![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4bd00a-83ce-4134-b592-7243d9347143/1/ME1wbXWbAhMRT7MZy1kzFdfjQJs.mft
File: ME1wbXWbAhMRT7MZy1kzFdfjQJs.mft (raw, json)
Hash identifier: e3LCPsuYzsWN6TaE0TXfZAi4uNM0ADRjEkoN6JrJI1Y=
Subject key identifier: 89:B7:AF:77:D5:C9:B4:2B:EE:EC:55:48:83:03:9B:F7:00:F4:69:7C
Authority key identifier: 30:4D:70:6D:75:9B:02:13:11:4F:B3:19:CB:59:33:15:D7:E3:40:9B
Certificate issuer: /CN=304d706d759b0213114fb319cb593315d7e3409b
Certificate serial: 0193BED37EAC3CC9D91ED06B7685B57E8318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME1wbXWbAhMRT7MZy1kzFdfjQJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4bd00a-83ce-4134-b592-7243d9347143/1/ME1wbXWbAhMRT7MZy1kzFdfjQJs.mft
Manifest number: 13A8
Signing time: Fri 13 Dec 2024 07:02:31 +0000
Manifest this update: Fri 13 Dec 2024 07:02:31 +0000
Manifest next update: Sat 14 Dec 2024 07:02:31 +0000
Files and hashes: 1: 5EQDCCIFpPbyuwJCYbXsP8yWg1E.roa (hash: Ajiv0QCBfSSgDf4wquGUo/7obVAZSzkE2v82fE8PGME=)
2: ME1wbXWbAhMRT7MZy1kzFdfjQJs.crl (hash: oqZ2Px3Tio5COaUjdtTsOgP8k+kBr13qiqiTPHzGXFw=)
3: nJg4iVJarxL5e8x1HAXywUZfgJY.roa (hash: NiZzY5Nv1CyjvlOLrpebpFq/Db6Ohdr8QNXiyqe3bqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:be:d3:7e:ac:3c:c9:d9:1e:d0:6b:76:85:b5:7e:83:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304d706d759b0213114fb319cb593315d7e3409b
Validity
Not Before: Dec 13 07:02:31 2024 GMT
Not After : Dec 14 07:02:31 2024 GMT
Subject: CN=89b7af77d5c9b42beeec554883039bf700f4697c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:1f:0b:6a:80:01:d1:2b:a6:9c:25:7f:81:
61:31:09:b8:22:87:73:c5:26:6d:40:07:fb:37:0d:
d9:8e:33:24:b7:5a:fb:fd:97:ca:9e:20:b0:7e:a5:
5c:9a:76:e1:ae:72:15:42:ff:24:00:88:4e:aa:65:
44:32:16:ff:16:58:59:d7:f3:a8:d9:8f:01:c5:db:
76:62:e8:ea:a3:02:9a:45:b0:c2:4b:53:7a:86:95:
3a:28:db:54:22:f5:be:af:08:19:c5:13:1b:cf:c6:
ef:62:ef:27:b4:74:d2:b2:29:30:0d:b3:84:ca:75:
c3:59:a6:07:11:a6:0a:84:30:6a:c6:f3:99:fa:f2:
f2:69:3f:52:78:6d:1b:8a:f9:bb:89:c3:87:53:30:
0c:17:8d:61:78:12:64:ee:91:8d:ea:d2:d3:96:1b:
77:08:52:73:97:d4:2b:95:8e:9e:65:97:a8:2d:a2:
4c:07:1c:08:28:9f:1c:a4:97:48:53:c0:d5:29:c3:
03:f8:9e:3e:0f:2d:cd:54:84:9b:af:4d:6b:8d:8e:
f7:d2:9c:07:fb:15:8b:ff:10:cb:d1:b4:42:6a:00:
b4:cb:ab:5a:c8:06:87:34:b0:4d:ff:65:ec:30:8c:
dd:db:cb:68:b2:7a:94:c5:89:af:56:da:75:ab:0e:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B7:AF:77:D5:C9:B4:2B:EE:EC:55:48:83:03:9B:F7:00:F4:69:7C
X509v3 Authority Key Identifier:
keyid:30:4D:70:6D:75:9B:02:13:11:4F:B3:19:CB:59:33:15:D7:E3:40:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME1wbXWbAhMRT7MZy1kzFdfjQJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4bd00a-83ce-4134-b592-7243d9347143/1/ME1wbXWbAhMRT7MZy1kzFdfjQJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4bd00a-83ce-4134-b592-7243d9347143/1/ME1wbXWbAhMRT7MZy1kzFdfjQJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ce:2b:6d:63:4d:5f:ab:60:a5:f2:15:b4:ba:79:fe:85:7b:
a1:3c:cf:29:cc:85:0a:f8:51:03:61:58:c8:c1:2a:3a:ea:03:
be:9f:33:c5:1e:d4:33:e0:09:c5:f9:cd:55:8d:df:5b:06:e6:
21:ab:60:12:89:66:cc:47:1b:ea:09:c5:a1:b9:8f:f2:b3:45:
e9:11:f1:b0:f1:c2:6b:2e:99:09:2f:79:ee:d7:74:6e:28:67:
dc:9d:5b:4c:31:78:ca:31:cc:0b:84:5c:39:01:fe:1e:0a:4e:
a8:75:79:a1:48:8f:54:0d:7c:9a:a9:9c:0e:63:c1:7b:c5:0b:
b6:0d:c9:31:1e:37:4d:71:19:58:e2:91:03:cb:8b:12:77:43:
bb:53:7d:b5:64:00:12:8a:dc:5d:d6:5f:a5:c4:7f:0e:27:71:
2e:10:2f:9b:48:32:75:1c:b6:d7:73:c2:dd:7f:b7:0b:d8:b9:
7d:29:fc:4a:1d:7f:82:f8:be:a4:32:f0:07:76:35:de:24:ee:
30:d0:f6:a0:9a:37:20:61:6e:67:5a:74:be:97:2c:9e:a2:eb:
c2:29:84:0c:05:d3:ed:3b:c4:a8:fd:a4:11:3d:09:5a:d0:f8:
c7:01:cd:db:06:f7:d4:91:bd:17:95:07:06:95:51:1e:85:b9:
4d:7a:08:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:36 2025 by rpki-client