![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/WzZ0J1oWehM5Hxy3ZMj1xPGVgNE.mft
File: WzZ0J1oWehM5Hxy3ZMj1xPGVgNE.mft (raw, json)
Hash identifier: MGGN5ONQo1S0VLQxIc4XkVDDkU8x4zfWGCXCg+iyMnQ=
Subject key identifier: F3:FF:47:B7:46:B5:19:98:4F:96:3E:94:A1:64:01:71:FC:F7:9D:16
Authority key identifier: 5B:36:74:27:5A:16:7A:13:39:1F:1C:B7:64:C8:F5:C4:F1:95:80:D1
Certificate issuer: /CN=5b3674275a167a13391f1cb764c8f5c4f19580d1
Certificate serial: 018948E9E9B40684E4E3975BAFD6A44BB95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzZ0J1oWehM5Hxy3ZMj1xPGVgNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/WzZ0J1oWehM5Hxy3ZMj1xPGVgNE.mft
Manifest number: 0E2B
Signing time: Wed 12 Jul 2023 07:03:56 +0000
Manifest this update: Wed 12 Jul 2023 07:03:56 +0000
Manifest next update: Thu 13 Jul 2023 07:03:56 +0000
Files and hashes: 1: E5wFlhWaJv0ESByQPbcpF9MheP0.roa (hash: hsNLm6hw1LSeNImgs6J+yUJCVGFF+Ng/G+bak8vI/rk=)
2: WzZ0J1oWehM5Hxy3ZMj1xPGVgNE.crl (hash: MRBI3wujZLYsQX5RaMQX5jfhdrWntY70pXEaQUJAX7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:e9:e9:b4:06:84:e4:e3:97:5b:af:d6:a4:4b:b9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3674275a167a13391f1cb764c8f5c4f19580d1
Validity
Not Before: Jul 12 07:03:56 2023 GMT
Not After : Jul 13 07:03:56 2023 GMT
Subject: CN=f3ff47b746b519984f963e94a1640171fcf79d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:78:8f:dc:44:74:db:96:6d:9f:35:5e:ef:
cd:18:f7:2c:62:89:b3:a7:db:b0:d3:a7:f1:9b:c6:
43:e4:d4:27:0c:c3:a3:9c:5a:0f:ad:fe:67:a2:ed:
83:61:fe:12:93:f8:b2:e0:45:cf:92:43:fb:44:40:
22:56:01:e6:b3:9c:9f:5d:ba:52:d2:0f:c5:93:81:
03:ea:08:8a:e5:82:51:5b:58:77:05:aa:3f:59:61:
d3:00:26:9a:17:9f:26:f1:32:a4:0e:5c:c9:f6:82:
64:d9:e2:c4:9c:02:fe:a6:b6:c9:cb:ae:7d:93:7e:
62:ba:f7:db:ec:cb:33:a5:8a:c4:4c:da:f4:59:d2:
c8:e2:64:22:08:41:ad:6f:04:79:68:cf:c4:20:44:
8e:a7:9d:1b:4c:d0:7f:89:0b:51:11:eb:3e:92:fc:
ff:7d:66:7b:bf:7a:03:1a:b9:37:3c:18:72:9e:44:
78:49:30:18:32:ae:a5:aa:6e:a5:c6:15:47:d1:77:
b5:f6:e3:1a:9b:b7:41:23:3c:fc:dd:54:95:79:85:
c4:bc:60:09:56:6e:ad:b5:b9:7a:4d:71:f6:41:e5:
88:d0:ff:ba:26:1a:d4:dd:0d:8a:fe:97:ce:36:4e:
27:f5:9b:a0:c2:b4:5e:64:30:19:d7:00:6b:57:dd:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FF:47:B7:46:B5:19:98:4F:96:3E:94:A1:64:01:71:FC:F7:9D:16
X509v3 Authority Key Identifier:
keyid:5B:36:74:27:5A:16:7A:13:39:1F:1C:B7:64:C8:F5:C4:F1:95:80:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzZ0J1oWehM5Hxy3ZMj1xPGVgNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/WzZ0J1oWehM5Hxy3ZMj1xPGVgNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/WzZ0J1oWehM5Hxy3ZMj1xPGVgNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c7:c9:53:41:07:cc:50:e1:c3:ba:2e:8d:bc:39:7f:da:58:
60:13:fb:c1:e2:ad:c5:eb:c7:97:06:dd:64:75:6f:31:05:b3:
cc:56:d8:23:c6:b6:17:1a:13:7e:ba:ba:e0:7c:8e:a1:9f:a0:
5c:07:94:07:7a:b5:b7:1d:22:89:cf:ea:3f:4a:30:d5:3b:3e:
62:f2:4c:ce:33:21:7b:98:35:b3:dc:c7:e9:3b:a1:0b:6e:f6:
25:c8:73:bd:c0:86:03:5d:53:fd:83:4c:97:f7:fa:a2:bc:e3:
2a:2d:7a:d2:5b:84:30:8f:d3:02:ba:06:e4:ab:67:b4:c5:9f:
3c:54:74:5a:c5:54:0c:25:4a:cb:50:07:0b:b8:d4:a9:91:62:
b4:c6:db:62:36:c7:d4:cb:9c:d7:26:33:88:ff:26:1b:e3:32:
ee:ad:11:21:c0:88:a2:0a:a3:97:d5:fd:d8:14:54:ec:5a:5a:
8e:ff:bc:2c:8d:51:06:a2:54:2f:47:b8:7d:e4:9f:23:47:4d:
e0:de:c9:4b:bf:9e:02:0b:03:b1:be:bd:b0:2b:ff:c3:65:34:
8a:dc:a1:b6:c0:eb:92:3b:52:42:2f:b9:d8:47:42:71:53:84:
c3:e2:c3:3e:f9:09:0f:25:0d:f8:8e:75:07:ac:dd:79:74:9b:
53:8d:35:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:40 2025 by rpki-client