![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fe83be-d613-4cc0-a551-3f0a0fa18ef0/1/Xz-V_nmz9G1NX7mtaw8bffOZloQ.mft
File: Xz-V_nmz9G1NX7mtaw8bffOZloQ.mft (raw, json)
Hash identifier: tEKfbA2BAGmo9j2uNBaCS5T6QkOgMANH47IJU2Ewv/A=
Subject key identifier: F5:93:AD:8F:59:FD:07:47:62:2C:DE:89:4F:78:48:DC:1D:A4:50:3A
Authority key identifier: 5F:3F:95:FE:79:B3:F4:6D:4D:5F:B9:AD:6B:0F:1B:7D:F3:99:96:84
Certificate issuer: /CN=5f3f95fe79b3f46d4d5fb9ad6b0f1b7df3999684
Certificate serial: 018ABBB141DBBA570953E16F6CB4F2BF7A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xz-V_nmz9G1NX7mtaw8bffOZloQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fe83be-d613-4cc0-a551-3f0a0fa18ef0/1/Xz-V_nmz9G1NX7mtaw8bffOZloQ.mft
Manifest number: 0889
Signing time: Fri 22 Sep 2023 07:01:10 +0000
Manifest this update: Fri 22 Sep 2023 07:01:10 +0000
Manifest next update: Sat 23 Sep 2023 07:01:10 +0000
Files and hashes: 1: Xz-V_nmz9G1NX7mtaw8bffOZloQ.crl (hash: Oo8L7+dl0D8e1cjZ692MXPpDJH/rkKOU00ORwzxNPck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bb:b1:41:db:ba:57:09:53:e1:6f:6c:b4:f2:bf:7a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3f95fe79b3f46d4d5fb9ad6b0f1b7df3999684
Validity
Not Before: Sep 22 07:01:10 2023 GMT
Not After : Sep 23 07:01:10 2023 GMT
Subject: CN=f593ad8f59fd0747622cde894f7848dc1da4503a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:9b:94:aa:cb:91:4f:f4:7c:52:6d:54:3e:
09:15:62:7f:aa:dc:0a:09:73:c8:da:b1:31:d0:0e:
56:70:ff:ab:f8:30:91:83:c8:a3:aa:99:ac:c0:7d:
d7:0a:0b:56:5e:f6:9e:38:e9:57:8e:4c:f9:21:e5:
e6:04:e6:fb:5b:0d:74:8e:12:a2:2e:e4:5b:4c:84:
1d:55:8b:bd:f2:9b:0f:8b:2f:9b:02:ac:b2:03:ca:
ca:c6:fb:23:14:3f:00:52:77:aa:07:01:9d:42:8d:
c3:d4:22:91:a5:c8:df:b3:72:e2:13:68:f6:f1:b4:
32:92:01:cc:c4:58:dc:36:0b:c2:99:25:e4:90:b9:
f8:8a:65:c1:58:82:df:b9:e7:3a:55:44:93:1a:7d:
62:f3:ea:8a:9c:09:9d:02:60:14:7b:33:cc:1c:8f:
6f:9f:22:ac:93:e5:7c:a0:d5:5b:25:26:b4:c7:35:
d4:1f:db:64:f6:58:ab:de:57:fa:ea:18:19:cf:6e:
c6:f1:da:ab:d8:f7:9b:a2:37:e2:c9:16:02:5f:42:
58:33:bd:21:df:9e:0f:80:53:ab:a2:08:e7:07:aa:
27:0f:24:ee:3b:1e:ca:5a:2b:80:65:38:0f:28:d9:
bc:59:91:eb:0f:95:af:a2:97:14:51:a2:c3:00:f7:
b5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:93:AD:8F:59:FD:07:47:62:2C:DE:89:4F:78:48:DC:1D:A4:50:3A
X509v3 Authority Key Identifier:
keyid:5F:3F:95:FE:79:B3:F4:6D:4D:5F:B9:AD:6B:0F:1B:7D:F3:99:96:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xz-V_nmz9G1NX7mtaw8bffOZloQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fe83be-d613-4cc0-a551-3f0a0fa18ef0/1/Xz-V_nmz9G1NX7mtaw8bffOZloQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fe83be-d613-4cc0-a551-3f0a0fa18ef0/1/Xz-V_nmz9G1NX7mtaw8bffOZloQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:32:0d:da:00:73:ce:5f:18:bd:30:ce:ae:f8:71:dc:bc:2d:
d7:79:4c:41:d6:7e:2c:26:ce:f6:69:d9:95:55:a5:83:1f:3e:
6f:eb:aa:c5:8b:84:b4:b5:5c:db:cd:8d:20:bd:ae:1c:2f:56:
34:9a:4e:73:35:c2:56:d7:e6:a9:f4:00:67:7e:d2:14:68:85:
ea:b3:d5:96:65:e7:52:ca:b9:7b:80:a2:de:be:5e:f6:7f:7a:
90:95:63:33:e8:2f:e8:e1:ea:99:39:a4:b4:d0:94:74:d1:3d:
9e:36:b8:6a:50:02:c0:18:65:4d:fd:1f:4f:ec:57:e1:83:e0:
48:fc:03:5e:4c:d3:67:44:db:66:e4:4a:8b:50:b0:e5:e4:c7:
ed:ce:9e:4e:f8:5c:6c:b7:4c:6f:b9:38:28:64:9d:5a:b3:b3:
41:0f:97:6c:9f:2c:cc:59:ab:86:15:f3:d3:11:09:4a:e9:d8:
9e:b4:c4:40:98:90:c3:5c:2e:27:38:67:09:ff:33:75:46:65:
32:39:6b:b0:33:47:f8:fe:3d:ee:d4:5d:4e:0f:21:aa:12:61:
d1:40:57:87:68:a1:1c:75:3f:a0:a5:e6:46:db:c6:e7:1d:9c:
cd:48:c5:0a:af:34:d4:3f:87:f1:0b:0c:56:7c:4d:30:ab:1f:
ba:3e:36:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYq7sUHbulcJU+FvbLTyv3p4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmM2Y5NWZlNzliM2Y0NmQ0ZDVmYjlhZDZiMGYxYjdkZjM5
OTk2ODQwHhcNMjMwOTIyMDcwMTEwWhcNMjMwOTIzMDcwMTEwWjAzMTEwLwYDVQQD
EyhmNTkzYWQ4ZjU5ZmQwNzQ3NjIyY2RlODk0Zjc4NDhkYzFkYTQ1MDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu2blKrLkU/0fFJtVD4JFWJ/qtwK
CXPI2rEx0A5WcP+r+DCRg8ijqpmswH3XCgtWXvaeOOlXjkz5IeXmBOb7Ww10jhKi
LuRbTIQdVYu98psPiy+bAqyyA8rKxvsjFD8AUneqBwGdQo3D1CKRpcjfs3LiE2j2
8bQykgHMxFjcNgvCmSXkkLn4imXBWILfuec6VUSTGn1i8+qKnAmdAmAUezPMHI9v
nyKsk+V8oNVbJSa0xzXUH9tk9lir3lf66hgZz27G8dqr2PebojfiyRYCX0JYM70h
354PgFOrogjnB6onDyTuOx7KWiuAZTgPKNm8WZHrD5WvopcUUaLDAPe11wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWTrY9Z/QdHYizeiU94SNwdpFA6MB8GA1UdIwQY
MBaAFF8/lf55s/RtTV+5rWsPG33zmZaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHotVl9ubXo5RzFOWDdtdGF3OGJmZk9abG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mZTgzYmUtZDYxMy00Y2MwLWE1NTEt
M2YwYTBmYTE4ZWYwLzEvWHotVl9ubXo5RzFOWDdtdGF3OGJmZk9abG9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mZTgzYmUtZDYxMy00Y2MwLWE1NTEtM2YwYTBmYTE4ZWYw
LzEvWHotVl9ubXo5RzFOWDdtdGF3OGJmZk9abG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjIN2gBz
zl8YvTDOrvhx3Lwt13lMQdZ+LCbO9mnZlVWlgx8+b+uqxYuEtLVc282NIL2uHC9W
NJpOczXCVtfmqfQAZ37SFGiF6rPVlmXnUsq5e4Ci3r5e9n96kJVjM+gv6OHqmTmk
tNCUdNE9nja4alACwBhlTf0fT+xX4YPgSPwDXkzTZ0TbZuRKi1Cw5eTH7c6eTvhc
bLdMb7k4KGSdWrOzQQ+XbJ8szFmrhhXz0xEJSunYnrTEQJiQw1wuJzhnCf8zdUZl
MjlrsDNH+P497tRdTg8hqhJh0UBXh2ihHHU/oKXmRtvG5x2czUjFCq801D+H8QsM
VnxNMKsfuj42PA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:09 2025 by rpki-client