![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/U-3eLO8vtcq06h6neUAdKVcI2nc.mft
File: U-3eLO8vtcq06h6neUAdKVcI2nc.mft (raw, json)
Hash identifier: 2yxeukgW3FU9UeC81FKHP+LwliWERcV/cuxJhLAeeiU=
Subject key identifier: 64:FB:B4:AA:C8:98:0F:0F:90:32:AB:57:FB:B8:DD:C4:A2:00:8C:9D
Authority key identifier: 53:ED:DE:2C:EF:2F:B5:CA:B4:EA:1E:A7:79:40:1D:29:57:08:DA:77
Certificate issuer: /CN=53edde2cef2fb5cab4ea1ea779401d295708da77
Certificate serial: 0187092A8853901AFF8281E00B395F863476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-3eLO8vtcq06h6neUAdKVcI2nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/U-3eLO8vtcq06h6neUAdKVcI2nc.mft
Manifest number: 06C8
Signing time: Wed 22 Mar 2023 11:53:14 +0000
Manifest this update: Wed 22 Mar 2023 11:53:14 +0000
Manifest next update: Thu 23 Mar 2023 11:53:14 +0000
Files and hashes: 1: JdBJ5pG0tmV_A-4d43GGP-JU1dw.roa (hash: VA9k5bCpipjsehTYXIz8AeEJuoPSTYjhFzMo4jQETNY=)
2: U-3eLO8vtcq06h6neUAdKVcI2nc.crl (hash: vdio92oz22raK7SFyE5o+FsFU4qiwye7KOfBIZrxOBA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:2a:88:53:90:1a:ff:82:81:e0:0b:39:5f:86:34:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53edde2cef2fb5cab4ea1ea779401d295708da77
Validity
Not Before: Mar 22 11:53:14 2023 GMT
Not After : Mar 23 11:53:14 2023 GMT
Subject: CN=64fbb4aac8980f0f9032ab57fbb8ddc4a2008c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8e:78:45:0a:cf:ee:f7:61:14:f8:f9:c6:88:
b4:17:8e:24:7f:8f:04:f1:2e:5c:ad:a1:be:78:cc:
c6:16:5a:20:91:97:f6:a5:61:96:de:e4:f6:60:f0:
83:21:33:8e:31:45:2f:17:0b:73:70:dc:c2:48:fd:
aa:94:42:e0:a7:a6:2e:b4:2d:db:c1:55:78:10:82:
27:1f:f5:84:06:b5:3c:10:f1:90:f0:98:d8:4c:4f:
c7:ac:ce:62:0c:5b:3c:5f:80:38:ca:d2:37:64:77:
c7:b6:fe:d2:67:60:59:a3:45:c6:d0:05:78:ea:4f:
3b:c8:26:81:7b:17:11:bc:48:06:2f:5d:72:f3:36:
ee:b3:67:ed:63:55:83:c9:b2:20:4b:fd:50:60:58:
d0:c8:8c:3c:73:20:9c:59:ed:c9:16:a6:86:bd:d4:
b9:d2:54:a3:69:b5:97:2f:e6:c6:14:01:bd:84:f6:
81:6f:81:9c:79:94:e9:e9:52:93:07:5f:2d:f7:33:
a3:f6:19:23:58:dc:4b:72:80:68:58:a7:a9:d5:bc:
2a:92:ef:96:03:0f:54:2c:97:94:2e:89:f2:a3:fc:
7d:e5:77:86:43:d1:f5:b8:85:f2:6f:1e:33:d4:d7:
44:f8:7b:66:30:d7:ff:c0:af:1a:06:36:ab:e7:df:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FB:B4:AA:C8:98:0F:0F:90:32:AB:57:FB:B8:DD:C4:A2:00:8C:9D
X509v3 Authority Key Identifier:
keyid:53:ED:DE:2C:EF:2F:B5:CA:B4:EA:1E:A7:79:40:1D:29:57:08:DA:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-3eLO8vtcq06h6neUAdKVcI2nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/U-3eLO8vtcq06h6neUAdKVcI2nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/U-3eLO8vtcq06h6neUAdKVcI2nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d6:12:1d:08:b5:88:34:0d:1e:d5:dd:6a:49:41:9a:9f:39:
7f:4e:16:3c:ee:1a:e2:a8:bd:bb:3c:ff:45:b1:ab:a4:cd:63:
be:3e:7c:e2:2f:ac:ac:06:93:9f:31:16:bf:48:53:b7:dc:c6:
63:70:e9:97:dc:d0:d4:8e:49:fa:8c:56:f7:a3:94:bb:4e:e6:
72:cd:75:6a:db:1f:58:e3:09:d4:68:67:2e:6b:dc:a9:2c:c1:
a0:95:21:8b:b7:b6:5d:d3:5c:78:31:57:cf:17:55:2e:f4:01:
dc:95:d8:41:d5:4a:e0:06:02:de:fe:ea:95:1f:85:cd:7c:65:
0a:40:71:c9:1b:a3:88:61:c5:82:07:d5:4f:52:51:83:39:86:
92:bf:c6:5c:c0:95:b0:06:0f:97:60:b9:b6:25:24:55:25:cf:
b9:a7:c4:21:4e:24:53:0c:e0:a4:c7:4c:ec:0d:3c:2c:48:dd:
b0:60:ed:7e:f8:cc:d7:5b:a8:99:f6:92:45:f0:2f:27:3e:3c:
2e:0d:13:b3:5f:4c:43:de:3d:51:a0:0e:03:bc:64:d3:55:51:
d8:36:af:52:1d:e5:b0:9d:06:d2:29:97:1c:c3:83:6b:9a:8f:
66:b1:48:8e:f9:f6:95:18:79:58:0d:dc:c3:25:12:c4:f1:92:
1a:a7:d1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:59 2025 by rpki-client