![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4eacd7-a7a9-4a48-8325-b66bf3d405bb/1/QkWTfGiXa22Vg4AvQtSn6HIlil0.mft
File: QkWTfGiXa22Vg4AvQtSn6HIlil0.mft (raw, json)
Hash identifier: qEMed9sKOVKFhan2/BA1Xzv66opbN1/mwwH27NlTUa8=
Subject key identifier: 9E:5E:93:DD:AC:5B:C4:0E:2B:A7:AF:F0:73:93:AB:C6:0E:78:EB:06
Authority key identifier: 42:45:93:7C:68:97:6B:6D:95:83:80:2F:42:D4:A7:E8:72:25:8A:5D
Certificate issuer: /CN=4245937c68976b6d9583802f42d4a7e872258a5d
Certificate serial: 019300460A76E653D1CAAC5E4B8C048B754E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkWTfGiXa22Vg4AvQtSn6HIlil0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4eacd7-a7a9-4a48-8325-b66bf3d405bb/1/QkWTfGiXa22Vg4AvQtSn6HIlil0.mft
Manifest number: 97
Signing time: Wed 06 Nov 2024 07:00:10 +0000
Manifest this update: Wed 06 Nov 2024 07:00:10 +0000
Manifest next update: Thu 07 Nov 2024 07:00:10 +0000
Files and hashes: 1: QkWTfGiXa22Vg4AvQtSn6HIlil0.crl (hash: 3zDTB8duF4KRJPQZQxcXV/BEkiwuh/xIYSnUMe7Wfis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:46:0a:76:e6:53:d1:ca:ac:5e:4b:8c:04:8b:75:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4245937c68976b6d9583802f42d4a7e872258a5d
Validity
Not Before: Nov 6 07:00:10 2024 GMT
Not After : Nov 7 07:00:10 2024 GMT
Subject: CN=9e5e93ddac5bc40e2ba7aff07393abc60e78eb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:52:3e:2d:45:3b:f8:09:cc:18:7f:06:38:
97:22:05:98:73:fb:5f:21:e0:a3:d2:1c:d5:94:5b:
95:8d:08:53:3c:94:99:50:d8:8a:41:fa:53:94:86:
5a:9f:68:85:88:22:24:80:6e:6a:ec:a4:75:85:df:
69:58:2f:59:47:d4:f4:8e:64:be:4b:8f:7e:8d:ac:
92:23:ba:9e:43:49:d7:46:6a:6c:87:95:f5:f1:1e:
52:96:56:4c:fd:cb:f0:17:d2:c4:35:9e:89:82:8b:
f3:91:b2:02:a3:44:87:a6:34:29:17:e3:8a:62:03:
47:69:20:c3:34:f3:06:8b:69:92:6d:9c:f3:ed:81:
40:5a:9b:0a:8b:d2:76:d7:cf:78:e3:5b:0a:23:bf:
45:f2:26:18:99:a1:8f:1f:af:6f:1e:15:16:a0:c8:
d6:c0:54:22:79:f1:1b:5f:75:51:dc:44:8e:1c:9b:
6a:4a:d2:df:55:8d:95:c5:42:0d:2d:f4:9e:cb:b6:
e0:60:f8:bf:c6:c1:9e:e3:be:66:59:90:7b:48:40:
94:ab:5e:fe:32:58:e1:fe:a3:41:cb:15:4a:7d:4b:
9b:a7:6a:bb:8f:33:83:b9:92:10:49:bd:25:07:85:
1a:f8:ea:b1:b8:57:66:46:df:9b:9b:5b:2f:c6:96:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5E:93:DD:AC:5B:C4:0E:2B:A7:AF:F0:73:93:AB:C6:0E:78:EB:06
X509v3 Authority Key Identifier:
keyid:42:45:93:7C:68:97:6B:6D:95:83:80:2F:42:D4:A7:E8:72:25:8A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkWTfGiXa22Vg4AvQtSn6HIlil0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4eacd7-a7a9-4a48-8325-b66bf3d405bb/1/QkWTfGiXa22Vg4AvQtSn6HIlil0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4eacd7-a7a9-4a48-8325-b66bf3d405bb/1/QkWTfGiXa22Vg4AvQtSn6HIlil0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d8:be:18:51:e6:9b:1a:16:e2:ef:53:bd:ad:a7:f6:4a:cb:
f7:ea:22:1e:d1:62:ee:8b:d8:2e:9e:e9:b2:ea:18:1f:b5:41:
c2:04:ea:29:92:4d:30:98:3b:13:e3:ea:b9:38:c6:37:2e:fa:
7c:96:b7:dd:01:f3:42:64:e4:ee:47:19:b6:7b:c6:28:eb:99:
1e:ef:1c:17:8f:02:94:08:85:c5:c9:b8:56:4c:67:40:84:4a:
43:5f:45:c7:4c:78:95:01:b8:02:37:85:f3:5e:9b:5c:e0:02:
9a:87:b3:f4:17:1c:46:88:d6:3c:e6:a5:26:f0:c0:7c:f2:38:
25:fa:10:e8:d0:74:3a:8c:59:2d:3c:68:1a:36:26:4a:a7:a7:
16:27:22:c9:ee:10:82:68:6e:cc:37:81:14:c6:08:cd:1c:72:
d5:9c:36:2d:f9:32:3d:7a:92:6f:49:ea:cb:dc:5a:72:a2:81:
02:38:7b:c0:06:5f:7c:98:5a:2a:f7:29:5d:b2:1c:df:98:6e:
ec:4a:8f:33:7f:a8:df:8f:1f:d1:8f:05:12:71:97:b3:82:3e:
bf:07:56:91:8a:63:25:13:69:9a:c0:42:ea:b0:f8:61:49:75:
07:b2:dd:be:e8:95:9d:70:4c:61:d1:4b:16:c0:ea:3e:6c:6c:
17:fd:fa:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMARgp25lPRyqxeS4wEi3VOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNDU5MzdjNjg5NzZiNmQ5NTgzODAyZjQyZDRhN2U4NzIy
NThhNWQwHhcNMjQxMTA2MDcwMDEwWhcNMjQxMTA3MDcwMDEwWjAzMTEwLwYDVQQD
Eyg5ZTVlOTNkZGFjNWJjNDBlMmJhN2FmZjA3MzkzYWJjNjBlNzhlYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08lSPi1FO/gJzBh/BjiXIgWYc/tf
IeCj0hzVlFuVjQhTPJSZUNiKQfpTlIZan2iFiCIkgG5q7KR1hd9pWC9ZR9T0jmS+
S49+jaySI7qeQ0nXRmpsh5X18R5SllZM/cvwF9LENZ6JgovzkbICo0SHpjQpF+OK
YgNHaSDDNPMGi2mSbZzz7YFAWpsKi9J2189441sKI79F8iYYmaGPH69vHhUWoMjW
wFQiefEbX3VR3ESOHJtqStLfVY2VxUINLfSey7bgYPi/xsGe475mWZB7SECUq17+
Mljh/qNByxVKfUubp2q7jzODuZIQSb0lB4Ua+OqxuFdmRt+bm1svxpanjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5ek92sW8QOK6ev8HOTq8YOeOsGMB8GA1UdIwQY
MBaAFEJFk3xol2ttlYOAL0LUp+hyJYpdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtXVGZHaVhhMjJWZzRBdlF0U242SElsaWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80ZWFjZDctYTdhOS00YTQ4LTgzMjUt
YjY2YmYzZDQwNWJiLzEvUWtXVGZHaVhhMjJWZzRBdlF0U242SElsaWwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80ZWFjZDctYTdhOS00YTQ4LTgzMjUtYjY2YmYzZDQwNWJi
LzEvUWtXVGZHaVhhMjJWZzRBdlF0U242SElsaWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdi+GFHm
mxoW4u9Tva2n9krL9+oiHtFi7ovYLp7psuoYH7VBwgTqKZJNMJg7E+PquTjGNy76
fJa33QHzQmTk7kcZtnvGKOuZHu8cF48ClAiFxcm4VkxnQIRKQ19Fx0x4lQG4AjeF
816bXOACmoez9BccRojWPOalJvDAfPI4JfoQ6NB0OoxZLTxoGjYmSqenFiciye4Q
gmhuzDeBFMYIzRxy1Zw2LfkyPXqSb0nqy9xacqKBAjh7wAZffJhaKvcpXbIc35hu
7EqPM3+o348f0Y8FEnGXs4I+vwdWkYpjJRNpmsBC6rD4YUl1B7LdvuiVnXBMYdFL
FsDqPmxsF/36tQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:51 2025 by rpki-client