![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/7BXxO3xu9GOa8P4P4XBFlDw08q8.mft
File: 7BXxO3xu9GOa8P4P4XBFlDw08q8.mft (raw, json)
Hash identifier: lJkaN77l8qTKzNPHtY4G7b6eNFnBoPxRo464JpilnKI=
Subject key identifier: E2:64:76:84:2C:87:E9:C9:23:78:39:E2:5D:D2:1C:7C:8A:78:27:50
Authority key identifier: EC:15:F1:3B:7C:6E:F4:63:9A:F0:FE:0F:E1:70:45:94:3C:34:F2:AF
Certificate issuer: /CN=ec15f13b7c6ef4639af0fe0fe17045943c34f2af
Certificate serial: 018FDB9D0AB6BB706CED901D96C678F469FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BXxO3xu9GOa8P4P4XBFlDw08q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/7BXxO3xu9GOa8P4P4XBFlDw08q8.mft
Manifest number: 11A2
Signing time: Mon 03 Jun 2024 01:00:53 +0000
Manifest this update: Mon 03 Jun 2024 01:00:53 +0000
Manifest next update: Tue 04 Jun 2024 01:00:53 +0000
Files and hashes: 1: 7BXxO3xu9GOa8P4P4XBFlDw08q8.crl (hash: Qifim/EatMjmVpuZpuakD3d8lrVny07ncl+vKU6WSQI=)
2: nAoZQzKFf1HXlHI4vNttDtXAfPk.roa (hash: EVKa6zrpCXHzAlcOYswv7cpoGT6odfl5wVQ/FV9jOKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:db:9d:0a:b6:bb:70:6c:ed:90:1d:96:c6:78:f4:69:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec15f13b7c6ef4639af0fe0fe17045943c34f2af
Validity
Not Before: Jun 3 01:00:53 2024 GMT
Not After : Jun 4 01:00:53 2024 GMT
Subject: CN=e26476842c87e9c9237839e25dd21c7c8a782750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:9b:83:a6:22:92:a0:be:2b:6d:f4:4d:ce:
fc:29:f3:1a:47:3f:91:12:3a:f4:41:1b:51:85:b0:
ef:2a:7d:e7:53:11:7f:11:cb:a2:16:5b:5b:f7:8f:
63:48:2f:9c:1b:64:da:0c:ca:b8:a9:07:e9:ea:8f:
63:8f:ab:e7:22:8b:21:6d:60:ac:87:e3:af:92:42:
50:1c:ec:76:18:31:72:a9:91:c6:a0:0d:1c:20:a8:
59:ac:23:c2:dd:b8:f2:8b:79:fc:c7:8a:51:1e:4e:
a8:36:8e:3e:df:c8:ca:ff:0e:cd:fa:2a:7f:8f:e1:
48:38:7c:2f:96:82:b8:49:88:52:af:37:51:66:d1:
2d:b3:2c:d8:05:13:8f:8a:52:68:68:ff:17:1f:04:
c6:fd:d4:92:b3:f0:40:44:33:b5:a7:4e:de:81:d6:
c9:75:65:02:02:41:5f:a2:bb:d9:67:e0:9b:6e:5d:
58:1e:2c:19:47:59:a8:d9:30:d3:15:98:09:a9:e2:
93:d2:3c:80:f4:f1:fb:5e:97:01:eb:e8:98:c3:7a:
75:ba:8d:8c:5d:85:16:f0:d9:9b:81:4a:b2:64:2a:
f3:34:ec:dc:fa:d4:33:91:73:cc:7d:64:1d:e2:0a:
4d:f7:d2:d7:3b:f8:7b:17:cb:71:a8:0e:59:48:cc:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:64:76:84:2C:87:E9:C9:23:78:39:E2:5D:D2:1C:7C:8A:78:27:50
X509v3 Authority Key Identifier:
keyid:EC:15:F1:3B:7C:6E:F4:63:9A:F0:FE:0F:E1:70:45:94:3C:34:F2:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BXxO3xu9GOa8P4P4XBFlDw08q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/7BXxO3xu9GOa8P4P4XBFlDw08q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/7BXxO3xu9GOa8P4P4XBFlDw08q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:96:a7:d6:ea:47:b9:7c:7e:6e:f7:32:98:77:bf:8a:2a:e5:
b1:72:ce:3e:a6:ee:db:0b:65:4a:c0:72:51:72:34:84:3b:d0:
61:00:f4:56:89:28:bb:ec:88:1d:67:b8:9a:cd:8f:fd:12:ce:
4e:2a:c7:c2:3d:95:ba:8d:26:0c:45:1c:f4:a9:96:b6:a7:a3:
be:23:f2:07:db:92:53:c0:8d:a5:b7:10:de:bf:a1:36:c2:c5:
cf:45:40:09:df:72:b3:de:f3:78:78:31:c0:99:33:a3:ab:d8:
77:5b:13:96:88:30:5f:13:ee:93:b3:26:7b:29:42:1f:d3:8b:
e2:4e:62:d3:0a:7b:79:2c:cc:a7:55:07:a4:0e:38:cb:5f:85:
81:72:98:d5:88:18:4e:57:11:c6:5c:b1:09:7d:5f:01:bb:8c:
fe:fa:de:47:63:fa:13:23:d8:2f:03:f7:34:03:3a:fd:84:fd:
ff:8e:08:7e:ba:f9:a4:5e:9a:ea:dc:2b:9c:bf:bf:07:6f:93:
fb:c4:cf:81:02:af:95:c8:65:3a:15:49:e6:a0:ba:a6:0e:bc:
36:69:57:97:d4:e9:41:10:14:ae:0b:f5:e4:0d:b3:16:3d:2f:
f9:48:c1:e9:16:79:e5:0b:77:1b:1e:86:c8:ef:e7:31:3c:da:
04:9d:ff:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:50 2025 by rpki-client