Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
File: 4GMUdXVI8HToT68_y7e4LYLe8-U.mft (raw, json)
Hash identifier: b+Tyzx4ycdOKAknT/LKVYmpdLE2AO4ouykewTw0URwo=
Subject key identifier: EB:3E:5B:17:E5:E2:B4:92:E0:11:10:BE:DB:18:08:7A:74:1D:10:A4
Authority key identifier: E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
Certificate issuer: /CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Certificate serial: 01998389176211A5461C8E1208B29BDCE121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
Manifest number: 16A8
Signing time: Fri 26 Sep 2025 01:00:23 +0000
Manifest this update: Fri 26 Sep 2025 01:00:23 +0000
Manifest next update: Sat 27 Sep 2025 01:00:23 +0000
Files and hashes: 1: 4GMUdXVI8HToT68_y7e4LYLe8-U.crl (hash: DcCJKPv7J+q74jWDEfyIj9VOcr57plYrhHHrQ6eZAEU=)
2: _uc6ePERzBPoPdpauMr-UXjyyZU.roa (hash: vCpgESgcY5qI/pPtl3hBvs20Co9NLRffYPoazf5J82E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:83:89:17:62:11:a5:46:1c:8e:12:08:b2:9b:dc:e1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Validity
Not Before: Sep 26 01:00:23 2025 GMT
Not After : Sep 27 01:00:23 2025 GMT
Subject: CN=eb3e5b17e5e2b492e01110bedb18087a741d10a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:cf:22:f3:1b:41:83:6f:17:c4:cd:ed:3e:
a4:cc:b2:cd:69:36:4d:24:ad:e3:75:ce:14:9e:36:
4c:22:de:3a:bb:21:1c:a4:28:19:1b:c6:d3:ac:47:
8c:c8:ad:96:af:2d:48:ac:08:92:d5:17:06:28:60:
a2:1b:08:10:68:bc:47:59:74:1c:f4:2a:7d:54:96:
ed:f3:15:b8:4d:c5:2d:35:2f:ed:61:f0:54:02:86:
74:58:99:be:32:2a:65:b3:b3:aa:23:96:80:4b:17:
a9:c4:77:0e:f1:b7:dd:70:88:4d:45:a2:cf:f4:bf:
d3:78:2b:13:27:34:a5:74:86:40:51:dd:01:bc:0b:
65:17:3f:7c:7a:2d:7e:7c:6d:39:37:90:55:b6:69:
ff:77:8c:32:63:f9:d7:c7:49:1f:23:9b:a7:59:99:
33:e7:4f:a0:8b:32:cc:80:53:04:4f:3b:1e:ed:1a:
fd:a5:6e:56:af:43:ae:e2:d8:09:7d:6b:3f:64:40:
a7:49:c3:84:fa:11:a7:1d:e0:9f:df:84:98:10:b3:
ed:e1:11:c2:32:aa:62:91:69:9e:01:7a:57:15:d6:
30:ec:26:dd:7f:40:8b:f1:95:f2:c8:26:0c:a2:68:
a3:32:12:4c:2c:b4:ba:3c:fc:96:8a:dd:c4:cb:21:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3E:5B:17:E5:E2:B4:92:E0:11:10:BE:DB:18:08:7A:74:1D:10:A4
X509v3 Authority Key Identifier:
keyid:E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:76:10:03:69:70:58:38:fe:6f:8c:a3:2a:34:7c:39:43:51:
42:2c:dd:ad:0b:84:5e:31:20:e0:16:55:cb:5f:d1:cc:cc:1d:
a9:2c:56:30:4b:e9:61:e4:97:32:b9:81:e4:90:2a:a1:2a:14:
21:45:c5:8c:ce:ce:57:64:d1:29:7b:30:9e:c9:95:42:37:9c:
d3:fe:80:09:16:6c:b2:35:8a:8d:14:e3:db:df:29:2d:38:97:
d1:b9:96:f2:a4:b9:80:7f:61:d2:d0:75:09:1f:20:b9:ed:27:
bb:ba:a9:37:9e:29:03:53:f0:d5:7f:96:3e:62:e1:d1:1a:9f:
49:29:c8:df:79:d5:36:e4:81:42:2c:8a:0b:5a:15:4d:01:da:
35:2a:1c:5f:03:5a:bf:65:af:b9:bf:84:cb:c7:74:d3:83:cc:
cf:4f:91:dc:ce:ce:0d:8e:6c:88:ff:0a:e3:86:a4:4a:51:cf:
a8:78:b7:da:58:f0:b0:03:4c:7c:64:9a:c1:fa:98:18:03:29:
5e:22:db:0f:4c:9a:02:5b:63:a9:47:a8:0b:3d:c0:a2:09:dd:
ab:bf:f9:eb:d3:2d:04:b9:c2:0e:5c:3c:14:4c:50:30:8a:ae:
29:a8:7c:8d:e3:f6:56:bc:be:cf:7a:de:ed:d5:af:56:8a:68:
69:67:6a:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZmDiRdiEaVGHI4SCLKb3OEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjMxNDc1NzU0OGYwNzRlODRmYWYzZmNiYjdiODJkODJk
ZWYzZTUwHhcNMjUwOTI2MDEwMDIzWhcNMjUwOTI3MDEwMDIzWjAzMTEwLwYDVQQD
EyhlYjNlNWIxN2U1ZTJiNDkyZTAxMTEwYmVkYjE4MDg3YTc0MWQxMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J7PIvMbQYNvF8TN7T6kzLLNaTZN
JK3jdc4UnjZMIt46uyEcpCgZG8bTrEeMyK2Wry1IrAiS1RcGKGCiGwgQaLxHWXQc
9Cp9VJbt8xW4TcUtNS/tYfBUAoZ0WJm+Mipls7OqI5aASxepxHcO8bfdcIhNRaLP
9L/TeCsTJzSldIZAUd0BvAtlFz98ei1+fG05N5BVtmn/d4wyY/nXx0kfI5unWZkz
50+gizLMgFMETzse7Rr9pW5Wr0Ou4tgJfWs/ZECnScOE+hGnHeCf34SYELPt4RHC
MqpikWmeAXpXFdYw7Cbdf0CL8ZXyyCYMomijMhJMLLS6PPyWit3EyyE7PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOs+Wxfl4rSS4BEQvtsYCHp0HRCkMB8GA1UdIwQY
MBaAFOBjFHV1SPB06E+vP8u3uC2C3vPlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdNVWRYVkk4SFRvVDY4X3k3ZTRMWUxlOC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80OTdjZWQtMDUyNi00ZDNiLWJkMmIt
ODBkMjFjMjBkOTE4LzEvNEdNVWRYVkk4SFRvVDY4X3k3ZTRMWUxlOC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80OTdjZWQtMDUyNi00ZDNiLWJkMmItODBkMjFjMjBkOTE4
LzEvNEdNVWRYVkk4SFRvVDY4X3k3ZTRMWUxlOC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnYQA2lw
WDj+b4yjKjR8OUNRQizdrQuEXjEg4BZVy1/RzMwdqSxWMEvpYeSXMrmB5JAqoSoU
IUXFjM7OV2TRKXswnsmVQjec0/6ACRZssjWKjRTj298pLTiX0bmW8qS5gH9h0tB1
CR8gue0nu7qpN54pA1Pw1X+WPmLh0RqfSSnI33nVNuSBQiyKC1oVTQHaNSocXwNa
v2Wvub+Ey8d004PMz0+R3M7ODY5siP8K44akSlHPqHi32ljwsANMfGSawfqYGAMp
XiLbD0yaAltjqUeoCz3Aogndq7/569MtBLnCDlw8FExQMIquKah8jeP2Vry+z3re
7dWvVopoaWdqCg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:18 2025 by rpki-client