![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3ef1b0-9f26-4fa8-9798-aaf68b6c9fd1/1/s55s7LoqBcsHC5sjnsTZgq0dlaU.mft
File: s55s7LoqBcsHC5sjnsTZgq0dlaU.mft (raw, json)
Hash identifier: BqlC0PoKMzCaP3CzgLESCUk96EGyY7NPC/j4xn7z3pk=
Subject key identifier: 39:F6:74:3A:88:42:39:41:4A:A0:D2:65:F4:20:6D:9B:FE:38:24:FB
Authority key identifier: B3:9E:6C:EC:BA:2A:05:CB:07:0B:9B:23:9E:C4:D9:82:AD:1D:95:A5
Certificate issuer: /CN=b39e6cecba2a05cb070b9b239ec4d982ad1d95a5
Certificate serial: 019095020F9F14F0E68C928E6AE0DAD09A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s55s7LoqBcsHC5sjnsTZgq0dlaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3ef1b0-9f26-4fa8-9798-aaf68b6c9fd1/1/s55s7LoqBcsHC5sjnsTZgq0dlaU.mft
Manifest number: 0E
Signing time: Tue 09 Jul 2024 01:00:58 +0000
Manifest this update: Tue 09 Jul 2024 01:00:58 +0000
Manifest next update: Wed 10 Jul 2024 01:00:58 +0000
Files and hashes: 1: eA-OkuAN882Wna5z_EnLkZpLPwc.roa (hash: T+yDGkAYpBdRn7FIdignHCsNACKjHSjvg2jrYYfNXNo=)
2: s55s7LoqBcsHC5sjnsTZgq0dlaU.crl (hash: FHUsiRmUPHJU7ieXCo90I+NdeXcascXDz60t1DGE/VA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:95:02:0f:9f:14:f0:e6:8c:92:8e:6a:e0:da:d0:9a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39e6cecba2a05cb070b9b239ec4d982ad1d95a5
Validity
Not Before: Jul 9 01:00:58 2024 GMT
Not After : Jul 10 01:00:58 2024 GMT
Subject: CN=39f6743a884239414aa0d265f4206d9bfe3824fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:ec:2c:5c:77:77:f1:b5:0f:a4:ec:54:39:
f3:3f:07:de:60:3e:71:bf:27:ec:e0:4c:5e:83:d0:
4a:8d:0d:c9:41:92:df:bd:45:43:2b:53:aa:f2:c8:
11:13:91:93:43:6c:79:85:34:99:21:46:c5:23:fd:
51:8e:d3:0a:ed:c8:1a:81:dc:13:d1:e2:2d:24:90:
69:d2:61:6b:9b:02:29:0f:82:69:94:25:07:5f:61:
24:bd:d4:11:07:ea:55:02:8e:c2:2d:8a:21:22:f0:
62:a5:62:d2:55:95:b0:88:63:1d:ee:8a:37:fd:ba:
af:05:66:bd:91:d2:67:23:a7:16:63:56:7e:ac:82:
a9:71:dc:0d:7c:97:08:ca:41:72:05:e9:22:1a:74:
c4:64:f6:b8:25:3a:a7:09:87:4f:03:12:8c:f0:47:
c8:c9:e1:38:56:23:30:48:0a:80:c0:4b:db:8e:1e:
1e:3b:ff:79:2d:d1:42:d2:dd:36:ae:29:bc:a7:d8:
57:2c:93:61:d4:08:3e:d3:93:9c:03:fc:e1:31:5a:
68:93:d4:08:dd:38:35:3b:aa:fe:d8:7a:51:e7:0d:
af:22:d9:1d:9c:5a:c1:68:68:44:29:5e:4e:79:b6:
23:ce:34:94:47:78:ad:a8:8e:d5:41:19:7c:c6:c3:
1f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F6:74:3A:88:42:39:41:4A:A0:D2:65:F4:20:6D:9B:FE:38:24:FB
X509v3 Authority Key Identifier:
keyid:B3:9E:6C:EC:BA:2A:05:CB:07:0B:9B:23:9E:C4:D9:82:AD:1D:95:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55s7LoqBcsHC5sjnsTZgq0dlaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3ef1b0-9f26-4fa8-9798-aaf68b6c9fd1/1/s55s7LoqBcsHC5sjnsTZgq0dlaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3ef1b0-9f26-4fa8-9798-aaf68b6c9fd1/1/s55s7LoqBcsHC5sjnsTZgq0dlaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e7:82:1b:0b:2b:b8:97:68:3f:79:81:8e:db:c3:7e:ef:8b:
f6:5e:0d:a5:a3:cd:b3:1c:80:cc:2a:ea:05:e3:43:bb:2e:24:
2b:90:58:34:37:98:20:1e:6d:cc:bf:7a:98:73:84:64:79:65:
fa:57:9f:e0:60:99:48:fb:68:9d:34:70:8b:ba:b4:4e:2a:22:
94:76:d8:fe:64:a3:32:37:7f:f3:dd:0e:fe:60:e3:0e:57:02:
82:7a:03:48:42:05:ba:b5:c4:5d:1c:30:ce:3c:0a:03:65:85:
4a:34:6e:b4:d7:43:3c:19:57:f8:d1:b1:2e:62:a6:4c:e5:7d:
50:25:01:17:55:91:a3:81:2a:24:9f:f6:72:30:5d:2d:45:58:
53:ac:72:ec:d0:5a:45:92:ec:ec:bf:48:79:4b:b7:f1:2f:6e:
b2:92:4c:bb:7b:60:e8:a4:15:a9:0d:b2:91:99:e4:75:f0:06:
e8:ec:ca:44:fb:c5:f5:be:88:29:b9:41:9c:0c:f5:fe:2f:81:
a9:54:3d:17:ff:0e:32:78:07:68:66:ab:19:5e:7f:c5:89:53:
d5:42:b9:e1:93:4d:6c:e2:b1:64:64:66:4d:4f:1f:10:16:99:
2b:9a:e7:ea:fb:56:5c:a5:4a:38:dd:da:24:90:09:72:37:52:
8b:70:39:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:33 2025 by rpki-client