:55:02:ae:c8:
85:82:da:d5:4c:73:f5:7d:24:73:03:52:4b:7e:6b:9a:95:90:
4d:06:6d:85:9f:cb:33:fa:39:f4:99:1c:cc:82:85:db:5c:57:
7d:4a:c5:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZowDjcRSqHAHcQukASySTNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMDBlYjJmOGZkMDEzOGM0Mzc3ZjU0MDAwNmNmYzhiNzY1
YzRhNzYwHhcNMjUxMDI5MTMwMDI5WhcNMjUxMDMwMTMwMDI5WjAzMTEwLwYDVQQD
Eyg5ZWNmNTUzN2I1MjBlZTRmMWRjYzIyYjEwNzFkYTlhNWQ2YzQyNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MhJZYUJOPlqtBkT3tTM7KapwT0j
SjJm6o3+1df+U5MtSDcQefvVmyGZ22ItW0xOOL694MgpJky9oD7j+B6fvymkRhoe
HgAyAMNI20rMauESMV8p2nlKmBJKE5B97Q1OHStm0H+QJxuABDMFXzNoVSQhYkGx
mdDtAMbXrQfHh372nOctg53f3ycuUbMumtdQt52h852SaSlkXkrtGNM0xyC3usvi
BFAENgagGwPKeXHeqNDrq3dkaWxP9Hpo3smzKgY02LR1y4pD6gABFBZVENvLCqlU
oXgc59pA6eDrUsDpHsbCeOGbIlcvJEDGiZxb4nWRPzFcGma/Yf9SBmvRCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7PVTe1IO5PHcwisQcdqaXWxCaKMB8GA1UdIwQY
MBaAFEIA6y+P0BOMQ3f1QABs/It2XEp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdEckw0X1FFNHhEZF9WQUFHejhpM1pjU25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNTViZTMtYzExYy00MWM4LWE4OWEt
ZDE0Mjk4MzdkYWJmLzEvUWdEckw0X1FFNHhEZF9WQUFHejhpM1pjU25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zNTViZTMtYzExYy00MWM4LWE4OWEtZDE0Mjk4MzdkYWJm
LzEvUWdEckw0X1FFNHhEZF9WQUFHejhpM1pjU25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUSAl4yd
ZZpxzxO85O25fTY24eA3krzgqG8xGA139ABLyz14NOFh0Iy1TMsdL9rkZlh5SvK/
F3Z0LFe1DTx3paalJFMITXTaLLu+TICCo+7594NzgZU5ZDP8CRHXtf9L+TfJ9cXy
zeCAeLWU54IWwGi3E4N9DcitH11DD8tTyQyUpBXtEozxEo3F5cEc1+/l0VflnG1q
UeyjoNrBqAAg2opwdLu4VlI5eYpCzTQt20Vvu+z5lL43awnhgoW+fP7uUowqAfgH
dmQSWoLYkY8jGXAjL01VAq7IhYLa1Uxz9X0kcwNSS35rmpWQTQZthZ/LM/o59Jkc
zIKF21xXfUrFog==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:22 2025 by rpki-client