![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6c3778-6458-4465-afbf-13a166d638b8/1/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.mft
File: 1Q3eVrKS-CseUleIEjZ4zlH4O9Y.mft (raw, json)
Hash identifier: Uh6UHRI/RXO8ObpZZXfW0cqOpgqCEu4HrjRkI66yuqw=
Subject key identifier: 44:04:55:6E:3D:EB:84:36:33:7C:CF:B4:45:26:F1:C8:1D:5B:51:9E
Authority key identifier: D5:0D:DE:56:B2:92:F8:2B:1E:52:57:88:12:36:78:CE:51:F8:3B:D6
Certificate issuer: /CN=d50dde56b292f82b1e525788123678ce51f83bd6
Certificate serial: 018A250AA4D00DFDA566274E505E085147E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/6c3778-6458-4465-afbf-13a166d638b8/1/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.mft
Manifest number: 014D
Signing time: Thu 24 Aug 2023 00:56:08 +0000
Manifest this update: Thu 24 Aug 2023 00:56:08 +0000
Manifest next update: Fri 25 Aug 2023 00:56:08 +0000
Files and hashes: 1: 1Q3eVrKS-CseUleIEjZ4zlH4O9Y.crl (hash: J9hnOx6VxuuSiJ0gev9+VR+9Jrasy2Xi4OSiSQhy8EM=)
2: GvTrFibFLmYDBgHUtTR3x7K6Edg.roa (hash: 7mAB7dWXpa2ecvnYQ3NESVbKZgTqTuD13tQMC4FK/eY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:25:0a:a4:d0:0d:fd:a5:66:27:4e:50:5e:08:51:47:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50dde56b292f82b1e525788123678ce51f83bd6
Validity
Not Before: Aug 24 00:56:08 2023 GMT
Not After : Aug 25 00:56:08 2023 GMT
Subject: CN=4404556e3deb8436337ccfb44526f1c81d5b519e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f9:72:0b:a0:4d:93:d7:64:05:23:37:d0:3c:
41:f9:51:90:41:1b:61:dd:eb:7f:d2:55:7f:b1:ce:
74:59:dc:96:a4:be:3c:4f:fb:1b:05:65:cd:66:50:
ca:f9:63:54:6d:23:65:87:03:2e:9f:a9:a4:61:8c:
a2:aa:85:07:12:3c:ff:f6:04:ec:f3:cb:43:ab:44:
ed:ea:6b:ac:bb:f5:db:20:7c:e8:ff:a0:17:5d:65:
3c:46:a4:ce:91:ea:7b:89:f5:c6:cc:c1:69:59:d6:
bc:49:d1:57:14:64:a0:9d:2a:f1:2c:fa:56:b7:15:
d7:17:81:98:7e:6a:32:fd:be:19:66:b1:0f:02:7b:
20:9c:c7:d6:52:39:eb:47:59:76:9a:57:eb:c3:17:
ef:b7:30:c2:63:b4:a2:fb:56:a2:b6:a1:bd:b0:74:
77:ef:7d:3b:cc:5a:58:6f:29:35:6a:7e:c4:78:e2:
61:c4:78:6f:42:7b:19:ec:85:12:bf:1a:f2:2e:e2:
79:d5:44:31:d0:e4:52:d8:e1:7b:e9:b5:3a:48:0f:
50:67:43:37:e8:c3:8d:c3:25:3b:48:ca:a0:2e:f9:
9c:b8:f7:5e:87:ff:28:ec:95:51:35:b7:5c:c8:11:
4e:49:39:41:12:20:80:85:af:28:4c:ec:c2:67:2e:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:04:55:6E:3D:EB:84:36:33:7C:CF:B4:45:26:F1:C8:1D:5B:51:9E
X509v3 Authority Key Identifier:
keyid:D5:0D:DE:56:B2:92:F8:2B:1E:52:57:88:12:36:78:CE:51:F8:3B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6c3778-6458-4465-afbf-13a166d638b8/1/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6c3778-6458-4465-afbf-13a166d638b8/1/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:60:dc:82:e3:31:25:f3:e0:28:b6:f9:23:fa:d7:2e:e1:b5:
8e:e4:c7:7a:9a:8e:2f:68:b2:0e:17:af:52:bf:21:45:ff:98:
13:78:c3:17:58:2e:61:9d:45:4d:03:29:ee:7f:d7:a8:6f:2a:
3f:8c:0e:04:56:8a:b9:c4:17:59:95:c6:90:d4:69:17:9e:23:
f7:0c:b3:32:4c:d9:78:df:11:55:ed:67:83:07:4d:ba:74:f0:
29:81:77:0e:43:fc:3c:d8:bb:fa:d0:a2:2f:5e:d1:98:96:96:
27:44:44:7a:2e:17:f4:a1:68:be:86:b1:7a:f5:0c:f0:7b:a2:
05:9d:84:a0:a5:1c:0e:88:48:d9:c3:1a:16:2f:c0:4c:10:d4:
38:c6:0b:25:67:1c:ca:f8:03:ac:39:03:32:29:50:ba:c7:ed:
96:08:db:74:0e:b9:98:3c:74:af:cc:26:ab:63:00:ce:e5:d2:
e7:a8:85:40:a8:8d:f8:b5:8b:3c:5e:3b:66:51:e3:e7:fe:25:
f1:58:c8:a4:a0:5c:dc:0b:80:18:4b:96:17:92:6f:5a:e1:16:
5c:62:7b:12:5b:e6:65:61:ed:e7:20:15:42:1f:fa:da:0d:04:
9c:3d:50:93:1b:25:85:a2:ea:ef:a4:b1:21:ec:c6:07:9f:4e:
8a:34:79:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:33 2025 by rpki-client