![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.mft
File: vMNrOgpVvrUp5AcyhYiWPYZ4bL8.mft (raw, json)
Hash identifier: huruel/P9822ceMgsH4Ii9OXfb5MTYuAJVBBQ4300PM=
Subject key identifier: 7A:34:B3:1B:53:C2:B7:0E:57:D3:F1:6B:6C:E6:7D:BD:59:CE:9A:44
Authority key identifier: BC:C3:6B:3A:0A:55:BE:B5:29:E4:07:32:85:88:96:3D:86:78:6C:BF
Certificate issuer: /CN=bcc36b3a0a55beb529e407328588963d86786cbf
Certificate serial: 018C1E2C20324E269E2C60378ACDFB5BD2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.mft
Manifest number: 0FB3
Signing time: Thu 30 Nov 2023 03:00:57 +0000
Manifest this update: Thu 30 Nov 2023 03:00:57 +0000
Manifest next update: Fri 01 Dec 2023 03:00:57 +0000
Files and hashes: 1: NK8dWYEqf4mfaRsSLoAhw_K_VMQ.roa (hash: PpTsFXyPAx2/0cDgsbtqOTvYmg7zHWuiEC3dAJdVypE=)
2: vMNrOgpVvrUp5AcyhYiWPYZ4bL8.crl (hash: q+nK/erak9ZJ2LpgQP5JpQKvaGW6mIrT2oav/vF5p5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1e:2c:20:32:4e:26:9e:2c:60:37:8a:cd:fb:5b:d2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc36b3a0a55beb529e407328588963d86786cbf
Validity
Not Before: Nov 30 03:00:57 2023 GMT
Not After : Dec 1 03:00:57 2023 GMT
Subject: CN=7a34b31b53c2b70e57d3f16b6ce67dbd59ce9a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:ea:2d:5a:4c:3c:cb:e6:45:f9:68:37:d6:
42:42:d4:43:28:77:84:54:65:b0:80:7d:2d:fb:82:
1f:71:78:97:41:59:eb:d8:13:d3:8a:a4:0d:59:ff:
e2:86:91:ac:21:6f:ae:bf:7f:97:0c:86:53:fe:83:
af:9f:3f:0e:0a:7f:c9:fc:5c:6d:3e:dd:0b:d6:fd:
21:30:64:8e:77:cc:4f:4b:f1:6a:33:05:3f:b9:db:
c6:1c:ad:52:cb:72:c9:52:31:3e:17:8e:72:a3:f7:
66:31:8f:e3:8d:9f:5f:68:eb:76:64:a0:ff:4f:45:
97:af:5c:1b:31:f4:11:62:72:fd:fb:a5:78:ff:37:
0e:2e:a4:a2:51:7e:94:27:29:de:12:84:6d:5d:37:
54:02:2a:bc:c7:a6:6d:8d:97:cb:4c:84:c7:5f:81:
f3:60:55:5c:36:b0:b7:8d:fc:b9:32:77:2a:a0:0f:
3f:a6:b8:d7:74:38:5c:e8:95:24:b0:64:83:54:e5:
61:a7:21:48:a9:c4:ec:d7:85:1b:f2:7a:18:e5:4d:
e2:a3:38:21:05:36:92:19:f6:12:1b:82:62:15:db:
51:6e:d4:03:2c:d7:82:3c:c0:24:12:57:2e:80:ff:
80:89:ec:df:90:ce:c5:98:7d:7d:28:ef:05:bf:fe:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:34:B3:1B:53:C2:B7:0E:57:D3:F1:6B:6C:E6:7D:BD:59:CE:9A:44
X509v3 Authority Key Identifier:
keyid:BC:C3:6B:3A:0A:55:BE:B5:29:E4:07:32:85:88:96:3D:86:78:6C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b0:80:a3:f0:a0:29:38:70:e8:93:36:bc:bc:7e:26:fd:06:
4f:8f:e6:0e:32:ea:42:a5:c1:1b:d2:7a:7a:2a:57:5c:6f:bf:
29:e8:7b:f8:35:e5:f9:d5:bc:16:4b:21:51:37:20:48:9d:a6:
38:71:a2:1e:72:f9:6d:7b:55:7a:b4:1f:5d:47:17:ec:d6:aa:
a0:aa:d6:d7:c3:6a:d7:44:c8:57:d4:73:4a:2b:e3:6f:f6:8f:
b7:83:5e:7d:38:79:8b:1a:a1:f4:b3:89:26:4d:01:02:8a:d7:
72:35:e0:4c:d7:d3:d1:16:76:e9:dc:b9:bb:84:2b:8c:81:c8:
1f:c5:37:4d:8d:b9:78:ae:71:ad:37:af:f7:cf:50:65:fe:a6:
4c:ce:41:fd:87:7c:47:06:98:67:d7:4b:80:69:74:d2:1a:3b:
7f:a8:d1:b4:66:ea:50:d7:53:3f:e4:4f:e4:bc:3d:11:cd:c3:
d7:4f:03:75:ae:f8:35:65:c1:91:61:15:1d:dc:e6:ed:83:40:
d6:08:e8:23:57:7e:7d:ca:ca:44:46:17:87:11:4c:e5:37:9f:
a6:91:0a:ac:19:49:cd:6b:b2:9a:fe:72:ba:d8:9b:c9:72:95:
86:31:b7:3a:a4:c2:6e:a5:c3:fb:6a:93:be:42:f9:07:9f:ee:
64:ba:84:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:28 2025 by rpki-client