Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
File: Iyrza5wHnaCRgn2j0HycilI2y1Q.mft (raw, json)
Hash identifier: xlwwLhRM6mfOurtbz3z2gYA9zaptc4pSrxbRkSu2dtE=
Subject key identifier: 5A:E6:EC:92:9E:B9:B1:E1:48:0B:59:61:2B:B4:ED:6B:42:7B:5D:6A
Authority key identifier: 23:2A:F3:6B:9C:07:9D:A0:91:82:7D:A3:D0:7C:9C:8A:52:36:CB:54
Certificate issuer: /CN=232af36b9c079da091827da3d07c9c8a5236cb54
Certificate serial: 019936B78E1C0B09636D726107B513508B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
Manifest number: 0E97
Signing time: Thu 11 Sep 2025 03:00:23 +0000
Manifest this update: Thu 11 Sep 2025 03:00:23 +0000
Manifest next update: Fri 12 Sep 2025 03:00:23 +0000
Files and hashes: 1: Iyrza5wHnaCRgn2j0HycilI2y1Q.crl (hash: tlAJA1vn8Dtp1Q5x/RI9zxoh5aoYyrGHr06TcvmzTJE=)
2: cP6rGkpLPRV4pGqYJvOMDMFHqcU.roa (hash: GpilgFxhpRLrq5YeYU84vDbeZTBkbH8/ApC4YFc5FBY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:b7:8e:1c:0b:09:63:6d:72:61:07:b5:13:50:8b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232af36b9c079da091827da3d07c9c8a5236cb54
Validity
Not Before: Sep 11 03:00:23 2025 GMT
Not After : Sep 12 03:00:23 2025 GMT
Subject: CN=5ae6ec929eb9b1e1480b59612bb4ed6b427b5d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:36:5f:6e:c1:70:8f:fa:e3:7a:0d:2e:eb:
ac:8b:33:0f:3b:02:e4:66:9c:85:e6:25:0f:88:4a:
c0:67:0f:2b:9c:03:92:52:24:82:7a:92:8f:e2:94:
0d:05:10:3d:b0:f9:7b:59:89:0b:8e:c5:17:72:cf:
67:80:07:cd:39:3e:49:a5:45:d8:5d:ee:e8:fd:51:
27:ca:e6:23:da:b1:8c:5f:f6:5b:47:58:4e:0a:3d:
e3:4b:49:1e:50:3f:31:78:0a:8c:af:65:29:64:95:
66:9b:fc:30:67:e2:f7:88:bc:1b:07:e2:1a:fd:3c:
ba:8c:31:b3:02:71:1a:76:eb:87:1f:9c:f8:26:ba:
4d:a6:fc:8d:c8:b4:93:59:30:e3:a3:ce:d7:4f:d1:
b7:eb:63:cf:b7:62:bf:06:02:41:bb:86:86:1b:60:
bc:d0:5a:12:a4:eb:17:70:02:68:26:e8:22:24:2b:
da:38:11:67:f2:b8:f0:95:45:79:94:a6:88:95:9c:
12:2c:b2:e9:3d:88:4f:2a:74:c2:1a:7e:a1:42:ff:
2d:84:0a:d3:fe:99:c9:fd:55:fc:c7:c0:00:2a:26:
25:e3:3c:e6:a7:4e:91:61:54:09:2c:0c:cd:98:6b:
83:48:7f:70:5b:ab:00:45:69:3a:f9:6f:45:9d:67:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E6:EC:92:9E:B9:B1:E1:48:0B:59:61:2B:B4:ED:6B:42:7B:5D:6A
X509v3 Authority Key Identifier:
keyid:23:2A:F3:6B:9C:07:9D:A0:91:82:7D:A3:D0:7C:9C:8A:52:36:CB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:20:0c:5d:f9:bd:fb:93:38:81:8c:26:42:a4:d5:71:77:f8:
2d:2d:73:73:cd:ff:4f:de:ae:7f:11:3a:a2:44:e0:de:56:ce:
c1:55:d2:00:d4:dc:9d:74:9d:dd:7b:68:bf:7d:20:af:fe:ed:
9e:fb:dd:08:98:2d:e7:5d:49:b4:d4:0d:f3:88:59:11:bf:ef:
b7:46:8a:8a:36:42:55:f4:d1:1a:87:2f:8d:d6:29:42:eb:38:
79:38:22:a9:5a:b3:04:ff:05:50:0b:41:b5:15:08:d8:ec:9a:
72:0d:a0:a6:13:76:a1:ea:80:d2:a5:48:97:42:db:1a:f9:bf:
fd:61:b5:93:27:8f:43:aa:2b:0c:51:9d:9d:2a:ad:f1:c7:9a:
cc:05:e2:4f:0b:a7:28:6e:9e:e7:9e:4b:70:4f:29:fb:62:a8:
31:84:a8:4c:e8:ed:92:f1:b3:5c:a6:68:b4:47:67:88:76:7c:
5a:eb:bb:83:87:c0:b8:0a:4e:05:2e:47:70:8c:53:d6:82:e9:
23:af:38:96:8f:92:93:60:86:d8:76:b0:f2:63:a7:74:90:e5:
40:94:bb:25:4a:11:1b:62:40:3a:8b:4d:59:9c:dc:1e:05:c3:
4a:f8:de:1c:2d:9d:fb:22:d7:03:5f:a2:7c:c7:b4:71:f0:b2:
27:86:2d:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2t44cCwljbXJhB7UTUItdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMmFmMzZiOWMwNzlkYTA5MTgyN2RhM2QwN2M5YzhhNTIz
NmNiNTQwHhcNMjUwOTExMDMwMDIzWhcNMjUwOTEyMDMwMDIzWjAzMTEwLwYDVQQD
Eyg1YWU2ZWM5MjllYjliMWUxNDgwYjU5NjEyYmI0ZWQ2YjQyN2I1ZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHs2X27BcI/643oNLuusizMPOwLk
ZpyF5iUPiErAZw8rnAOSUiSCepKP4pQNBRA9sPl7WYkLjsUXcs9ngAfNOT5JpUXY
Xe7o/VEnyuYj2rGMX/ZbR1hOCj3jS0keUD8xeAqMr2UpZJVmm/wwZ+L3iLwbB+Ia
/Ty6jDGzAnEaduuHH5z4JrpNpvyNyLSTWTDjo87XT9G362PPt2K/BgJBu4aGG2C8
0FoSpOsXcAJoJugiJCvaOBFn8rjwlUV5lKaIlZwSLLLpPYhPKnTCGn6hQv8thArT
/pnJ/VX8x8AAKiYl4zzmp06RYVQJLAzNmGuDSH9wW6sARWk6+W9FnWeMhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrm7JKeubHhSAtZYSu07WtCe11qMB8GA1UdIwQY
MBaAFCMq82ucB52gkYJ9o9B8nIpSNstUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlyemE1d0huYUNSZ24yajBIeWNpbEkyeTFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jMmZkMzMtZmQ0NC00ZTA4LWI0MjQt
YWExMDQ1MjIwYjViLzEvSXlyemE1d0huYUNSZ24yajBIeWNpbEkyeTFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jMmZkMzMtZmQ0NC00ZTA4LWI0MjQtYWExMDQ1MjIwYjVi
LzEvSXlyemE1d0huYUNSZ24yajBIeWNpbEkyeTFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSAMXfm9
+5M4gYwmQqTVcXf4LS1zc83/T96ufxE6okTg3lbOwVXSANTcnXSd3Xtov30gr/7t
nvvdCJgt511JtNQN84hZEb/vt0aKijZCVfTRGocvjdYpQus4eTgiqVqzBP8FUAtB
tRUI2Oyacg2gphN2oeqA0qVIl0LbGvm//WG1kyePQ6orDFGdnSqt8ceazAXiTwun
KG6e555LcE8p+2KoMYSoTOjtkvGzXKZotEdniHZ8Wuu7g4fAuApOBS5HcIxT1oLp
I684lo+Sk2CG2Haw8mOndJDlQJS7JUoRG2JAOotNWZzcHgXDSvjeHC2d+yLXA1+i
fMe0cfCyJ4Ytng==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:43 2025 by rpki-client