Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
File: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft (raw, json)
Hash identifier: n+kR+nBjZQEVz3p+cKuadXfCsRzd0BL4Ch/K+Zfc244=
Subject key identifier: A8:D1:A7:AD:FE:4D:74:E0:4A:F0:71:11:5F:A9:E7:88:28:3C:7E:B0
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 0198EEA0081F940C0E70A6A4CD3D73381532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
Manifest number: 137E
Signing time: Thu 28 Aug 2025 03:02:01 +0000
Manifest this update: Thu 28 Aug 2025 03:02:01 +0000
Manifest next update: Fri 29 Aug 2025 03:02:01 +0000
Files and hashes: 1: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl (hash: MOg1Cutd2+5yQ5lt0/kXN/zsKSWVFNblJt8nyLv5YCk=)
2: v5vd3x3XjeefXJEwufhUGGb4X2s.roa (hash: Q56G00WWpMRZXSZJI+Ae5yRJxVdvk5MUrhK76sZeFtc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ee:a0:08:1f:94:0c:0e:70:a6:a4:cd:3d:73:38:15:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Aug 28 03:02:01 2025 GMT
Not After : Aug 29 03:02:01 2025 GMT
Subject: CN=a8d1a7adfe4d74e04af071115fa9e788283c7eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:40:12:ef:8b:8f:29:21:67:0f:17:e9:16:
ae:59:77:f0:d4:b6:c4:99:ec:35:8b:8a:d4:76:dd:
7a:1c:18:75:65:dc:c1:7f:18:ec:1d:5a:1b:7f:69:
2c:de:7a:4f:4f:ea:47:3b:41:39:1c:16:67:e8:df:
0c:29:72:99:7c:97:83:e8:0b:00:52:22:0c:34:15:
c4:62:4d:7b:52:33:f9:51:3c:3a:9d:3a:3c:f6:70:
08:c5:8f:63:fd:9e:be:24:c9:ca:c0:59:e8:eb:56:
4d:e4:36:d2:71:2a:b9:f7:a7:fa:0c:7b:eb:55:c0:
0a:6d:cf:53:b1:25:2f:d2:8c:78:24:14:ab:8f:a8:
4b:1c:28:6a:68:7d:3f:6e:c2:eb:78:fc:de:cb:c3:
75:6a:4a:46:41:d9:d4:b5:a3:d6:35:23:e4:b2:0a:
a6:08:4f:d2:3a:af:6a:f2:5c:f6:58:53:c6:a8:7e:
c0:ed:06:fe:d5:b1:7b:93:83:0e:52:e3:51:80:a0:
26:f2:db:f7:94:57:b7:95:09:e7:c1:2e:38:ff:d8:
58:9c:84:3f:30:c7:a1:d2:8c:68:0f:2b:bd:8b:a3:
7c:55:a4:2f:1f:03:bc:1e:57:da:9e:5e:db:3f:80:
ae:76:13:cd:93:92:fc:95:3d:01:0c:e2:de:50:7e:
de:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:A7:AD:FE:4D:74:E0:4A:F0:71:11:5F:A9:E7:88:28:3C:7E:B0
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:49:98:0e:c5:c5:58:77:c2:1e:0b:35:d7:37:80:54:6c:11:
1c:07:d5:0d:53:91:de:41:20:a6:1d:46:6b:6f:7f:bd:dc:65:
61:7e:88:a3:eb:42:58:97:85:98:f1:c9:8d:85:9e:69:4a:b6:
73:9d:97:f4:82:cd:bc:3e:07:62:57:5e:ef:72:04:c5:3c:76:
49:dc:ed:c1:84:04:d3:93:48:52:24:aa:a9:e4:be:7e:06:00:
22:5c:12:d9:e2:f5:d5:5d:39:5a:5a:ea:31:18:40:09:0f:5e:
33:79:37:b4:bb:45:f7:cd:e8:ff:50:ee:76:66:38:9b:85:25:
da:65:36:5b:a6:e8:3d:4a:3d:fd:79:2d:ce:90:1f:55:4e:9c:
ce:55:2f:29:d6:47:4b:ee:8c:f3:c1:aa:de:ff:11:1c:e5:64:
05:61:dc:62:f5:3a:3f:c3:65:ac:22:25:27:47:ad:d4:b4:e2:
3f:c7:ea:38:6d:14:3a:91:e7:c0:c3:87:8b:74:4f:8c:71:cf:
e9:82:30:34:3c:25:5e:7e:cf:5f:0d:95:70:d6:d7:91:c6:5a:
53:fe:fb:95:b5:b2:7d:cd:dc:a2:c8:a9:1a:c3:ba:5e:ed:6a:
7a:8e:f1:dd:a1:6f:83:7b:2a:09:1d:04:5b:cd:26:5f:da:f6:
ed:32:cc:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjuoAgflAwOcKakzT1zOBUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNzE2MWU2MjJmNjNjMGRiODU2OGQ4Y2I0YzRkN2MwZDk4
MDgzNDYwHhcNMjUwODI4MDMwMjAxWhcNMjUwODI5MDMwMjAxWjAzMTEwLwYDVQQD
EyhhOGQxYTdhZGZlNGQ3NGUwNGFmMDcxMTE1ZmE5ZTc4ODI4M2M3ZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEhAEu+LjykhZw8X6RauWXfw1LbE
mew1i4rUdt16HBh1ZdzBfxjsHVobf2ks3npPT+pHO0E5HBZn6N8MKXKZfJeD6AsA
UiIMNBXEYk17UjP5UTw6nTo89nAIxY9j/Z6+JMnKwFno61ZN5DbScSq596f6DHvr
VcAKbc9TsSUv0ox4JBSrj6hLHChqaH0/bsLrePzey8N1akpGQdnUtaPWNSPksgqm
CE/SOq9q8lz2WFPGqH7A7Qb+1bF7k4MOUuNRgKAm8tv3lFe3lQnnwS44/9hYnIQ/
MMeh0oxoDyu9i6N8VaQvHwO8Hlfanl7bP4CudhPNk5L8lT0BDOLeUH7e2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjRp63+TXTgSvBxEV+p54goPH6wMB8GA1UdIwQY
MBaAFAxxYeYi9jwNuFaNjLTE18DZgINGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMWYwOGMtMDY1ZS00YWMxLThlODAt
YjE1ZTNmMDllMDFiLzEvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMWYwOGMtMDY1ZS00YWMxLThlODAtYjE1ZTNmMDllMDFi
LzEvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0mYDsXF
WHfCHgs11zeAVGwRHAfVDVOR3kEgph1Ga29/vdxlYX6Io+tCWJeFmPHJjYWeaUq2
c52X9ILNvD4HYlde73IExTx2SdztwYQE05NIUiSqqeS+fgYAIlwS2eL11V05Wlrq
MRhACQ9eM3k3tLtF983o/1DudmY4m4Ul2mU2W6boPUo9/XktzpAfVU6czlUvKdZH
S+6M88Gq3v8RHOVkBWHcYvU6P8NlrCIlJ0et1LTiP8fqOG0UOpHnwMOHi3RPjHHP
6YIwNDwlXn7PXw2VcNbXkcZaU/77lbWyfc3cosipGsO6Xu1qeo7x3aFvg3sqCR0E
W80mX9r27TLM0A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:31 2025 by rpki-client