![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8d0e2f-da77-410e-8c60-5d7a02bd94d2/1/TEuEhaXhwLSaqWPWy3H4AnhiFpw.mft
File: TEuEhaXhwLSaqWPWy3H4AnhiFpw.mft (raw, json)
Hash identifier: nPjX8y0I2oQ1PnbfIowIxkmaWKuYaCN2DPXiPbZLrA0=
Subject key identifier: 81:68:F8:E6:56:F9:83:8D:73:94:B2:0D:50:25:A2:BA:42:4E:F8:F9
Authority key identifier: 4C:4B:84:85:A5:E1:C0:B4:9A:A9:63:D6:CB:71:F8:02:78:62:16:9C
Certificate issuer: /CN=4c4b8485a5e1c0b49aa963d6cb71f8027862169c
Certificate serial: 0194165DB5B0E5672428B868E6A661D62EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEuEhaXhwLSaqWPWy3H4AnhiFpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/8d0e2f-da77-410e-8c60-5d7a02bd94d2/1/TEuEhaXhwLSaqWPWy3H4AnhiFpw.mft
Manifest number: 0109
Signing time: Mon 30 Dec 2024 07:00:27 +0000
Manifest this update: Mon 30 Dec 2024 07:00:27 +0000
Manifest next update: Tue 31 Dec 2024 07:00:27 +0000
Files and hashes: 1: 1-wpX6_rAfz770C57GGO4ATfKlzQ.roa (hash: Q6xMDGkjqo8Y4Qs3v6uPo8WvZsCmCnRE/InL/D6aK0A=)
2: TEuEhaXhwLSaqWPWy3H4AnhiFpw.crl (hash: Glr5VE1CerHNS9OSZc/+BxOutwklpiX5mA0QaSXNEJw=)
3: xF9fRUQpjdJYcusSEm06LKPR4qk.roa (hash: T2FHLMdktZwgRUukNqz9NSpaLwod/0G7CqgFww1NgLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:16:5d:b5:b0:e5:67:24:28:b8:68:e6:a6:61:d6:2e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4b8485a5e1c0b49aa963d6cb71f8027862169c
Validity
Not Before: Dec 30 07:00:27 2024 GMT
Not After : Dec 31 07:00:27 2024 GMT
Subject: CN=8168f8e656f9838d7394b20d5025a2ba424ef8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:bf:d9:37:ae:34:13:ef:b5:70:6e:2c:c8:
b3:60:2e:b3:93:1d:3d:3c:58:60:c6:22:b3:94:c7:
46:ad:47:0f:d0:37:e7:10:f2:25:00:03:15:b8:1e:
94:23:be:45:69:72:3d:46:b9:f1:a3:95:61:dc:19:
9b:be:e3:a5:61:82:7a:b7:ce:7c:be:5e:52:4c:c0:
bd:09:a0:61:a5:41:9e:78:d1:2e:7e:e1:7c:3f:45:
08:ee:58:c5:55:43:10:68:00:b3:2d:b9:f3:34:5c:
d2:f6:4d:3b:5d:d2:08:8c:df:4d:a6:09:7f:0a:98:
fb:dd:b2:29:86:ac:5b:8a:8f:8d:55:fe:51:73:90:
c4:87:ec:b5:17:d9:58:13:52:91:fb:75:01:46:75:
a4:c6:ec:36:f7:ab:66:3a:cc:ac:9b:62:bb:09:dd:
35:ba:61:dd:9c:ec:f8:0c:9c:61:6e:39:3a:90:c8:
0e:d3:b5:47:fa:db:35:c7:db:26:e2:91:61:3e:7f:
a2:34:58:bf:6d:db:5f:b2:5f:bc:83:4b:50:28:33:
eb:37:f6:01:f1:79:5a:cc:89:91:a8:d7:c1:b5:6c:
26:91:3b:1f:38:15:e0:53:4a:9d:6a:7c:19:3b:0f:
b5:db:68:7f:f1:e6:67:92:80:b8:dc:f4:4c:47:5f:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:68:F8:E6:56:F9:83:8D:73:94:B2:0D:50:25:A2:BA:42:4E:F8:F9
X509v3 Authority Key Identifier:
keyid:4C:4B:84:85:A5:E1:C0:B4:9A:A9:63:D6:CB:71:F8:02:78:62:16:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEuEhaXhwLSaqWPWy3H4AnhiFpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8d0e2f-da77-410e-8c60-5d7a02bd94d2/1/TEuEhaXhwLSaqWPWy3H4AnhiFpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8d0e2f-da77-410e-8c60-5d7a02bd94d2/1/TEuEhaXhwLSaqWPWy3H4AnhiFpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:7e:8a:e6:8f:fb:70:db:f6:6b:d5:47:1a:1b:2c:da:9f:45:
39:43:7b:0b:8f:ca:ed:d1:8f:5c:72:7e:86:d9:2f:1d:f1:76:
9e:ce:64:67:82:24:c7:2b:27:4d:e4:62:f3:3c:6d:ad:3d:4b:
2b:fa:b4:67:30:ea:e3:36:38:57:ba:23:08:52:93:8e:9e:21:
37:91:13:d2:08:15:70:81:7b:ee:ee:39:13:9a:0c:a7:2e:6c:
6a:d4:7c:aa:97:25:3b:f9:9c:2d:e8:e0:9e:19:e6:10:ac:28:
af:f5:39:a5:69:42:57:05:ea:c4:c6:36:c9:93:a2:f4:52:47:
22:c5:db:dc:fc:13:13:c5:9c:50:42:e4:f5:c7:6e:d3:f5:98:
67:8c:b3:8a:67:a3:52:21:c8:be:c2:3e:04:25:86:48:bc:29:
9f:ed:66:b0:d8:f2:a2:a8:db:8e:30:f2:19:8d:be:36:2f:0d:
69:29:ab:e2:5c:e5:91:85:7b:74:ba:f1:f5:17:ff:c3:91:37:
c2:21:62:e1:97:90:2e:74:53:37:d4:2e:1e:17:a1:83:6a:a6:
1b:8e:a9:c9:38:02:6f:ae:64:2e:5e:34:12:47:70:6e:71:70:
3f:03:43:d1:fe:cf:95:cb:91:4d:31:46:ac:86:9f:e9:5b:61:
d1:30:80:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:56 2025 by rpki-client