Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
File: pvh89KFbnngiRVs6qK8LXtOimfc.mft (raw, json)
Hash identifier: C7DhK2GbDwwHbhGCS4YkR20PzlTsUFtb0v7AbA6+ge8=
Subject key identifier: 3A:D3:59:52:AC:12:1E:6D:A9:EB:82:1B:40:FB:1D:24:2E:DD:55:B3
Authority key identifier: A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
Certificate issuer: /CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Certificate serial: 0197C537B6337076CDE752F01945AE833826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
Manifest number: 15C3
Signing time: Tue 01 Jul 2025 09:00:52 +0000
Manifest this update: Tue 01 Jul 2025 09:00:52 +0000
Manifest next update: Wed 02 Jul 2025 09:00:52 +0000
Files and hashes: 1: A0AYtzxUnj18_WVT-ZtPo3VQOok.roa (hash: Ky9GG0Y6/3CRG+EZa6gdZtX+mEutz5bg1CsKFSgBHBU=)
2: YoFLZelk0KvVc2c4StbzyHcrvm0.roa (hash: 1/qU4jnzCv1Ym4GrpqvgYqQAdtCVCWo1utnZCleM9zs=)
3: pvh89KFbnngiRVs6qK8LXtOimfc.crl (hash: eMUaLVcXFBFallUrZ6wnMlEb1OUAYgtkL9hLdCjWJog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:37:b6:33:70:76:cd:e7:52:f0:19:45:ae:83:38:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Validity
Not Before: Jul 1 09:00:52 2025 GMT
Not After : Jul 2 09:00:52 2025 GMT
Subject: CN=3ad35952ac121e6da9eb821b40fb1d242edd55b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:8f:33:0a:7c:dc:de:5f:9e:af:99:65:84:
9e:f1:f9:55:6e:64:7f:05:19:aa:ec:ee:50:a2:41:
e4:ab:05:df:49:99:39:8a:e7:7b:16:5a:9b:95:1f:
ce:ff:4b:9d:df:07:31:50:d2:64:31:9f:bc:15:6f:
de:8a:2a:98:6a:c4:22:27:78:6e:27:20:5b:20:84:
46:06:b7:bd:97:4d:6f:87:f3:7b:ef:17:8f:64:c7:
15:a1:8a:cf:60:3a:42:4c:90:66:07:95:c7:64:d6:
23:46:38:71:32:44:ca:92:69:f7:ab:89:9e:cb:12:
33:fe:24:14:41:03:0a:a3:df:d6:4b:6d:94:53:b3:
4b:a3:3f:7d:7d:b0:ef:6b:a2:8d:27:37:f7:fa:14:
2e:24:96:de:c4:32:97:9a:24:aa:16:ad:80:c2:c4:
ea:1f:47:21:0c:df:10:5e:d3:47:09:d1:1d:df:63:
14:e2:85:5d:37:0b:39:c0:e2:76:12:77:b8:a6:ab:
87:7a:9a:83:82:87:8e:9a:7a:11:d7:2f:33:55:e4:
d6:22:f1:1a:82:48:d4:a3:03:73:70:aa:05:c6:c3:
d4:df:3d:99:56:8f:29:2c:60:dd:7e:f3:93:04:b7:
41:1f:76:ad:18:e3:1a:fd:18:38:5a:8d:fb:12:fb:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D3:59:52:AC:12:1E:6D:A9:EB:82:1B:40:FB:1D:24:2E:DD:55:B3
X509v3 Authority Key Identifier:
keyid:A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:2c:b0:1d:23:89:bc:21:d7:0a:4c:4a:a8:87:48:fe:cd:09:
42:3b:e6:b8:ee:7e:f2:2b:64:be:e8:67:a8:ed:49:9e:fc:7f:
ec:62:38:31:49:f7:cc:ac:ea:8b:7a:04:34:8f:e3:67:8f:8e:
4f:26:22:c2:04:3d:41:53:ed:00:68:e0:43:07:78:22:df:ee:
f4:35:17:e8:a7:36:2a:4e:ae:05:11:ec:c6:1a:8e:aa:ac:c9:
24:2a:27:01:2a:9e:f8:1f:60:b5:34:a1:2a:16:fd:75:26:0e:
f2:2f:31:9c:95:ff:9e:bb:2e:3e:31:a5:0f:ae:c9:a6:63:29:
4f:e4:2d:97:c6:5c:75:55:64:b0:20:cf:fe:3d:ec:87:bd:dc:
de:cb:be:2e:f6:e7:8c:79:2f:bf:cc:31:05:20:9c:23:57:e9:
2d:d1:ec:41:46:e0:89:33:e4:c5:e0:95:94:56:04:7d:0f:c5:
b0:51:64:7f:82:75:64:d6:d5:a0:1c:ad:6c:36:d8:c9:cc:eb:
fb:2d:dd:94:5a:c3:cb:d2:c8:0c:7a:64:be:29:68:07:d7:cd:
af:8a:a1:3d:56:eb:79:e2:6a:81:29:4a:00:fd:0b:bc:7b:95:
00:c9:01:8f:60:31:29:1e:74:8b:0f:1b:91:73:6e:0f:4c:54:
82:ee:a9:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFN7YzcHbN51LwGUWugzgmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Zjg3Y2Y0YTE1YjllNzgyMjQ1NWIzYWE4YWYwYjVlZDNh
Mjk5ZjcwHhcNMjUwNzAxMDkwMDUyWhcNMjUwNzAyMDkwMDUyWjAzMTEwLwYDVQQD
EygzYWQzNTk1MmFjMTIxZTZkYTllYjgyMWI0MGZiMWQyNDJlZGQ1NWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlGPMwp83N5fnq+ZZYSe8flVbmR/
BRmq7O5QokHkqwXfSZk5iud7FlqblR/O/0ud3wcxUNJkMZ+8FW/eiiqYasQiJ3hu
JyBbIIRGBre9l01vh/N77xePZMcVoYrPYDpCTJBmB5XHZNYjRjhxMkTKkmn3q4me
yxIz/iQUQQMKo9/WS22UU7NLoz99fbDva6KNJzf3+hQuJJbexDKXmiSqFq2AwsTq
H0chDN8QXtNHCdEd32MU4oVdNws5wOJ2Ene4pquHepqDgoeOmnoR1y8zVeTWIvEa
gkjUowNzcKoFxsPU3z2ZVo8pLGDdfvOTBLdBH3atGOMa/Rg4Wo37Evt8GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrTWVKsEh5tqeuCG0D7HSQu3VWzMB8GA1UdIwQY
MBaAFKb4fPShW554IkVbOqivC17Topn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHZoODlLRmJubmdpUlZzNnFLOExYdE9pbWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yODliMWQtMDhkZC00ZDUzLWIxMmQt
N2Q0MDI4YTFiZjU5LzEvcHZoODlLRmJubmdpUlZzNnFLOExYdE9pbWZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yODliMWQtMDhkZC00ZDUzLWIxMmQtN2Q0MDI4YTFiZjU5
LzEvcHZoODlLRmJubmdpUlZzNnFLOExYdE9pbWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxSywHSOJ
vCHXCkxKqIdI/s0JQjvmuO5+8itkvuhnqO1Jnvx/7GI4MUn3zKzqi3oENI/jZ4+O
TyYiwgQ9QVPtAGjgQwd4It/u9DUX6Kc2Kk6uBRHsxhqOqqzJJConASqe+B9gtTSh
Khb9dSYO8i8xnJX/nrsuPjGlD67JpmMpT+Qtl8ZcdVVksCDP/j3sh73c3su+Lvbn
jHkvv8wxBSCcI1fpLdHsQUbgiTPkxeCVlFYEfQ/FsFFkf4J1ZNbVoBytbDbYyczr
+y3dlFrDy9LIDHpkviloB9fNr4qhPVbreeJqgSlKAP0LvHuVAMkBj2AxKR50iw8b
kXNuD0xUgu6pWA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:31:08 2025 by rpki-client