Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
File: bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft (raw, json)
Hash identifier: 8GJy70GH8GAn7m4DtcgZ6Z4MithK7zkzrubQwXV25kw=
Subject key identifier: 3C:E3:69:60:02:14:F7:CE:64:DC:4F:2F:F3:83:C6:C2:85:73:07:0B
Authority key identifier: 6D:F5:67:EC:F8:65:48:06:00:98:F5:AD:67:A1:B2:BF:FF:1B:4B:51
Certificate issuer: /CN=6df567ecf86548060098f5ad67a1b2bfff1b4b51
Certificate serial: 01994B1A30678999B0AA2B08FA693ABF86F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
Manifest number: 08F0
Signing time: Mon 15 Sep 2025 02:00:31 +0000
Manifest this update: Mon 15 Sep 2025 02:00:31 +0000
Manifest next update: Tue 16 Sep 2025 02:00:31 +0000
Files and hashes: 1: bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.crl (hash: IUfom1mcOr6h6NzRX850M6UJtY7UO61AQ0d8f4Uvh8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4b:1a:30:67:89:99:b0:aa:2b:08:fa:69:3a:bf:86:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df567ecf86548060098f5ad67a1b2bfff1b4b51
Validity
Not Before: Sep 15 02:00:31 2025 GMT
Not After : Sep 16 02:00:31 2025 GMT
Subject: CN=3ce369600214f7ce64dc4f2ff383c6c28573070b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:da:27:7f:a2:ed:20:ab:df:b2:ff:cc:7a:
dc:bd:90:c4:0a:e9:24:b5:78:d6:8e:9e:e9:7f:6e:
ec:5e:cf:68:0a:50:de:7c:8f:97:7e:1b:a0:7b:cb:
0e:98:f5:b8:3c:a7:0c:0e:a6:59:d9:78:13:a9:1c:
7d:b1:0e:0b:14:8c:4c:b7:4a:b9:27:8b:54:17:2f:
dd:fe:97:16:bb:83:7a:f1:d5:c9:6d:59:6c:78:97:
85:cb:ee:b2:93:e7:f5:a5:71:93:b6:0b:7a:c1:69:
a7:be:56:d8:4d:f0:18:41:58:33:80:75:5e:09:0c:
5a:77:c0:b4:09:c0:c5:dc:f9:ce:d6:30:e4:c4:5d:
76:8c:94:61:58:4a:b1:78:4d:2d:5f:d9:cd:61:a3:
bb:2f:06:ec:03:65:d7:cc:90:8e:a4:43:d7:ce:a7:
94:c1:53:9e:8b:40:f7:e8:34:27:3d:59:3d:9d:2c:
03:5c:fa:e1:73:ba:00:34:7f:9c:02:bc:b8:be:18:
a7:3c:3d:c8:4d:4f:ea:56:51:1c:8c:30:bd:98:69:
73:b6:76:0f:57:66:c5:e5:db:41:71:dd:1a:b9:b2:
ea:3b:52:ac:ae:65:7c:a3:c9:17:13:a9:71:6b:6b:
72:f4:ac:c8:43:6e:1a:20:f3:ca:8c:a1:de:aa:fe:
15:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E3:69:60:02:14:F7:CE:64:DC:4F:2F:F3:83:C6:C2:85:73:07:0B
X509v3 Authority Key Identifier:
keyid:6D:F5:67:EC:F8:65:48:06:00:98:F5:AD:67:A1:B2:BF:FF:1B:4B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b0:b0:6a:61:1e:09:bb:12:26:ac:58:bc:61:b8:da:91:ab:
ba:85:f5:92:6c:6e:d7:4a:b2:de:e6:ca:39:52:84:8a:ca:53:
b1:15:93:24:35:f5:0c:5b:7d:a6:bc:b5:e7:df:06:5a:88:62:
4c:47:a0:a7:d2:eb:46:3a:c0:33:0c:68:06:fe:12:41:cb:3d:
2c:77:f3:62:18:1f:77:b5:a0:8c:22:03:73:66:d2:cb:38:88:
d2:38:33:04:c0:96:b7:6b:4d:46:ae:e7:a2:ec:52:80:5d:7d:
d1:2c:05:4a:16:c9:40:95:4e:0f:4d:cf:fa:d0:32:8d:e9:00:
f8:b8:46:fc:ec:a3:6a:93:9b:2f:53:41:d5:11:18:58:ed:d5:
52:cf:88:35:b7:a3:0a:bd:79:5f:0a:22:45:ce:f6:cb:8c:ae:
8c:63:bf:e3:92:d2:91:d5:ec:87:44:a0:45:20:7f:b8:0c:e5:
05:ca:1b:6d:0d:f2:07:6c:25:a8:ff:f8:e3:a2:93:80:22:48:
57:df:aa:39:a1:91:f0:a7:ba:1f:34:08:08:68:25:c4:5d:dc:
4a:80:ac:fe:6b:1b:3c:52:9f:ef:d3:ff:1f:46:3c:18:d6:f4:
b1:01:ea:50:f7:10:ae:40:b6:ed:93:ba:4e:c8:59:70:b9:b7:
b2:53:eb:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlLGjBniZmwqisI+mk6v4b4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZjU2N2VjZjg2NTQ4MDYwMDk4ZjVhZDY3YTFiMmJmZmYx
YjRiNTEwHhcNMjUwOTE1MDIwMDMxWhcNMjUwOTE2MDIwMDMxWjAzMTEwLwYDVQQD
EygzY2UzNjk2MDAyMTRmN2NlNjRkYzRmMmZmMzgzYzZjMjg1NzMwNzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8baJ3+i7SCr37L/zHrcvZDECukk
tXjWjp7pf27sXs9oClDefI+Xfhuge8sOmPW4PKcMDqZZ2XgTqRx9sQ4LFIxMt0q5
J4tUFy/d/pcWu4N68dXJbVlseJeFy+6yk+f1pXGTtgt6wWmnvlbYTfAYQVgzgHVe
CQxad8C0CcDF3PnO1jDkxF12jJRhWEqxeE0tX9nNYaO7LwbsA2XXzJCOpEPXzqeU
wVOei0D36DQnPVk9nSwDXPrhc7oANH+cAry4vhinPD3ITU/qVlEcjDC9mGlztnYP
V2bF5dtBcd0aubLqO1KsrmV8o8kXE6lxa2ty9KzIQ24aIPPKjKHeqv4VswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzjaWACFPfOZNxPL/ODxsKFcwcLMB8GA1UdIwQY
MBaAFG31Z+z4ZUgGAJj1rWehsr//G0tRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZWbjdQaGxTQVlBbVBXdFo2R3l2XzhiUzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83NjFiNGMtODkxNS00MzE5LTkxM2Ut
MGNhOGZlYmE5NTg1LzEvYmZWbjdQaGxTQVlBbVBXdFo2R3l2XzhiUzFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83NjFiNGMtODkxNS00MzE5LTkxM2UtMGNhOGZlYmE5NTg1
LzEvYmZWbjdQaGxTQVlBbVBXdFo2R3l2XzhiUzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrCwamEe
CbsSJqxYvGG42pGruoX1kmxu10qy3ubKOVKEispTsRWTJDX1DFt9pry1598GWohi
TEegp9LrRjrAMwxoBv4SQcs9LHfzYhgfd7WgjCIDc2bSyziI0jgzBMCWt2tNRq7n
ouxSgF190SwFShbJQJVOD03P+tAyjekA+LhG/OyjapObL1NB1REYWO3VUs+INbej
Cr15XwoiRc72y4yujGO/45LSkdXsh0SgRSB/uAzlBcobbQ3yB2wlqP/446KTgCJI
V9+qOaGR8Ke6HzQICGglxF3cSoCs/msbPFKf79P/H0Y8GNb0sQHqUPcQrkC27ZO6
TshZcLm3slPrug==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:43 2025 by rpki-client