![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c2efcd-eeee-4853-a2bb-720995a18cd9/1/cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.mft
File: cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.mft (raw, json)
Hash identifier: mwkyzyyvv80BlH/fOsr2gbxGi3VtxrWXOEH5Ma1pIds=
Subject key identifier: F7:88:2B:0D:54:47:BB:91:29:69:0F:4F:DA:E8:6F:83:00:E8:83:A5
Authority key identifier: 72:5D:97:54:AB:FC:37:86:62:34:D0:76:10:BA:CC:A0:01:72:1F:C4
Certificate issuer: /CN=725d9754abfc37866234d07610bacca001721fc4
Certificate serial: 019438EA4E5BF2520F1E6C106505A4133C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c2efcd-eeee-4853-a2bb-720995a18cd9/1/cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.mft
Manifest number: 0A88
Signing time: Mon 06 Jan 2025 00:01:06 +0000
Manifest this update: Mon 06 Jan 2025 00:01:06 +0000
Manifest next update: Tue 07 Jan 2025 00:01:06 +0000
Files and hashes: 1: cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.crl (hash: ultagrjy8a88yjrli8Eff/F9RNP39L3ILboRqet/u08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:38:ea:4e:5b:f2:52:0f:1e:6c:10:65:05:a4:13:3c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725d9754abfc37866234d07610bacca001721fc4
Validity
Not Before: Jan 6 00:01:06 2025 GMT
Not After : Jan 7 00:01:06 2025 GMT
Subject: CN=f7882b0d5447bb9129690f4fdae86f8300e883a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:e6:65:04:ad:6a:75:5b:36:9e:d1:94:2d:
69:fd:8d:32:61:ad:73:9f:a9:06:6d:f2:25:ee:a0:
32:f3:e0:be:02:bb:bd:46:94:8a:48:04:f2:97:a4:
ee:72:71:f2:91:42:2d:9a:51:e5:c5:5b:5d:0e:7e:
0d:1e:0a:44:e1:13:ca:8f:03:f7:38:5f:95:6e:ee:
aa:66:f7:0a:ba:94:fd:e1:54:12:f8:37:50:c2:e3:
90:fe:2f:56:95:f1:14:72:dd:7f:5f:e1:01:5f:52:
41:ba:cb:ad:ce:c7:3b:98:03:f8:54:47:55:c1:b7:
78:cc:cb:c2:fd:04:e2:73:36:1c:ee:97:71:dc:5f:
a5:72:b9:15:c9:70:e2:b2:ca:18:8c:23:d0:6c:06:
97:8d:e2:81:31:f8:6c:19:b1:32:80:f0:6f:27:04:
de:88:e7:9d:38:db:19:44:29:82:7d:9f:39:b2:3a:
2d:50:d3:7c:71:86:ff:e5:f7:cf:f7:2e:28:fa:91:
30:87:aa:14:9d:ec:d2:3a:9e:ff:e4:79:94:ad:f3:
10:a4:02:01:29:b5:c2:d5:07:3e:b6:6f:e5:3c:5f:
49:d4:b9:35:27:51:ac:5c:b5:52:29:69:2f:a4:47:
ca:48:fb:5b:72:bc:93:77:90:df:c9:49:a4:66:b4:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:88:2B:0D:54:47:BB:91:29:69:0F:4F:DA:E8:6F:83:00:E8:83:A5
X509v3 Authority Key Identifier:
keyid:72:5D:97:54:AB:FC:37:86:62:34:D0:76:10:BA:CC:A0:01:72:1F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c2efcd-eeee-4853-a2bb-720995a18cd9/1/cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c2efcd-eeee-4853-a2bb-720995a18cd9/1/cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5e:c1:e4:f7:c3:38:34:70:39:28:e7:6f:44:96:51:4f:29:
58:e9:27:cd:38:ab:72:65:1b:ce:04:a5:b8:75:de:af:e2:10:
0c:99:05:a8:43:50:ed:ac:c4:d0:c2:e7:ff:1a:a5:d2:c8:18:
3c:49:eb:d0:3c:11:00:db:84:72:1b:36:38:bb:89:98:40:d1:
9a:7f:fd:37:e8:c1:67:b4:8e:ec:21:2d:db:a1:ad:99:87:8e:
a8:74:b3:9c:fe:75:d9:65:e0:b9:fb:7e:0e:6e:cf:65:d2:74:
63:c2:58:86:6a:18:4d:1e:17:72:f7:82:b9:c8:a1:7d:b5:db:
bd:2d:12:17:f8:9d:e5:ec:0b:49:44:7a:21:a1:75:aa:ba:46:
1c:38:15:4f:83:86:67:5d:32:07:df:94:9c:fd:c2:48:f2:bf:
8d:22:a5:4a:6f:a6:92:bb:7a:70:47:d3:ff:c2:6a:39:c3:65:
6d:1e:ee:e3:28:26:e4:ca:e3:62:65:eb:ad:b0:5d:46:06:b8:
53:25:27:65:cf:86:3a:d7:d7:4c:bc:6f:06:29:96:20:83:7b:
70:4c:3f:70:ba:1b:b9:62:4c:dc:29:e2:2e:0b:af:54:5a:df:
ad:44:0c:15:ca:bd:92:38:fa:4d:b6:15:16:5a:0e:ae:ef:81:
18:8e:c0:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQ46k5b8lIPHmwQZQWkEzwYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNWQ5NzU0YWJmYzM3ODY2MjM0ZDA3NjEwYmFjY2EwMDE3
MjFmYzQwHhcNMjUwMTA2MDAwMTA2WhcNMjUwMTA3MDAwMTA2WjAzMTEwLwYDVQQD
EyhmNzg4MmIwZDU0NDdiYjkxMjk2OTBmNGZkYWU4NmY4MzAwZTg4M2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO7mZQStanVbNp7RlC1p/Y0yYa1z
n6kGbfIl7qAy8+C+Aru9RpSKSATyl6TucnHykUItmlHlxVtdDn4NHgpE4RPKjwP3
OF+Vbu6qZvcKupT94VQS+DdQwuOQ/i9WlfEUct1/X+EBX1JBusutzsc7mAP4VEdV
wbd4zMvC/QTiczYc7pdx3F+lcrkVyXDissoYjCPQbAaXjeKBMfhsGbEygPBvJwTe
iOedONsZRCmCfZ85sjotUNN8cYb/5ffP9y4o+pEwh6oUnezSOp7/5HmUrfMQpAIB
KbXC1Qc+tm/lPF9J1Lk1J1GsXLVSKWkvpEfKSPtbcryTd5DfyUmkZrSMSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeIKw1UR7uRKWkPT9rob4MA6IOlMB8GA1UdIwQY
MBaAFHJdl1Sr/DeGYjTQdhC6zKABch/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2wyWFZLdjhONFppTk5CMkVMck1vQUZ5SDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jMmVmY2QtZWVlZS00ODUzLWEyYmIt
NzIwOTk1YTE4Y2Q5LzEvY2wyWFZLdjhONFppTk5CMkVMck1vQUZ5SDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jMmVmY2QtZWVlZS00ODUzLWEyYmItNzIwOTk1YTE4Y2Q5
LzEvY2wyWFZLdjhONFppTk5CMkVMck1vQUZ5SDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfl7B5PfD
ODRwOSjnb0SWUU8pWOknzTircmUbzgSluHXer+IQDJkFqENQ7azE0MLn/xql0sgY
PEnr0DwRANuEchs2OLuJmEDRmn/9N+jBZ7SO7CEt26GtmYeOqHSznP512WXguft+
Dm7PZdJ0Y8JYhmoYTR4XcveCucihfbXbvS0SF/id5ewLSUR6IaF1qrpGHDgVT4OG
Z10yB9+UnP3CSPK/jSKlSm+mkrt6cEfT/8JqOcNlbR7u4ygm5MrjYmXrrbBdRga4
UyUnZc+GOtfXTLxvBimWIIN7cEw/cLobuWJM3CniLguvVFrfrUQMFcq9kjj6TbYV
FloOru+BGI7AKA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:56 2025 by rpki-client