![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/TROA6IxkowA0eN31QULSrFYWPpM.mft
File: TROA6IxkowA0eN31QULSrFYWPpM.mft (raw, json)
Hash identifier: ABDCm2rnY35xwdKy31rNgVTylZClsQXdCZvx843Mg2M=
Subject key identifier: 66:08:24:6C:DE:27:5E:97:77:66:8D:D8:F9:B6:8E:1D:BF:C8:43:20
Authority key identifier: 4D:13:80:E8:8C:64:A3:00:34:78:DD:F5:41:42:D2:AC:56:16:3E:93
Certificate issuer: /CN=4d1380e88c64a3003478ddf54142d2ac56163e93
Certificate serial: 018534637879151D33B9FF8A3BFA37C47CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TROA6IxkowA0eN31QULSrFYWPpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/TROA6IxkowA0eN31QULSrFYWPpM.mft
Manifest number: 0360
Signing time: Wed 21 Dec 2022 11:13:31 +0000
Manifest this update: Wed 21 Dec 2022 11:13:31 +0000
Manifest next update: Thu 22 Dec 2022 11:13:31 +0000
Files and hashes: 1: TROA6IxkowA0eN31QULSrFYWPpM.crl (hash: Mex3vhD1ciHx5IjV9mgPLM/+7w3QfiGXHAGdxBfve7s=)
2: ddrr2IKFAnlillR69VJRcZaU08s.roa (hash: XCxzGjK8oDAqK5kreC4TU3anninRY+XXNyKPb9UykN8=)
3: lQAPhET9EdA9DLeNMBRlmI6pYWM.roa (hash: /CucsbEZi08hEpmbfsj0X0NSMsqVV3B7HxAJUMtbafg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:63:78:79:15:1d:33:b9:ff:8a:3b:fa:37:c4:7c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1380e88c64a3003478ddf54142d2ac56163e93
Validity
Not Before: Dec 21 11:13:31 2022 GMT
Not After : Dec 22 11:13:31 2022 GMT
Subject: CN=6608246cde275e9777668dd8f9b68e1dbfc84320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b4:de:23:a1:ac:c7:a4:fb:e9:8b:3c:99:97:
1e:d2:d7:b4:b4:47:e9:60:27:02:63:00:b8:d9:48:
6f:dd:dd:e4:74:f0:8d:6c:39:7a:e9:2d:37:c4:7c:
7e:11:8c:36:b8:c2:ad:34:52:05:a4:d5:b6:d9:ef:
5f:91:a7:5a:9d:8c:e4:7e:01:f7:84:69:6f:a6:a1:
a1:f8:aa:97:25:3e:85:53:8d:5a:11:94:35:d0:0f:
6a:e9:90:c3:8c:db:c5:30:57:ef:0b:f1:d8:70:0b:
0a:63:5a:bd:06:2b:a7:02:cd:cb:5d:a2:e5:de:26:
0a:91:f9:4e:d5:1a:7d:16:7e:15:95:97:c6:b6:87:
f4:11:43:36:45:f2:43:9e:d1:1c:f3:8a:30:e2:8f:
fe:6e:35:c7:4b:d4:0e:61:0c:f0:26:21:b2:87:b3:
06:41:fa:8d:a7:65:bb:07:21:16:ed:5a:45:9d:74:
54:4b:76:54:35:67:a5:ab:5f:2a:4f:ba:b7:b2:01:
32:67:36:de:50:93:bf:7f:93:0b:cd:95:37:12:15:
65:9e:6b:69:00:a6:1a:26:89:6e:e2:30:af:dc:6e:
48:88:a3:3e:5d:95:4c:1c:fd:71:c9:f7:70:0c:1d:
4b:94:a8:c8:81:12:2e:b4:3f:9a:e7:56:09:40:47:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:08:24:6C:DE:27:5E:97:77:66:8D:D8:F9:B6:8E:1D:BF:C8:43:20
X509v3 Authority Key Identifier:
keyid:4D:13:80:E8:8C:64:A3:00:34:78:DD:F5:41:42:D2:AC:56:16:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TROA6IxkowA0eN31QULSrFYWPpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/TROA6IxkowA0eN31QULSrFYWPpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/TROA6IxkowA0eN31QULSrFYWPpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:62:28:22:03:e5:ba:1f:ca:fd:37:28:bc:10:4d:13:e5:8b:
da:9a:f9:42:1c:8a:c3:22:65:3e:7d:f5:5c:03:68:64:87:8c:
d8:11:32:2a:e4:f8:d9:41:67:66:49:f5:05:b3:a8:53:b0:84:
68:96:8b:8e:8d:b0:c5:f3:1e:e8:85:a3:e5:db:83:17:ae:06:
23:86:f3:52:29:4e:78:3c:34:d8:8c:a0:78:14:d6:24:31:e1:
c8:5b:8d:31:1a:18:c6:7f:bd:d0:fc:09:b4:0f:51:2a:84:05:
3b:28:3b:d1:06:a9:e1:85:c3:2d:ac:3c:b1:5a:57:90:95:63:
c9:65:85:13:28:6c:ac:91:31:81:54:cb:f3:56:36:16:3d:ae:
c9:6f:13:da:ff:03:79:51:e4:4a:da:b8:0a:aa:50:09:80:14:
0d:73:3f:bc:b5:94:66:ec:63:df:ae:5b:95:1d:3d:a1:9a:30:
14:ae:7c:5a:a3:e5:c0:17:35:df:28:98:f5:dc:63:83:c4:19:
88:50:b4:73:6f:44:7e:75:3e:46:57:cd:d2:f7:63:b2:88:a8:
91:85:ef:f8:65:bd:23:c7:e6:a4:0e:44:d9:60:2b:a7:ab:cd:
c9:71:2b:11:fe:f0:3a:97:b7:2e:d8:c2:2f:bf:4f:fe:6b:e5:
11:c1:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:39 2025 by rpki-client