Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
File: zwL19I4SLlVvm1mK2aYtPD4UQZo.mft (raw, json)
Hash identifier: hsoL8vKTA8GS5RQ4F3X2IaiGwqR4YlZGs+IHI7L51/E=
Subject key identifier: 6A:80:40:E2:3B:37:4C:BE:17:D5:93:62:59:8E:00:0E:1B:B6:36:84
Authority key identifier: CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
Certificate issuer: /CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Certificate serial: 019A0FDE55F897BB5CB1209E21286186AA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
Manifest number: 167D
Signing time: Thu 23 Oct 2025 07:00:20 +0000
Manifest this update: Thu 23 Oct 2025 07:00:20 +0000
Manifest next update: Fri 24 Oct 2025 07:00:20 +0000
Files and hashes: 1: 748a2LHN88wONpwbpFWq4xMldnY.roa (hash: eDoYazA4tm3EizecQjyxeeqDwWD+d/nhbBUj2RIPHuc=)
2: zwL19I4SLlVvm1mK2aYtPD4UQZo.crl (hash: ET2cB3z+pjKd8teNsIc+tlnb2iPyJ/CeDi8Ps4Nw+lM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:de:55:f8:97:bb:5c:b1:20:9e:21:28:61:86:aa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Validity
Not Before: Oct 23 07:00:20 2025 GMT
Not After : Oct 24 07:00:20 2025 GMT
Subject: CN=6a8040e23b374cbe17d59362598e000e1bb63684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:fc:94:35:8e:0e:fc:c6:7c:3a:51:78:67:
d0:15:d6:5c:8c:69:be:35:14:9f:85:66:42:3e:72:
a1:2e:57:e4:05:19:e8:3a:0a:50:bb:de:6b:11:d7:
2d:b6:ca:ed:60:18:f6:1a:a2:36:79:d3:2b:65:95:
a5:7a:7a:e1:3e:bf:48:30:da:98:87:f9:0c:4c:57:
cf:7e:c9:fe:1b:41:12:0f:49:12:64:62:ad:c5:e6:
fd:49:4d:14:4f:fc:2d:61:93:f5:0c:0b:67:4d:3e:
68:e0:1d:46:87:2e:2b:1b:b2:5b:5c:c0:27:4e:80:
da:db:52:0b:40:1b:75:f8:f1:e5:97:ea:10:e1:20:
1c:ed:24:c8:ef:20:a1:87:d8:eb:08:f8:3c:95:78:
cb:f3:a9:df:52:e8:22:fc:3e:5e:53:37:1d:d1:34:
b3:a0:e2:af:de:3e:60:45:72:d3:47:a5:b4:71:73:
fc:67:c5:14:13:f6:94:51:ef:d7:4c:08:eb:fa:6c:
f7:e2:cd:cf:30:14:fb:de:9e:a1:2d:fa:8a:1b:3d:
06:72:57:9e:38:5c:c9:65:cd:c9:8f:3f:12:f0:9f:
c6:2b:80:a7:37:e5:5d:81:27:5f:e8:ee:95:e7:ae:
21:96:bd:54:94:80:e5:a7:55:c7:4a:b6:d8:47:7b:
50:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:80:40:E2:3B:37:4C:BE:17:D5:93:62:59:8E:00:0E:1B:B6:36:84
X509v3 Authority Key Identifier:
keyid:CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:06:d4:2d:50:df:4b:bf:a3:9d:ea:d4:31:bc:20:ea:fe:59:
53:be:5d:ad:b3:63:a7:b4:3f:43:3a:4f:3e:56:a4:87:b8:49:
46:9e:8a:ee:67:59:3e:7a:f4:50:52:d5:10:e4:15:75:29:a1:
c2:a6:32:a7:d3:15:c5:91:97:f5:6f:56:4e:17:20:af:e4:9e:
7f:6f:90:07:bc:52:a6:85:bb:27:7a:fb:30:1f:36:c0:55:bb:
7e:1d:2d:68:67:46:9d:88:ac:57:ce:4c:51:4c:9e:13:96:dd:
43:b4:6c:90:98:d9:db:88:10:08:2a:fa:13:00:cc:80:aa:0f:
ab:86:3e:1c:88:f1:5e:65:36:d5:98:59:9a:8e:e2:e7:93:6f:
a9:6c:9a:83:88:d5:24:15:3a:37:86:d6:e4:f0:8e:a3:e8:dd:
51:ef:ce:da:39:e6:0e:ab:2a:95:64:be:5a:4e:aa:db:78:33:
4c:0c:2c:0f:4f:54:a0:7d:e1:0d:6c:75:1d:df:09:05:f5:70:
c9:81:cb:dd:5f:53:ae:e1:10:48:d8:a0:59:4e:22:55:ed:06:
1b:0f:c4:de:d4:7a:84:3b:d3:a3:0b:4c:1e:3f:70:00:da:f4:
05:1c:a3:44:e5:aa:68:a7:ca:df:8e:38:2a:5a:ec:39:83:25:
68:8d:e1:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoP3lX4l7tcsSCeIShhhqoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMDJmNWY0OGUxMjJlNTU2ZjliNTk4YWQ5YTYyZDNjM2Ux
NDQxOWEwHhcNMjUxMDIzMDcwMDIwWhcNMjUxMDI0MDcwMDIwWjAzMTEwLwYDVQQD
Eyg2YTgwNDBlMjNiMzc0Y2JlMTdkNTkzNjI1OThlMDAwZTFiYjYzNjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTX8lDWODvzGfDpReGfQFdZcjGm+
NRSfhWZCPnKhLlfkBRnoOgpQu95rEdcttsrtYBj2GqI2edMrZZWlenrhPr9IMNqY
h/kMTFfPfsn+G0ESD0kSZGKtxeb9SU0UT/wtYZP1DAtnTT5o4B1Ghy4rG7JbXMAn
ToDa21ILQBt1+PHll+oQ4SAc7STI7yChh9jrCPg8lXjL86nfUugi/D5eUzcd0TSz
oOKv3j5gRXLTR6W0cXP8Z8UUE/aUUe/XTAjr+mz34s3PMBT73p6hLfqKGz0Gclee
OFzJZc3Jjz8S8J/GK4CnN+VdgSdf6O6V564hlr1UlIDlp1XHSrbYR3tQnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqAQOI7N0y+F9WTYlmOAA4btjaEMB8GA1UdIwQY
MBaAFM8C9fSOEi5Vb5tZitmmLTw+FEGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvendMMTlJNFNMbFZ2bTFtSzJhWXRQRDRVUVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC84ZWMzYTktY2VmMi00YmY4LWEwNmEt
N2UyYzRiOTc1YjM5LzEvendMMTlJNFNMbFZ2bTFtSzJhWXRQRDRVUVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC84ZWMzYTktY2VmMi00YmY4LWEwNmEtN2UyYzRiOTc1YjM5
LzEvendMMTlJNFNMbFZ2bTFtSzJhWXRQRDRVUVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQbULVDf
S7+jnerUMbwg6v5ZU75drbNjp7Q/QzpPPlakh7hJRp6K7mdZPnr0UFLVEOQVdSmh
wqYyp9MVxZGX9W9WThcgr+Sef2+QB7xSpoW7J3r7MB82wFW7fh0taGdGnYisV85M
UUyeE5bdQ7RskJjZ24gQCCr6EwDMgKoPq4Y+HIjxXmU21ZhZmo7i55NvqWyag4jV
JBU6N4bW5PCOo+jdUe/O2jnmDqsqlWS+Wk6q23gzTAwsD09UoH3hDWx1Hd8JBfVw
yYHL3V9TruEQSNigWU4iVe0GGw/E3tR6hDvTowtMHj9wANr0BRyjROWqaKfK3444
KlrsOYMlaI3hhQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:24 2025 by rpki-client