Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
File: sIrODrPi30n9u3dyZxb7Zed3eWQ.mft (raw, json)
Hash identifier: GhLKsGE+Yt7tbQDRaNGVpY83rAeJY9u0+QwwNZacKTY=
Subject key identifier: C4:92:C9:4E:60:C5:76:46:BF:FA:64:46:44:F0:6B:D4:03:59:83:CD
Authority key identifier: B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
Certificate issuer: /CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Certificate serial: 0198A0F223B6A15894B0BCBC2CCE93F36084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
Manifest number: 0A22
Signing time: Wed 13 Aug 2025 01:01:19 +0000
Manifest this update: Wed 13 Aug 2025 01:01:19 +0000
Manifest next update: Thu 14 Aug 2025 01:01:19 +0000
Files and hashes: 1: diUYpUKMIXz1gLgZaNSVSKV18U8.roa (hash: 2LacqRpLn+KwsMEDop6qn6ZSkweQldM8ZPPhx+K/olo=)
2: sIrODrPi30n9u3dyZxb7Zed3eWQ.crl (hash: OBvBIX0Vc7NGk3h8dBOEwiw9ziQQabXtc49hJjwC50I=)
3: ypDy4xS2R6Ye6aWBkCNFAdcm0wI.roa (hash: hjIAAkji2+ZqYHRNKyPRkJEyLfHtgHEfz/xpi/TOXR8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f2:23:b6:a1:58:94:b0:bc:bc:2c:ce:93:f3:60:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Validity
Not Before: Aug 13 01:01:19 2025 GMT
Not After : Aug 14 01:01:19 2025 GMT
Subject: CN=c492c94e60c57646bffa644644f06bd4035983cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:b9:c1:82:8c:4f:f6:dd:59:b8:3e:b8:bb:
09:50:64:50:8b:bc:00:25:cc:8a:16:77:f6:a7:2d:
58:2e:5d:29:a0:ba:95:83:e1:5d:dd:0d:00:a4:9a:
01:0c:5a:77:b9:85:ed:79:1f:1d:46:5e:4e:48:4b:
2e:cd:25:4a:3a:f7:16:1e:05:83:0e:0d:da:21:a6:
b6:db:91:11:bf:fe:9a:c1:93:97:3b:3a:c3:bf:bc:
95:b9:4f:96:0a:4e:87:c5:da:5b:be:0e:ca:c5:53:
6b:01:dc:70:e3:ff:1b:58:ba:99:50:1a:34:96:cc:
ae:9f:1a:0f:af:ba:3a:c2:0c:08:66:42:23:7b:31:
87:8d:2a:75:e9:a8:fb:7e:d7:ec:01:4d:0a:1e:ce:
9f:15:ab:5f:38:ac:60:33:92:b9:3c:77:6c:72:dd:
4e:4e:99:f7:b7:8e:ed:70:ad:0b:50:11:96:a4:4e:
71:0a:dd:ba:24:4c:c6:23:93:23:3a:78:c1:77:b1:
2b:56:8c:47:5b:49:b5:ca:2a:b9:b7:c2:5c:97:e3:
88:15:48:5f:f7:30:11:05:c8:34:d2:07:c7:bb:9f:
0c:fe:29:96:a0:18:36:2e:f0:a3:fc:97:f1:41:4f:
ac:c0:71:ed:78:a9:53:a0:01:10:2d:4f:2d:fb:f0:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:92:C9:4E:60:C5:76:46:BF:FA:64:46:44:F0:6B:D4:03:59:83:CD
X509v3 Authority Key Identifier:
keyid:B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:81:db:62:69:8b:bd:c3:fc:58:05:dd:49:33:5b:f8:67:a8:
f4:69:5e:2d:48:27:c6:a8:ea:eb:d2:d6:54:31:aa:be:46:c5:
a1:01:e5:be:49:b9:c8:a5:58:85:d4:48:49:e9:78:d1:af:56:
72:d0:ad:e6:5e:d4:63:e7:a1:f3:b0:27:b4:4a:4e:84:a0:92:
d5:2d:f5:a3:d1:e7:43:92:9c:df:ba:ca:6e:0e:b2:49:27:45:
bf:11:55:e8:be:9f:22:81:08:a2:74:da:27:8e:f6:83:9e:f7:
87:f1:7d:1f:c8:c6:57:2a:df:a2:a0:a0:c4:7c:1f:e0:bd:44:
bc:a2:3e:34:02:08:e7:db:c3:cd:f2:bc:48:aa:8f:a5:f2:ce:
9b:3d:56:d6:57:38:8e:b1:62:64:4c:78:0b:63:9c:2f:c9:7c:
77:7c:bd:ce:e9:80:70:db:d6:28:cd:57:15:0b:85:a7:5d:01:
c4:e8:bf:8d:e0:55:14:e5:06:21:4d:71:a8:f0:b5:24:1e:a5:
c0:33:33:45:92:bb:f2:64:4b:93:90:9d:29:27:6c:df:30:12:
ae:c9:b0:6a:f6:02:04:95:d2:72:cc:5e:55:9c:50:f9:df:60:
05:16:a9:25:2f:b8:1a:9e:39:ee:01:4a:1f:5e:3a:bb:dc:d7:
8f:8d:16:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZig8iO2oViUsLy8LM6T82CEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOGFjZTBlYjNlMmRmNDlmZGJiNzc3MjY3MTZmYjY1ZTc3
Nzc5NjQwHhcNMjUwODEzMDEwMTE5WhcNMjUwODE0MDEwMTE5WjAzMTEwLwYDVQQD
EyhjNDkyYzk0ZTYwYzU3NjQ2YmZmYTY0NDY0NGYwNmJkNDAzNTk4M2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvti5wYKMT/bdWbg+uLsJUGRQi7wA
JcyKFnf2py1YLl0poLqVg+Fd3Q0ApJoBDFp3uYXteR8dRl5OSEsuzSVKOvcWHgWD
Dg3aIaa225ERv/6awZOXOzrDv7yVuU+WCk6Hxdpbvg7KxVNrAdxw4/8bWLqZUBo0
lsyunxoPr7o6wgwIZkIjezGHjSp16aj7ftfsAU0KHs6fFatfOKxgM5K5PHdsct1O
Tpn3t47tcK0LUBGWpE5xCt26JEzGI5MjOnjBd7ErVoxHW0m1yiq5t8Jcl+OIFUhf
9zARBcg00gfHu58M/imWoBg2LvCj/JfxQU+swHHteKlToAEQLU8t+/C8SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSSyU5gxXZGv/pkRkTwa9QDWYPNMB8GA1UdIwQY
MBaAFLCKzg6z4t9J/bt3cmcW+2Xnd3lkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0lyT0RyUGkzMG45dTNkeVp4YjdaZWQzZVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80NTM3ZGQtNzhiNi00NjdlLTkxNGQt
ODY1YjRjZmJkNGNkLzEvc0lyT0RyUGkzMG45dTNkeVp4YjdaZWQzZVdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80NTM3ZGQtNzhiNi00NjdlLTkxNGQtODY1YjRjZmJkNGNk
LzEvc0lyT0RyUGkzMG45dTNkeVp4YjdaZWQzZVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYHbYmmL
vcP8WAXdSTNb+Geo9GleLUgnxqjq69LWVDGqvkbFoQHlvkm5yKVYhdRISel40a9W
ctCt5l7UY+eh87AntEpOhKCS1S31o9HnQ5Kc37rKbg6ySSdFvxFV6L6fIoEIonTa
J472g573h/F9H8jGVyrfoqCgxHwf4L1EvKI+NAII59vDzfK8SKqPpfLOmz1W1lc4
jrFiZEx4C2OcL8l8d3y9zumAcNvWKM1XFQuFp10BxOi/jeBVFOUGIU1xqPC1JB6l
wDMzRZK78mRLk5CdKSds3zASrsmwavYCBJXScsxeVZxQ+d9gBRapJS+4Gp457gFK
H146u9zXj40WgQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:27 2025 by rpki-client