![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft
File: Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft (raw, json)
Hash identifier: lp5uD+ExhJ9v4+ZgEdjogukn+11Bb7o58SbtKAI+hBA=
Subject key identifier: 25:17:4B:7D:A5:37:1F:1C:E2:28:0E:DD:3C:C6:44:07:34:5E:95:C6
Authority key identifier: 1D:DF:59:51:C9:AE:79:97:6D:97:E1:D2:8E:46:6A:61:51:19:89:8B
Certificate issuer: /CN=1ddf5951c9ae79976d97e1d28e466a615119898b
Certificate serial: 01910B75B329F94B1FE32DB45CDA064A1AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft
Manifest number: 0C8B
Signing time: Thu 01 Aug 2024 01:02:28 +0000
Manifest this update: Thu 01 Aug 2024 01:02:28 +0000
Manifest next update: Fri 02 Aug 2024 01:02:28 +0000
Files and hashes: 1: Hd9ZUcmueZdtl-HSjkZqYVEZiYs.crl (hash: iW+xbl01hgB0bctjfnDP50qe+pDmJDTxDdPfFX41XHA=)
2: YMQ02KtoHddOBd8P0_L911zzXZo.roa (hash: KLEMa+EsIIYumj5REVXzu9c2VVWhgQLOfarzx4uuFQ8=)
3: dq0H0ptfWVeMI5pzuDVutGRIMbA.roa (hash: 0F5Hp24nVBW+EaqkAlTh8XGSno4s2M0R/Zi5bowUmQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0b:75:b3:29:f9:4b:1f:e3:2d:b4:5c:da:06:4a:1a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddf5951c9ae79976d97e1d28e466a615119898b
Validity
Not Before: Aug 1 01:02:28 2024 GMT
Not After : Aug 2 01:02:28 2024 GMT
Subject: CN=25174b7da5371f1ce2280edd3cc64407345e95c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:e1:3e:c8:32:89:f3:ea:5b:eb:9a:4b:63:
51:80:9b:1c:22:ee:b7:45:fd:57:30:8c:21:d0:de:
41:d9:57:d3:08:06:2f:f4:98:df:57:cf:aa:17:b9:
1b:c8:49:9c:c0:dd:ac:ed:22:9f:6f:ee:a3:99:bb:
10:4e:43:1a:6b:1e:42:91:67:1f:9f:dd:db:79:7b:
0e:c6:fe:65:09:18:2d:4b:1d:31:6d:da:f6:48:f3:
6e:a4:92:fa:50:87:f9:62:56:0f:28:77:c4:c2:fa:
5d:b8:04:34:0e:65:7d:fd:59:a7:f0:77:be:e6:e5:
d4:64:ca:d7:3a:3a:55:0a:ea:96:f7:57:6a:16:f6:
62:13:96:dc:aa:48:bd:67:6e:ad:a3:85:05:22:e7:
fd:9a:95:b0:26:70:dd:95:96:20:a8:36:d5:d6:8f:
c4:c2:3a:75:2a:bd:4a:c6:09:1a:7c:58:55:d1:c1:
1b:02:8e:0d:80:02:b1:90:36:85:02:60:cc:ab:95:
ba:d5:79:e9:0b:a4:1f:3f:f1:ce:0e:6e:47:a6:b1:
34:01:76:b8:4b:8b:38:c9:ef:17:dd:94:07:b8:cf:
4f:f0:8e:4f:0d:4e:b5:e9:a1:9a:36:92:07:4e:78:
02:3d:6f:23:42:77:d9:59:ac:c1:a5:0e:86:dd:66:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:17:4B:7D:A5:37:1F:1C:E2:28:0E:DD:3C:C6:44:07:34:5E:95:C6
X509v3 Authority Key Identifier:
keyid:1D:DF:59:51:C9:AE:79:97:6D:97:E1:D2:8E:46:6A:61:51:19:89:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a9:ca:09:5c:c7:19:c8:ff:c4:6f:54:ca:56:ca:48:b6:57:
02:88:e2:9b:c7:f5:d6:60:d1:10:43:cc:87:23:ea:81:33:75:
ac:9d:10:05:5b:f6:88:c7:fd:c5:00:59:36:b8:c3:33:c1:2e:
d7:84:10:a0:a4:5f:99:c4:2f:6b:85:70:6a:7a:86:38:9b:bd:
a7:47:84:57:90:21:fe:df:0c:c9:dc:d7:e9:75:f2:62:50:9f:
bb:2d:56:d4:5c:8b:29:0e:b8:06:d6:eb:db:af:d4:a6:53:7e:
41:6e:19:b0:a7:39:db:bc:a6:bf:a2:10:d8:65:50:a1:64:96:
c7:f3:d8:f2:66:27:b6:4a:7a:c8:df:0d:51:65:01:de:9b:23:
e6:f2:50:c0:2a:c4:6a:2f:8d:ab:55:78:3a:99:14:8d:33:cd:
62:ef:c7:11:85:b5:80:6e:b6:b3:fb:49:ba:d9:fd:e3:2c:92:
a0:5d:e2:dd:42:6a:ea:66:fe:fc:e1:18:46:e7:6e:e7:a4:12:
70:84:59:a4:76:2b:31:05:ff:00:fe:41:93:e5:cb:e2:44:54:
c0:9e:43:b5:53:ae:32:1a:5c:9d:38:04:5e:b7:ac:b3:d7:ad:
b2:d3:a0:84:80:41:47:81:9b:0f:d9:d1:e5:35:84:b0:09:79:
24:31:6b:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZELdbMp+Usf4y20XNoGShrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGY1OTUxYzlhZTc5OTc2ZDk3ZTFkMjhlNDY2YTYxNTEx
OTg5OGIwHhcNMjQwODAxMDEwMjI4WhcNMjQwODAyMDEwMjI4WjAzMTEwLwYDVQQD
EygyNTE3NGI3ZGE1MzcxZjFjZTIyODBlZGQzY2M2NDQwNzM0NWU5NWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbLhPsgyifPqW+uaS2NRgJscIu63
Rf1XMIwh0N5B2VfTCAYv9JjfV8+qF7kbyEmcwN2s7SKfb+6jmbsQTkMaax5CkWcf
n93beXsOxv5lCRgtSx0xbdr2SPNupJL6UIf5YlYPKHfEwvpduAQ0DmV9/Vmn8He+
5uXUZMrXOjpVCuqW91dqFvZiE5bcqki9Z26to4UFIuf9mpWwJnDdlZYgqDbV1o/E
wjp1Kr1KxgkafFhV0cEbAo4NgAKxkDaFAmDMq5W61XnpC6QfP/HODm5HprE0AXa4
S4s4ye8X3ZQHuM9P8I5PDU616aGaNpIHTngCPW8jQnfZWazBpQ6G3WZI9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUXS32lNx8c4igO3TzGRAc0XpXGMB8GA1UdIwQY
MBaAFB3fWVHJrnmXbZfh0o5GamFRGYmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGQ5WlVjbXVlWmR0bC1IU2prWnFZVkVaaVlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8yZGY3ODYtNTJkNS00MzhiLThiNTYt
MGU5NmIxZmZiMjQ3LzEvSGQ5WlVjbXVlWmR0bC1IU2prWnFZVkVaaVlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8yZGY3ODYtNTJkNS00MzhiLThiNTYtMGU5NmIxZmZiMjQ3
LzEvSGQ5WlVjbXVlWmR0bC1IU2prWnFZVkVaaVlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqnKCVzH
Gcj/xG9UylbKSLZXAojim8f11mDREEPMhyPqgTN1rJ0QBVv2iMf9xQBZNrjDM8Eu
14QQoKRfmcQva4VwanqGOJu9p0eEV5Ah/t8MydzX6XXyYlCfuy1W1FyLKQ64Btbr
26/UplN+QW4ZsKc527ymv6IQ2GVQoWSWx/PY8mYntkp6yN8NUWUB3psj5vJQwCrE
ai+Nq1V4OpkUjTPNYu/HEYW1gG62s/tJutn94yySoF3i3UJq6mb+/OEYRudu56QS
cIRZpHYrMQX/AP5Bk+XL4kRUwJ5DtVOuMhpcnTgEXress9etstOghIBBR4GbD9nR
5TWEsAl5JDFrfA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:44 2025 by rpki-client