Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
File: vIo7xH0TyD99HPcqE34AZvg9Bgg.mft (raw, json)
Hash identifier: CUSZN18jhaH4PGT7zd5S2A1AosTc7GYs/n0c4XDpiLM=
Subject key identifier: DD:AA:54:C9:89:F4:2F:03:3A:31:A1:F3:85:1D:95:21:9B:6A:A0:A4
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 0199559DC8C28F04AFC343448C8531084CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
Manifest number: 16A3
Signing time: Wed 17 Sep 2025 03:00:27 +0000
Manifest this update: Wed 17 Sep 2025 03:00:27 +0000
Manifest next update: Thu 18 Sep 2025 03:00:27 +0000
Files and hashes: 1: gphbKzpx6tWGj_zsNbx2el-xjBw.roa (hash: EGV6JtWjWAcUe3P+wNKh2PddbSFnyVdKJ948XnlhOEI=)
2: vIo7xH0TyD99HPcqE34AZvg9Bgg.crl (hash: TSGTJZwigAHUx3h9QOYx0egNW2sVOxAOAw+l+jrYf+8=)
3: zC1Sn658_TpTHaiHtbRsJ5ASeUg.roa (hash: p+xEHDv2mI7HSN0Md1NF4A8uiIrqEQrPGZAyc5GO4iE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:55:9d:c8:c2:8f:04:af:c3:43:44:8c:85:31:08:4c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Sep 17 03:00:27 2025 GMT
Not After : Sep 18 03:00:27 2025 GMT
Subject: CN=ddaa54c989f42f033a31a1f3851d95219b6aa0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:75:f4:c0:10:2e:61:9c:cb:e0:29:e6:86:a2:
24:af:00:46:14:0a:a8:44:a5:b5:b3:c7:e3:d7:52:
4b:9d:dc:34:3f:68:c2:1a:29:94:34:6c:e0:f2:6c:
5e:10:ed:2b:5b:da:9d:24:5a:3c:23:58:88:0f:c4:
23:c1:ea:1b:02:4e:94:cd:93:59:30:bb:0a:07:71:
e1:8c:28:03:51:6f:12:3e:e8:fb:3c:d3:33:49:26:
29:48:a8:bf:87:df:f8:a7:4c:fc:fc:20:84:bc:05:
dd:da:33:e9:b8:eb:4c:4f:d1:7d:a5:82:48:a2:87:
ff:04:47:08:b7:62:8d:3d:b4:41:b4:a0:4f:cb:48:
58:f3:74:84:d7:29:d5:7c:40:85:50:48:70:d0:64:
2d:7b:b3:90:1f:35:b3:bc:38:5a:03:d2:98:3b:90:
e6:52:62:98:89:c4:63:9a:6e:17:0b:a5:e9:f9:16:
59:33:d3:91:63:bd:bd:0f:d9:3f:66:29:04:c1:aa:
4e:8e:04:02:62:0a:3e:a5:d3:e8:90:3d:f8:0b:5a:
09:a6:95:0f:5e:ce:dd:5c:fd:84:47:f9:0a:4a:d5:
98:57:7d:e7:70:d1:20:c2:9d:1d:5c:d7:0b:72:cb:
6b:37:10:99:dd:45:a5:15:b5:bb:47:dc:d5:cb:48:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AA:54:C9:89:F4:2F:03:3A:31:A1:F3:85:1D:95:21:9B:6A:A0:A4
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:92:bf:24:61:0a:66:97:81:dd:fa:77:81:70:29:41:f8:c8:
6b:de:a8:6a:37:12:bb:29:ef:b3:54:c8:fe:cf:ad:4f:42:ae:
ab:87:86:d4:69:92:17:d6:d7:00:11:b6:b5:df:e8:6e:92:07:
cc:71:36:34:ad:a3:28:48:74:a0:ab:81:b2:f7:b8:28:1f:da:
37:84:aa:84:0d:32:2d:fd:e9:18:de:98:35:37:fa:34:2c:8d:
ee:85:0c:f8:18:d7:19:7e:dd:17:85:67:ae:21:69:c1:70:b2:
c9:f6:11:7d:ac:f7:7a:a3:86:c2:2d:5f:fa:a1:f5:c0:5d:d8:
9c:4e:08:ca:17:c9:e8:e8:76:bc:39:c0:7d:54:2a:66:bb:94:
a1:19:cb:52:59:f0:7c:bd:30:b8:c1:f4:3b:5e:61:8d:b6:80:
cf:c4:5b:5f:32:70:c5:1b:27:6f:c5:6e:bb:dc:59:05:d5:d5:
e5:93:87:39:e5:8e:f1:fe:94:a7:8a:50:1b:38:7d:c1:66:8f:
4c:37:66:8d:09:81:f0:1b:84:af:16:ee:19:7f:67:7b:80:40:
df:77:94:28:2b:8d:33:92:2d:e4:64:02:c2:ef:ed:1f:4b:a9:
04:b8:00:82:d6:f4:40:4d:97:80:f7:e7:85:2b:ac:aa:22:5e:
5e:62:1f:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlVncjCjwSvw0NEjIUxCEzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGEzYmM0N2QxM2M4M2Y3ZDFjZjcyYTEzN2UwMDY2Zjgz
ZDA2MDgwHhcNMjUwOTE3MDMwMDI3WhcNMjUwOTE4MDMwMDI3WjAzMTEwLwYDVQQD
EyhkZGFhNTRjOTg5ZjQyZjAzM2EzMWExZjM4NTFkOTUyMTliNmFhMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53X0wBAuYZzL4CnmhqIkrwBGFAqo
RKW1s8fj11JLndw0P2jCGimUNGzg8mxeEO0rW9qdJFo8I1iID8QjweobAk6UzZNZ
MLsKB3HhjCgDUW8SPuj7PNMzSSYpSKi/h9/4p0z8/CCEvAXd2jPpuOtMT9F9pYJI
oof/BEcIt2KNPbRBtKBPy0hY83SE1ynVfECFUEhw0GQte7OQHzWzvDhaA9KYO5Dm
UmKYicRjmm4XC6Xp+RZZM9ORY729D9k/ZikEwapOjgQCYgo+pdPokD34C1oJppUP
Xs7dXP2ER/kKStWYV33ncNEgwp0dXNcLcstrNxCZ3UWlFbW7R9zVy0h94wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2qVMmJ9C8DOjGh84UdlSGbaqCkMB8GA1UdIwQY
MBaAFLyKO8R9E8g/fRz3KhN+AGb4PQYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjIt
NzExM2ZjMWI4NjViLzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjItNzExM2ZjMWI4NjVi
LzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJK/JGEK
ZpeB3fp3gXApQfjIa96oajcSuynvs1TI/s+tT0Kuq4eG1GmSF9bXABG2td/obpIH
zHE2NK2jKEh0oKuBsve4KB/aN4SqhA0yLf3pGN6YNTf6NCyN7oUM+BjXGX7dF4Vn
riFpwXCyyfYRfaz3eqOGwi1f+qH1wF3YnE4IyhfJ6Oh2vDnAfVQqZruUoRnLUlnw
fL0wuMH0O15hjbaAz8RbXzJwxRsnb8Vuu9xZBdXV5ZOHOeWO8f6Up4pQGzh9wWaP
TDdmjQmB8BuErxbuGX9ne4BA33eUKCuNM5It5GQCwu/tH0upBLgAgtb0QE2XgPfn
hSusqiJeXmIfaA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:29 2025 by rpki-client