![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/QPFuUGrg7GxB7wQ3uFURBHS6R9w.mft
File: QPFuUGrg7GxB7wQ3uFURBHS6R9w.mft (raw, json)
Hash identifier: 3mMYHShQti8FZvaafYk1E+cghBb+ztEWU4r8o0QmKvY=
Subject key identifier: E6:90:83:0F:05:D5:C1:BF:9E:8E:5B:1D:8B:EA:A2:AB:01:EB:AB:EA
Authority key identifier: 40:F1:6E:50:6A:E0:EC:6C:41:EF:04:37:B8:55:11:04:74:BA:47:DC
Certificate issuer: /CN=40f16e506ae0ec6c41ef0437b855110474ba47dc
Certificate serial: 0186A09F3B00D8FBE7F91754D899487CF1AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPFuUGrg7GxB7wQ3uFURBHS6R9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/QPFuUGrg7GxB7wQ3uFURBHS6R9w.mft
Manifest number: 14
Signing time: Thu 02 Mar 2023 04:40:35 +0000
Manifest this update: Thu 02 Mar 2023 04:40:35 +0000
Manifest next update: Fri 03 Mar 2023 04:40:35 +0000
Files and hashes: 1: 6ffrNQi0BlslB0NCbskNJn4mTCg.roa (hash: gbpNjqrxZNlWIulE5CAbl2eT9/JNgbL2LN5x3Yt1WGQ=)
2: QPFuUGrg7GxB7wQ3uFURBHS6R9w.crl (hash: xEkyMtj2vghCVEyvwItjmH2MlD9g3EtAKU6Y47Tk5iE=)
3: ZDCC_tj2fjgBmj0xAv9sy3qduf4.roa (hash: YRMN+I4RdIZw149YQcoLRFKhCY6L0qdO5oLUOHJf8X0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a0:9f:3b:00:d8:fb:e7:f9:17:54:d8:99:48:7c:f1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f16e506ae0ec6c41ef0437b855110474ba47dc
Validity
Not Before: Mar 2 04:40:35 2023 GMT
Not After : Mar 3 04:40:35 2023 GMT
Subject: CN=e690830f05d5c1bf9e8e5b1d8beaa2ab01ebabea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:84:10:56:89:d9:b0:9d:82:b3:bd:54:17:8c:
67:3a:02:85:59:bc:ce:25:e9:75:30:9d:c7:da:f3:
fe:43:ed:96:8a:6d:4b:1d:53:a2:64:e4:a8:96:f6:
6a:aa:22:f6:02:f5:74:d9:c3:89:b1:e3:46:2d:2d:
15:53:d5:35:ab:f7:9e:de:90:96:e6:77:62:06:01:
f2:27:24:14:9b:63:33:2e:1c:7f:cd:b7:71:6d:7b:
37:f7:d8:5b:c9:e3:71:3a:93:8e:2e:74:77:99:33:
5d:29:1f:3e:2d:e6:53:7e:20:bf:2b:69:53:8c:6f:
f3:60:89:50:15:4d:d3:9a:09:a5:07:7b:34:fa:3d:
7c:16:62:b9:48:58:4d:ab:44:56:42:b9:18:33:98:
24:67:94:e7:47:92:5a:d9:9b:e8:1a:c3:9b:2a:ea:
7e:6a:8d:f3:f9:df:28:8d:6d:f8:61:16:d6:62:97:
be:a0:13:43:9f:1e:f7:07:f5:9a:84:9a:d0:4b:cf:
84:3e:5d:c8:25:38:6f:26:33:33:7b:9a:c4:51:41:
5a:96:dd:4d:e7:92:d9:bf:9a:e9:99:25:0a:50:c8:
6b:2c:1b:c2:3e:49:53:d5:57:d3:84:47:46:c5:8e:
00:ba:3c:89:0c:3e:27:de:be:42:02:e0:bb:52:c1:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:90:83:0F:05:D5:C1:BF:9E:8E:5B:1D:8B:EA:A2:AB:01:EB:AB:EA
X509v3 Authority Key Identifier:
keyid:40:F1:6E:50:6A:E0:EC:6C:41:EF:04:37:B8:55:11:04:74:BA:47:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPFuUGrg7GxB7wQ3uFURBHS6R9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/QPFuUGrg7GxB7wQ3uFURBHS6R9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/QPFuUGrg7GxB7wQ3uFURBHS6R9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:df:76:e4:e3:91:48:f6:23:9a:cc:00:cc:9b:0c:c2:5f:e2:
54:75:11:91:3c:8a:4d:e3:bd:8d:94:2c:08:0f:69:a8:50:c0:
f2:e7:03:45:8a:8d:ee:02:d2:54:fc:b7:5b:b3:f7:72:96:f7:
ec:ad:40:34:95:83:a9:8d:21:9c:10:54:7c:e6:7e:64:39:40:
aa:17:09:8e:53:06:d6:e5:76:59:0f:17:9c:0a:d3:e5:88:08:
25:a4:94:39:09:32:f9:58:f6:fe:84:3d:10:e5:9c:fb:31:b5:
36:a7:55:f7:1a:68:9d:83:0b:97:bd:a8:61:07:f0:e2:53:57:
46:7c:c1:36:f1:18:f9:08:1c:1b:0d:3b:b0:59:1c:5a:81:08:
05:7e:38:ae:b7:c2:1d:29:a3:3b:df:d5:65:b6:2b:b8:9f:ef:
8d:10:7a:40:a8:09:fb:62:74:69:dc:d8:9b:42:79:ea:b4:08:
40:a6:25:82:4d:5b:e2:2c:6a:dd:cb:d5:e7:a5:f3:91:1f:bf:
4e:97:41:7e:22:e8:8a:34:e1:74:f6:05:26:68:93:f0:4a:5c:
bc:e7:6b:63:ba:2b:18:55:68:0f:cf:41:85:d6:2c:44:4c:cd:
ff:8e:c0:c5:9b:07:83:dc:3d:ad:91:c1:e6:31:42:34:c1:22:
65:61:7c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:15 2025 by rpki-client