![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/WvyRcYRi5d4hAJdBMZnWzhNld2w.mft
File: WvyRcYRi5d4hAJdBMZnWzhNld2w.mft (raw, json)
Hash identifier: +up7pU5imJg/lF1TQ0uKWB5hiWA9yc+6nD7mvvh7TI4=
Subject key identifier: 6B:55:83:58:94:5E:D4:3F:FA:17:35:C5:10:F7:59:9B:67:7D:86:F3
Authority key identifier: 5A:FC:91:71:84:62:E5:DE:21:00:97:41:31:99:D6:CE:13:65:77:6C
Certificate issuer: /CN=5afc91718462e5de210097413199d6ce1365776c
Certificate serial: 018BA85E5E121DCD80236AFCEAA5BA13BE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvyRcYRi5d4hAJdBMZnWzhNld2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/WvyRcYRi5d4hAJdBMZnWzhNld2w.mft
Manifest number: 086B
Signing time: Tue 07 Nov 2023 06:00:38 +0000
Manifest this update: Tue 07 Nov 2023 06:00:38 +0000
Manifest next update: Wed 08 Nov 2023 06:00:38 +0000
Files and hashes: 1: AtHSZf0jNQU6pKeeBleXMs5qZmI.roa (hash: hVrAuRps/eR8Ua1F+yCVEDHrBWSWXIEPYAOPDhNuczQ=)
2: WvyRcYRi5d4hAJdBMZnWzhNld2w.crl (hash: zeEukuHre+2EN+6s/9gA79rl3krccy+ZYLFTIDrCUC8=)
3: e3iPmApzwNc_0yItXs1mSfxQbFY.roa (hash: ualbf1Npf4bHnEBm6ujBkWYfNMAuRg28qwG9Yx3Sh8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:5e:5e:12:1d:cd:80:23:6a:fc:ea:a5:ba:13:be:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afc91718462e5de210097413199d6ce1365776c
Validity
Not Before: Nov 7 06:00:38 2023 GMT
Not After : Nov 8 06:00:38 2023 GMT
Subject: CN=6b558358945ed43ffa1735c510f7599b677d86f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1d:c9:21:8f:ca:f9:6c:2f:d7:9f:14:cf:ab:
57:57:4a:ad:fb:64:e7:08:d2:3f:55:f2:a0:18:35:
5e:e6:f9:1b:b3:1f:5c:f8:a5:51:44:e7:b9:f7:54:
c6:a9:be:5c:8f:7f:d1:ef:16:e4:a3:b9:42:93:77:
b4:9d:2b:3c:13:db:84:55:92:41:9d:67:92:89:b4:
37:c5:20:8d:ec:85:fa:cc:72:e4:1a:77:00:f2:53:
cc:ec:f0:7e:68:03:7e:6d:2d:85:26:08:0e:ba:32:
13:75:93:61:58:94:1a:e5:cc:e1:c1:97:87:ee:82:
f2:d8:08:d9:9e:84:e3:66:01:db:cd:cf:e8:69:17:
9f:83:b4:f1:3f:50:f8:92:e8:67:09:fd:6b:a2:2d:
42:92:b1:50:e5:f4:e2:35:12:79:f2:1e:d1:8d:99:
cc:50:4c:db:0a:2b:a1:ae:e9:31:33:1d:07:17:88:
be:4f:4b:e0:c5:8a:78:68:86:ac:7c:48:b8:30:e6:
a2:c8:fe:1f:95:d8:cb:97:8d:01:d3:8b:7c:c2:38:
52:e0:79:65:a5:c0:60:8b:80:b4:12:76:6b:51:65:
aa:34:31:2c:1e:9a:fd:06:dd:35:74:bd:3a:39:23:
e9:59:36:e5:40:57:32:37:e9:04:f1:50:39:46:0a:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:55:83:58:94:5E:D4:3F:FA:17:35:C5:10:F7:59:9B:67:7D:86:F3
X509v3 Authority Key Identifier:
keyid:5A:FC:91:71:84:62:E5:DE:21:00:97:41:31:99:D6:CE:13:65:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvyRcYRi5d4hAJdBMZnWzhNld2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/WvyRcYRi5d4hAJdBMZnWzhNld2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/WvyRcYRi5d4hAJdBMZnWzhNld2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:62:14:8d:b2:c9:b0:83:b7:c3:f1:62:0e:a4:c1:ff:81:dd:
6f:2d:db:80:f4:e6:dd:42:6b:69:6c:90:2e:89:e7:b4:73:41:
54:81:b4:2b:d3:7d:9a:b2:0a:88:ad:8c:39:aa:92:3f:22:96:
bd:7e:61:ab:b4:6c:dc:0c:07:db:c7:37:b4:c3:a2:3e:98:c1:
81:64:b0:3f:bc:6d:33:2f:99:73:d4:85:01:0b:12:48:c2:31:
01:6e:39:8b:fa:f3:1b:13:0f:c2:ea:52:d9:2a:bb:ce:09:d2:
80:42:41:a5:0c:f3:d8:de:b1:a0:5d:2f:4b:ad:a2:b6:2e:f6:
60:a5:83:c2:ff:e6:65:a4:e2:be:86:2a:aa:9c:c8:c3:43:5e:
6f:fb:91:c6:71:b5:b1:64:7b:d6:ca:09:6d:20:e6:c3:35:26:
c2:5a:af:89:ae:5b:09:bf:a6:74:f0:3d:56:30:ca:64:62:c4:
85:8c:07:28:e3:73:35:6b:39:fb:a6:1d:38:bc:0b:41:04:0e:
12:87:99:0f:e9:d3:d5:b2:66:2f:a8:5b:53:44:ae:c5:b4:f2:
07:53:7c:32:cc:c9:be:5f:88:3d:19:36:a7:8d:95:c1:19:42:
8a:56:bf:5f:e9:7e:27:d0:fe:ef:5c:b5:0a:99:a0:fb:0b:94:
f2:05:8c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:48 2025 by rpki-client