![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/mo6mX2lhbvGMC2kfSbwl3TCFQps.mft
File: mo6mX2lhbvGMC2kfSbwl3TCFQps.mft (raw, json)
Hash identifier: oFX2uaC8WXZPhC+GrxwkOt/+lNGY4wbCP31PRrpU3ak=
Subject key identifier: 72:8D:84:4A:A4:BB:45:46:5C:B8:0D:83:20:ED:78:B1:1D:60:17:D4
Authority key identifier: 9A:8E:A6:5F:69:61:6E:F1:8C:0B:69:1F:49:BC:25:DD:30:85:42:9B
Certificate issuer: /CN=9a8ea65f69616ef18c0b691f49bc25dd3085429b
Certificate serial: 018B385C50F21C25E0A7F3B81FEDF84F110F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo6mX2lhbvGMC2kfSbwl3TCFQps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/mo6mX2lhbvGMC2kfSbwl3TCFQps.mft
Manifest number: 084F
Signing time: Mon 16 Oct 2023 12:00:55 +0000
Manifest this update: Mon 16 Oct 2023 12:00:55 +0000
Manifest next update: Tue 17 Oct 2023 12:00:55 +0000
Files and hashes: 1: ErP6T8Zn2N8TcUe27h8uODygCyA.roa (hash: vRPOPnPBkEZ1SZK1CzMfs6zuOeUjErzYzzEwcjLU+V8=)
2: mo6mX2lhbvGMC2kfSbwl3TCFQps.crl (hash: eIzVgZMd/S2+chLInKKvxilJ1VOORK+uvuN2nWK+2dw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:5c:50:f2:1c:25:e0:a7:f3:b8:1f:ed:f8:4f:11:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8ea65f69616ef18c0b691f49bc25dd3085429b
Validity
Not Before: Oct 16 12:00:55 2023 GMT
Not After : Oct 17 12:00:55 2023 GMT
Subject: CN=728d844aa4bb45465cb80d8320ed78b11d6017d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4a:34:0b:9d:1e:56:36:f9:9c:f0:5a:0c:43:
76:b6:73:02:35:1d:38:e0:9a:22:d6:c4:c8:5f:6f:
e0:60:18:37:1c:22:15:2b:c9:d5:fe:e9:b4:54:45:
3b:4b:9f:de:22:e1:59:f5:46:00:0e:ea:9e:46:78:
69:28:a9:56:ec:49:68:a6:c3:ac:93:ff:76:7f:e9:
38:4d:0e:f5:4e:5d:2e:33:9b:24:6f:69:35:2a:1b:
76:a7:5b:fe:01:64:f8:02:38:6e:aa:2e:c6:74:70:
14:86:e1:eb:f4:8d:b8:8f:bb:35:2a:22:b4:14:4a:
11:9e:5b:16:bf:5c:f7:9b:44:ee:d5:a4:4d:0e:40:
25:51:4f:00:6f:52:6e:52:b6:d7:3a:9e:29:f7:33:
0c:e9:24:1f:0a:85:9c:f7:26:be:a2:fd:dd:72:ba:
c6:87:09:f6:28:19:15:4e:20:e0:47:60:8c:30:a9:
b0:9f:4d:2e:0e:36:39:b6:e1:26:8c:20:58:b5:30:
6a:e3:af:04:7c:b9:83:79:29:cc:13:fe:28:4c:88:
ef:51:fd:60:8a:0c:38:e1:c0:c9:54:63:33:ee:00:
99:57:06:c1:f6:6e:4e:b0:f1:40:35:ab:50:d6:ab:
ec:13:73:7c:cb:5f:3f:2f:2e:e2:c2:16:bc:29:af:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8D:84:4A:A4:BB:45:46:5C:B8:0D:83:20:ED:78:B1:1D:60:17:D4
X509v3 Authority Key Identifier:
keyid:9A:8E:A6:5F:69:61:6E:F1:8C:0B:69:1F:49:BC:25:DD:30:85:42:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo6mX2lhbvGMC2kfSbwl3TCFQps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/mo6mX2lhbvGMC2kfSbwl3TCFQps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/mo6mX2lhbvGMC2kfSbwl3TCFQps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:66:69:57:b0:83:76:72:d0:b0:d1:ab:83:79:56:0a:a7:8a:
5d:37:75:92:a4:2a:37:d6:43:d0:e6:b1:66:50:37:9e:a8:80:
e1:41:1d:39:f9:e5:17:ec:25:34:62:0f:8c:fa:cd:bd:e6:74:
4a:89:24:78:78:0a:b3:03:c0:83:0b:06:f5:eb:34:b9:fa:ea:
73:36:f2:94:25:cd:54:ce:bf:f9:54:ed:b7:50:2f:56:78:9a:
ed:dd:47:fd:c2:b5:ab:a7:cc:14:aa:21:9d:f0:c1:d2:a1:1b:
17:9e:51:53:05:2f:37:49:8b:c1:7f:eb:3a:55:50:f5:42:3e:
5b:16:64:96:33:ef:a1:7a:19:85:c4:56:66:75:f7:47:53:1b:
f0:8f:2e:91:c7:6e:02:6f:2e:71:e1:6b:04:43:cd:78:dc:6a:
c5:79:76:67:9e:80:9b:97:a1:42:12:f0:6d:8d:be:d0:2a:ef:
57:cf:a9:fe:6b:aa:b5:38:79:9d:14:35:8c:5d:0b:1d:9d:0c:
81:40:b5:89:ca:67:12:5e:ae:6c:2d:cc:bd:66:d8:b2:05:5c:
fd:de:fd:8a:d9:0c:99:5a:6f:ab:3c:92:b7:05:58:9d:13:cb:
82:0e:b1:c7:74:cb:44:4c:58:0b:3a:04:2b:4f:6d:2e:95:70:
76:29:ae:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:08 2025 by rpki-client