![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b72b71-3799-409f-9967-e4cfb37706ba/1/TKj1as9sbrt56qwXp3QVi4pDVjQ.mft
File: TKj1as9sbrt56qwXp3QVi4pDVjQ.mft (raw, json)
Hash identifier: 7qq1l85PL3przAoOPKJILN56Ag+22ENKuN0Fa156xy0=
Subject key identifier: D1:4B:65:99:D9:BD:1F:C6:0D:CC:19:8F:E1:D3:3C:D4:9D:47:EA:47
Authority key identifier: 4C:A8:F5:6A:CF:6C:6E:BB:79:EA:AC:17:A7:74:15:8B:8A:43:56:34
Certificate issuer: /CN=4ca8f56acf6c6ebb79eaac17a774158b8a435634
Certificate serial: 0183A212C77DFB7E9A233D2EE1E6BE1D10AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKj1as9sbrt56qwXp3QVi4pDVjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b72b71-3799-409f-9967-e4cfb37706ba/1/TKj1as9sbrt56qwXp3QVi4pDVjQ.mft
Manifest number: 0528
Signing time: Tue 04 Oct 2022 08:18:03 +0000
Manifest this update: Tue 04 Oct 2022 08:18:03 +0000
Manifest next update: Wed 05 Oct 2022 08:18:03 +0000
Files and hashes: 1: TKj1as9sbrt56qwXp3QVi4pDVjQ.crl (hash: fc4mhNT3Mi5Hxfeu5yCsHr9ybV4yEUXZbnLEEKeuqec=)
2: cFdiN4_vRz3wV5p9vA_VtgI1YG4.roa (hash: lc5T0sIIUu3Uv+MPC3AscA0wCzjrS5HeVB2g6IxGbTk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:12:c7:7d:fb:7e:9a:23:3d:2e:e1:e6:be:1d:10:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca8f56acf6c6ebb79eaac17a774158b8a435634
Validity
Not Before: Oct 4 08:18:03 2022 GMT
Not After : Oct 5 08:18:03 2022 GMT
Subject: CN=d14b6599d9bd1fc60dcc198fe1d33cd49d47ea47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:0d:20:f2:08:ae:98:48:7f:34:a7:dd:ee:
2d:7a:70:df:15:71:9b:e4:0a:f2:c6:71:7e:97:86:
77:e2:8b:a6:fb:5c:2f:b7:93:89:5b:b9:32:d8:dd:
70:50:e4:1a:b5:89:b9:3d:68:c3:96:44:01:98:79:
64:0f:57:78:cc:45:c2:d7:5c:21:8f:b0:64:f4:75:
3b:b0:46:52:4c:a8:e5:4e:3c:27:99:5e:aa:a8:53:
3a:6c:3d:bd:dc:30:f8:e3:66:d5:65:93:85:98:81:
22:98:dc:13:f8:dc:54:31:04:a8:b3:f9:f4:50:88:
73:01:20:c0:cc:15:ad:ea:f9:c2:e7:2b:57:18:12:
29:c2:86:58:67:8f:e3:64:c1:d7:49:c3:a4:cf:32:
cc:4d:3f:57:4a:5c:21:e0:bd:33:5e:1f:1a:48:5a:
ff:b7:6c:df:8e:9a:92:c9:d3:d8:37:2f:63:af:5f:
d9:05:2e:bc:b4:a9:27:1b:67:1e:49:54:37:f2:f6:
9a:d8:ad:73:11:02:4c:f8:3b:8d:40:e6:99:ae:f2:
e6:81:79:fa:94:0f:d5:6b:c1:3a:46:a5:d7:a2:92:
4b:58:ee:b7:00:8c:2c:0a:d4:d1:0a:57:d6:04:a8:
b8:78:a4:d1:39:45:d6:3d:11:85:65:8d:d8:5e:3f:
30:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4B:65:99:D9:BD:1F:C6:0D:CC:19:8F:E1:D3:3C:D4:9D:47:EA:47
X509v3 Authority Key Identifier:
keyid:4C:A8:F5:6A:CF:6C:6E:BB:79:EA:AC:17:A7:74:15:8B:8A:43:56:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKj1as9sbrt56qwXp3QVi4pDVjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b72b71-3799-409f-9967-e4cfb37706ba/1/TKj1as9sbrt56qwXp3QVi4pDVjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b72b71-3799-409f-9967-e4cfb37706ba/1/TKj1as9sbrt56qwXp3QVi4pDVjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6d:b6:45:55:38:3e:e9:04:56:06:8c:20:4d:1b:04:d6:da:
bd:79:b0:ac:ea:f2:83:37:7d:e7:b7:27:b8:98:1d:de:71:6e:
76:72:e4:eb:42:07:51:d0:72:e7:93:b6:22:6e:c8:f4:8b:e2:
fc:a3:14:7e:bd:8a:ae:53:cc:19:cc:a2:81:33:bf:98:53:1b:
a5:a7:8b:ab:2c:ec:97:d7:00:6c:84:ad:35:7e:43:0c:84:a9:
ff:a1:06:08:8c:ea:06:40:5e:26:7b:e4:46:07:78:de:17:3d:
43:ce:c5:e3:3a:8a:05:4a:3d:8a:e2:80:e9:07:9b:1f:11:14:
44:f3:47:33:a1:bb:25:d6:e3:d3:97:90:6b:c4:be:9f:aa:a2:
20:46:20:ff:b6:da:83:2f:4b:e2:fa:b5:39:bb:3d:c1:92:2c:
33:89:00:11:fa:03:94:b3:84:90:c2:ef:d5:09:77:54:5d:73:
80:eb:c0:2d:fa:d8:8a:df:f6:40:62:a6:de:ac:b5:73:2b:5b:
dc:12:36:fe:e2:20:78:6b:4a:5f:b9:18:3a:b3:ac:db:5e:58:
4b:83:24:a2:9b:d2:c9:01:a3:5e:de:61:86:4d:58:45:de:82:
4a:d5:ec:34:08:53:b8:3c:41:44:71:04:c5:ec:de:e4:1b:5c:
3e:96:6e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:28 2025 by rpki-client