![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/acc32e-26dc-4b0a-88a4-81c6c63c7951/1/jSSNSDbGdLDV91u-Q760iXfGOF4.mft
File: jSSNSDbGdLDV91u-Q760iXfGOF4.mft (raw, json)
Hash identifier: hjGloVQ0zFvECv6dsWWdsuHIgps5RVoZ43rF7pjpC0w=
Subject key identifier: 6D:3A:F7:A8:99:84:B6:D3:22:0B:53:93:7B:3D:76:CF:D7:EE:A0:FB
Authority key identifier: 8D:24:8D:48:36:C6:74:B0:D5:F7:5B:BE:43:BE:B4:89:77:C6:38:5E
Certificate issuer: /CN=8d248d4836c674b0d5f75bbe43beb48977c6385e
Certificate serial: 018649A800A66B47941AAA3B80F1E9FE27C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSSNSDbGdLDV91u-Q760iXfGOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/acc32e-26dc-4b0a-88a4-81c6c63c7951/1/jSSNSDbGdLDV91u-Q760iXfGOF4.mft
Manifest number: AE
Signing time: Mon 13 Feb 2023 07:23:12 +0000
Manifest this update: Mon 13 Feb 2023 07:23:12 +0000
Manifest next update: Tue 14 Feb 2023 07:23:12 +0000
Files and hashes: 1: jSSNSDbGdLDV91u-Q760iXfGOF4.crl (hash: EUdoZZamBZHQ4NkcWqiQwCk9kZwpEsvVhxiDmgtrhuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:a8:00:a6:6b:47:94:1a:aa:3b:80:f1:e9:fe:27:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d248d4836c674b0d5f75bbe43beb48977c6385e
Validity
Not Before: Feb 13 07:23:12 2023 GMT
Not After : Feb 14 07:23:12 2023 GMT
Subject: CN=6d3af7a89984b6d3220b53937b3d76cfd7eea0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b5:45:7e:db:a0:27:42:60:48:29:da:9a:18:
33:fc:8b:df:12:45:8b:60:1c:f4:07:58:7c:e7:03:
93:65:a7:8b:e9:3e:cb:bb:30:cb:21:e8:1c:ea:c5:
ec:85:f9:eb:cd:65:27:7d:de:45:1b:1d:2b:a6:ac:
38:40:04:20:9a:19:85:44:2d:9f:17:9a:ef:28:54:
c6:bf:05:11:d7:d0:25:4b:82:0f:f7:a6:e3:c2:8a:
27:1e:3f:b5:d3:d3:a2:f6:8c:14:eb:53:1c:28:48:
06:ad:f9:98:04:b4:67:51:a7:fb:c9:3c:98:b4:c7:
aa:28:5f:ef:1f:f5:2e:dc:b4:a4:f8:ce:9b:e9:1a:
39:59:9d:73:ef:61:77:1b:27:15:d2:e4:8a:8a:13:
1f:63:9e:66:72:0a:cf:14:b6:4e:e4:b0:c7:0b:e8:
53:ce:59:59:6f:0f:01:ca:df:7c:79:b4:1e:f0:66:
61:18:8a:d1:00:b3:34:d4:06:f4:e8:7a:4b:d4:6b:
53:a5:ae:9f:6b:e9:dd:2e:54:9d:d1:12:ee:b4:9d:
52:63:e0:c1:9b:65:5a:05:24:ae:11:47:85:27:a9:
80:8d:61:c1:1e:ae:98:d2:8b:23:63:53:a4:45:b6:
16:1b:e7:37:41:5b:e3:3a:3d:f6:4f:1d:48:bf:6e:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3A:F7:A8:99:84:B6:D3:22:0B:53:93:7B:3D:76:CF:D7:EE:A0:FB
X509v3 Authority Key Identifier:
keyid:8D:24:8D:48:36:C6:74:B0:D5:F7:5B:BE:43:BE:B4:89:77:C6:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSSNSDbGdLDV91u-Q760iXfGOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/acc32e-26dc-4b0a-88a4-81c6c63c7951/1/jSSNSDbGdLDV91u-Q760iXfGOF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/acc32e-26dc-4b0a-88a4-81c6c63c7951/1/jSSNSDbGdLDV91u-Q760iXfGOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1d:1a:2c:cd:be:b5:fb:d5:2a:3e:f1:3e:ca:f4:11:d7:d8:
d8:b8:d3:ac:ad:14:ae:18:87:9f:03:63:00:fa:bb:79:69:fe:
b0:8e:0f:10:3c:91:6c:b9:50:d8:b0:b9:c3:5f:66:b1:3c:e3:
71:5a:20:4e:c7:d4:75:ec:78:9a:c3:ea:f5:c3:c5:90:36:24:
7c:90:9d:a0:e5:36:55:97:8f:e1:fa:4d:81:99:cb:7d:85:af:
a9:d5:bb:4b:d2:ca:be:a5:93:29:b0:1f:f8:48:b6:d6:12:72:
94:5f:25:8c:01:62:92:95:26:1a:90:29:fe:e9:80:e2:b5:5c:
d0:05:b9:a4:31:49:e7:8e:87:31:7b:bd:69:7f:c5:06:6c:85:
16:86:8d:50:ed:06:a3:02:24:17:c4:47:bc:ff:9a:3d:af:4d:
cb:bc:49:62:60:dd:da:fd:0d:62:13:ee:6e:cd:34:2d:21:7f:
f7:57:30:1a:af:07:20:18:80:b3:4a:45:6b:e8:43:75:49:a1:
f9:6d:48:90:95:e7:e6:ca:79:a4:ba:41:d5:92:4e:b7:0a:dd:
3c:a2:40:6e:6f:f9:b9:a7:67:f0:2c:b4:f7:75:7b:a0:d4:ed:
23:41:97:c5:bc:91:55:45:73:cf:68:bf:a9:bc:f9:fe:31:9d:
85:ce:fe:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYZJqACma0eUGqo7gPHp/ifHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMjQ4ZDQ4MzZjNjc0YjBkNWY3NWJiZTQzYmViNDg5Nzdj
NjM4NWUwHhcNMjMwMjEzMDcyMzEyWhcNMjMwMjE0MDcyMzEyWjAzMTEwLwYDVQQD
Eyg2ZDNhZjdhODk5ODRiNmQzMjIwYjUzOTM3YjNkNzZjZmQ3ZWVhMGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLVFftugJ0JgSCnamhgz/IvfEkWL
YBz0B1h85wOTZaeL6T7LuzDLIegc6sXshfnrzWUnfd5FGx0rpqw4QAQgmhmFRC2f
F5rvKFTGvwUR19AlS4IP96bjwoonHj+109Oi9owU61McKEgGrfmYBLRnUaf7yTyY
tMeqKF/vH/Uu3LSk+M6b6Ro5WZ1z72F3GycV0uSKihMfY55mcgrPFLZO5LDHC+hT
zllZbw8Byt98ebQe8GZhGIrRALM01Ab06HpL1GtTpa6fa+ndLlSd0RLutJ1SY+DB
m2VaBSSuEUeFJ6mAjWHBHq6Y0osjY1OkRbYWG+c3QVvjOj32Tx1Iv26gKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0696iZhLbTIgtTk3s9ds/X7qD7MB8GA1UdIwQY
MBaAFI0kjUg2xnSw1fdbvkO+tIl3xjheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalNTTlNEYkdkTERWOTF1LVE3NjBpWGZHT0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hY2MzMmUtMjZkYy00YjBhLTg4YTQt
ODFjNmM2M2M3OTUxLzEvalNTTlNEYkdkTERWOTF1LVE3NjBpWGZHT0Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hY2MzMmUtMjZkYy00YjBhLTg4YTQtODFjNmM2M2M3OTUx
LzEvalNTTlNEYkdkTERWOTF1LVE3NjBpWGZHT0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYh0aLM2+
tfvVKj7xPsr0EdfY2LjTrK0UrhiHnwNjAPq7eWn+sI4PEDyRbLlQ2LC5w19msTzj
cVogTsfUdex4msPq9cPFkDYkfJCdoOU2VZeP4fpNgZnLfYWvqdW7S9LKvqWTKbAf
+Ei21hJylF8ljAFikpUmGpAp/umA4rVc0AW5pDFJ546HMXu9aX/FBmyFFoaNUO0G
owIkF8RHvP+aPa9Ny7xJYmDd2v0NYhPubs00LSF/91cwGq8HIBiAs0pFa+hDdUmh
+W1IkJXn5sp5pLpB1ZJOtwrdPKJAbm/5uadn8Cy093V7oNTtI0GXxbyRVUVzz2i/
qbz5/jGdhc7+MA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:36 2025 by rpki-client