Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
File: WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft (raw, json)
Hash identifier: 0/u4Rj2kB/2Xf2LSE6hkORrFqVQ7dobXQBrSyKywjfs=
Subject key identifier: D0:7F:93:87:30:D6:C4:69:29:17:5E:2C:71:36:BE:7F:93:87:6A:2F
Authority key identifier: 58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
Certificate issuer: /CN=58e408c857c7f825ff77bc91eca7ffc921ad4dff
Certificate serial: 0197C4C9F4764D35CCA22A2D3DC393CC06F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
Manifest number: 09D2
Signing time: Tue 01 Jul 2025 07:00:58 +0000
Manifest this update: Tue 01 Jul 2025 07:00:58 +0000
Manifest next update: Wed 02 Jul 2025 07:00:58 +0000
Files and hashes: 1: WOQIyFfH-CX_d7yR7Kf_ySGtTf8.crl (hash: WXSkBQGm2DZFZUvqI1Ed5mHtU/8ZYNqmv/1ZOCtpi+U=)
2: eAhR6KTFJDA3HMwbGsQPK0o1VK8.roa (hash: WcYp6g2h67uQd+b5ZXbElPdlPfBrcS5ukz/v0+o3wuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:c9:f4:76:4d:35:cc:a2:2a:2d:3d:c3:93:cc:06:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e408c857c7f825ff77bc91eca7ffc921ad4dff
Validity
Not Before: Jul 1 07:00:58 2025 GMT
Not After : Jul 2 07:00:58 2025 GMT
Subject: CN=d07f938730d6c46929175e2c7136be7f93876a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:6e:0e:f4:44:72:31:1b:98:d5:40:12:4e:
02:b0:ba:6f:f7:bb:b3:29:5a:89:f8:78:71:a8:7c:
7a:2f:ec:f5:35:27:df:d7:43:14:a1:d0:8b:1c:62:
f0:8b:fe:ba:69:a6:c4:a2:bd:2d:5b:1d:e1:ff:1a:
e5:37:99:0b:9b:37:97:7c:17:12:0d:06:8c:71:6d:
54:3c:07:9f:83:53:a2:0f:14:3e:a0:56:fb:62:2d:
ac:b5:17:5d:70:96:87:18:79:ba:f2:e2:da:09:64:
24:97:e2:62:fa:a0:8a:cb:8f:a0:30:2d:0f:8e:57:
fe:b4:8c:09:ec:33:77:74:34:93:04:76:e3:69:54:
94:e7:03:9b:de:ed:22:01:70:c8:46:ee:d2:f6:76:
39:c9:cd:24:79:a2:dd:74:49:2f:09:48:50:71:6c:
ea:ac:b3:a8:c0:e2:0f:85:14:fd:84:a1:ce:c7:4a:
4c:1a:dc:e7:0d:e1:ff:32:56:e8:23:7e:64:0f:0d:
99:24:dd:18:a3:9d:cb:41:27:b2:92:1d:7a:e5:2e:
05:99:98:47:74:3b:e2:97:e9:b6:5e:aa:e6:52:4c:
dc:be:25:4a:24:3f:c2:02:c0:d8:c2:27:c0:fb:f8:
d1:60:17:87:8d:5c:ea:1b:b7:b1:d2:89:2a:55:7b:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7F:93:87:30:D6:C4:69:29:17:5E:2C:71:36:BE:7F:93:87:6A:2F
X509v3 Authority Key Identifier:
keyid:58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:97:bd:a6:6d:05:d9:61:db:3b:dd:a5:4a:a2:7d:04:83:3d:
ea:c2:40:8d:79:2f:58:0f:f7:6a:25:ab:3d:5f:92:32:55:cf:
ac:02:c8:eb:a3:4b:c5:4f:c0:dc:b0:77:46:92:54:20:91:a3:
ce:f0:87:cf:d1:46:0f:47:96:5b:69:7d:a4:da:44:55:a9:75:
f4:0a:9b:9f:06:98:86:81:09:8d:d1:f4:cc:bf:d1:db:8b:00:
56:d0:d7:e2:05:bd:cb:d0:b1:8a:10:ef:a7:e3:7f:15:7f:71:
38:ed:a2:47:96:d5:b1:31:db:ab:72:2a:49:d3:65:1f:5a:6e:
79:7d:b5:d7:07:77:97:a6:33:24:51:ce:0c:cc:a7:9d:6d:06:
29:39:7d:9b:1a:ac:6b:24:bb:b7:da:5c:d9:80:6b:d8:b3:b3:
cd:09:79:f1:29:49:ff:e5:4a:81:fe:1a:b9:85:2e:ff:9c:10:
2a:fb:62:6f:bc:d6:84:41:97:a6:6f:3d:91:e7:2f:4a:e5:7a:
9b:07:50:7a:73:aa:a0:08:3e:60:4f:4d:3b:ff:d2:be:5b:bf:
1a:96:61:60:a4:8c:b0:56:2b:57:55:9c:9c:d3:bd:99:33:20:
2c:0e:3c:82:0e:0a:de:a4:f3:63:78:c1:17:a4:19:e3:b7:8d:
04:ff:6e:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEyfR2TTXMoiotPcOTzAbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZTQwOGM4NTdjN2Y4MjVmZjc3YmM5MWVjYTdmZmM5MjFh
ZDRkZmYwHhcNMjUwNzAxMDcwMDU4WhcNMjUwNzAyMDcwMDU4WjAzMTEwLwYDVQQD
EyhkMDdmOTM4NzMwZDZjNDY5MjkxNzVlMmM3MTM2YmU3ZjkzODc2YTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGJuDvREcjEbmNVAEk4CsLpv97uz
KVqJ+HhxqHx6L+z1NSff10MUodCLHGLwi/66aabEor0tWx3h/xrlN5kLmzeXfBcS
DQaMcW1UPAefg1OiDxQ+oFb7Yi2stRddcJaHGHm68uLaCWQkl+Ji+qCKy4+gMC0P
jlf+tIwJ7DN3dDSTBHbjaVSU5wOb3u0iAXDIRu7S9nY5yc0keaLddEkvCUhQcWzq
rLOowOIPhRT9hKHOx0pMGtznDeH/MlboI35kDw2ZJN0Yo53LQSeykh165S4FmZhH
dDvil+m2XqrmUkzcviVKJD/CAsDYwifA+/jRYBeHjVzqG7ex0okqVXtP7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNB/k4cw1sRpKRdeLHE2vn+Th2ovMB8GA1UdIwQY
MBaAFFjkCMhXx/gl/3e8keyn/8khrU3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV09RSXlGZkgtQ1hfZDd5UjdLZl95U0d0VGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ZGEzNjYtZmIwYS00M2E3LTgzYmEt
Yzk4M2IxZmVkNzllLzEvV09RSXlGZkgtQ1hfZDd5UjdLZl95U0d0VGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85ZGEzNjYtZmIwYS00M2E3LTgzYmEtYzk4M2IxZmVkNzll
LzEvV09RSXlGZkgtQ1hfZDd5UjdLZl95U0d0VGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5e9pm0F
2WHbO92lSqJ9BIM96sJAjXkvWA/3aiWrPV+SMlXPrALI66NLxU/A3LB3RpJUIJGj
zvCHz9FGD0eWW2l9pNpEVal19AqbnwaYhoEJjdH0zL/R24sAVtDX4gW9y9CxihDv
p+N/FX9xOO2iR5bVsTHbq3IqSdNlH1pueX211wd3l6YzJFHODMynnW0GKTl9mxqs
ayS7t9pc2YBr2LOzzQl58SlJ/+VKgf4auYUu/5wQKvtib7zWhEGXpm89kecvSuV6
mwdQenOqoAg+YE9NO//Svlu/GpZhYKSMsFYrV1WcnNO9mTMgLA48gg4K3qTzY3jB
F6QZ47eNBP9uZA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:15:45 2025 by rpki-client