![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/RxqrCn7S035Uc1AWFDR6hYDg7Vs.mft
File: RxqrCn7S035Uc1AWFDR6hYDg7Vs.mft (raw, json)
Hash identifier: 89JoAOaBdQkKHHZMrOn4n1wLh7C+KRWCVSQkhcptPNU=
Subject key identifier: E0:30:01:35:E0:A2:60:43:B6:99:85:F5:18:16:EA:3D:FE:82:F6:6E
Authority key identifier: 47:1A:AB:0A:7E:D2:D3:7E:54:73:50:16:14:34:7A:85:80:E0:ED:5B
Certificate issuer: /CN=471aab0a7ed2d37e5473501614347a8580e0ed5b
Certificate serial: 018BDC4C1933104170051EE35568D1974C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxqrCn7S035Uc1AWFDR6hYDg7Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/RxqrCn7S035Uc1AWFDR6hYDg7Vs.mft
Manifest number: 0864
Signing time: Fri 17 Nov 2023 08:00:56 +0000
Manifest this update: Fri 17 Nov 2023 08:00:56 +0000
Manifest next update: Sat 18 Nov 2023 08:00:56 +0000
Files and hashes: 1: QJBUZ7pm1FLozrX7eH1BXSGGPV4.roa (hash: aytBc/bONwWWJHoBEUDmB46eZhsb/j2/G1llql5+PQg=)
2: RxqrCn7S035Uc1AWFDR6hYDg7Vs.crl (hash: ySLx0caNZX/XbyGW0W34qMRWIWcWbV1DMM2DqvAdWJc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:4c:19:33:10:41:70:05:1e:e3:55:68:d1:97:4c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=471aab0a7ed2d37e5473501614347a8580e0ed5b
Validity
Not Before: Nov 17 08:00:56 2023 GMT
Not After : Nov 18 08:00:56 2023 GMT
Subject: CN=e0300135e0a26043b69985f51816ea3dfe82f66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6c:f0:ad:b7:13:8f:1e:d1:ac:f2:dd:26:ba:
e8:35:99:1d:8e:ff:66:f8:7e:91:fe:88:8e:59:c4:
70:44:67:2a:1c:21:c0:1a:6e:c9:7a:cd:af:fe:24:
25:bb:f5:bc:9a:26:e8:9c:3a:c8:f4:36:8d:f0:91:
56:1b:92:10:1e:a5:68:66:e8:5a:53:be:cb:37:d1:
db:8b:e3:32:3a:f7:a4:59:00:04:4b:8a:aa:f2:83:
60:aa:ae:24:f4:f9:8b:c2:45:5a:42:ca:a9:2e:d6:
e1:7f:0c:03:7e:d4:25:e5:e5:74:4b:aa:30:a5:e9:
99:c9:9b:28:62:06:e4:00:3f:e2:02:e9:32:06:83:
43:89:b3:21:a2:a3:4b:78:de:4f:80:e1:a3:5c:b4:
0e:c4:b9:2d:96:56:a9:8a:2f:c1:e9:7b:c7:09:f6:
0f:41:b9:00:94:62:ac:7a:ae:e1:8a:38:be:cc:42:
c8:5c:8b:d9:65:2b:2b:db:25:47:17:17:b8:cb:b1:
2f:a1:e0:1c:c4:8f:67:fa:95:d5:9e:76:7e:d3:ae:
19:75:64:8b:59:52:1b:1a:a7:f5:bb:0c:24:df:07:
4b:cd:ba:67:34:3a:e7:0f:59:99:4c:71:00:78:f2:
73:3c:25:ed:94:82:8b:6d:6e:9c:91:b7:6a:8b:dd:
e6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:30:01:35:E0:A2:60:43:B6:99:85:F5:18:16:EA:3D:FE:82:F6:6E
X509v3 Authority Key Identifier:
keyid:47:1A:AB:0A:7E:D2:D3:7E:54:73:50:16:14:34:7A:85:80:E0:ED:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxqrCn7S035Uc1AWFDR6hYDg7Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/RxqrCn7S035Uc1AWFDR6hYDg7Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/RxqrCn7S035Uc1AWFDR6hYDg7Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7e:b5:b0:92:57:e9:38:6f:64:75:cf:cd:13:54:f8:ac:96:
e9:f2:b6:6d:46:b5:11:d2:0d:02:fc:5a:3e:f3:21:d8:de:e1:
76:45:fc:f4:fb:cf:c1:a8:8f:6d:5a:e1:38:1d:37:68:c5:b9:
01:60:83:24:52:03:76:b2:a0:e6:25:13:a1:99:5c:11:ab:2a:
cb:d5:1e:42:a6:44:cf:1b:10:04:7c:e9:39:9c:45:1b:ce:1d:
c6:69:54:5c:6a:c0:4d:61:9b:78:f6:e0:8e:d9:1e:36:ce:77:
ba:7f:92:4c:47:d5:c6:ea:ce:51:89:e2:09:e9:d3:6d:45:ce:
46:98:22:14:a6:db:8b:f5:16:8a:0f:52:90:58:4c:df:48:5d:
76:17:17:e6:11:dc:d9:a4:bd:2a:d1:d6:ba:ba:b3:f8:5d:ca:
da:cd:a0:9a:a8:46:ed:86:f0:d2:7f:ad:a0:d9:e5:9d:21:54:
ba:c7:45:36:29:27:1f:79:81:08:40:79:d6:41:42:ba:b6:c5:
5a:0b:eb:85:ce:be:ee:e1:20:d8:e3:26:4a:5c:b1:1c:00:bf:
c2:69:d7:b5:bc:82:92:51:cc:0f:b1:ba:3d:e4:a2:b9:9a:a7:
46:f0:b1:58:03:91:5f:73:4f:17:95:e0:f3:6f:b4:41:94:42:
94:ee:e2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:24 2025 by rpki-client