![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/4G39OIvWV5G4KA1GeLtu8HyfXXs.mft
File: 4G39OIvWV5G4KA1GeLtu8HyfXXs.mft (raw, json)
Hash identifier: Fx4oVqOHfs+9lDeDKq1ntWCZ8kwHgEvbbFgZrN/ERck=
Subject key identifier: 47:10:AF:3D:23:41:85:DA:96:51:23:F2:F4:31:16:85:C1:F2:A3:AB
Authority key identifier: E0:6D:FD:38:8B:D6:57:91:B8:28:0D:46:78:BB:6E:F0:7C:9F:5D:7B
Certificate issuer: /CN=e06dfd388bd65791b8280d4678bb6ef07c9f5d7b
Certificate serial: 018796FEF4D3F65C627E824849048800C29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4G39OIvWV5G4KA1GeLtu8HyfXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/4G39OIvWV5G4KA1GeLtu8HyfXXs.mft
Manifest number: CE
Signing time: Wed 19 Apr 2023 00:51:43 +0000
Manifest this update: Wed 19 Apr 2023 00:51:43 +0000
Manifest next update: Thu 20 Apr 2023 00:51:43 +0000
Files and hashes: 1: 4G39OIvWV5G4KA1GeLtu8HyfXXs.crl (hash: JXZ/ZK/keAxlsIewwjlcCQyKIwOdgAoOEoSaSF1o+bE=)
2: XcXnRYsBR-Vosh1hRwoxpx_1KkM.roa (hash: v0NCPbYdfCZqbahjoTrIngEndEvs5SFaOD7c+r7gNS8=)
3: sRdbwM2FhT4KZFWByGVh6X9hlas.roa (hash: eFMqEnuzY87UNd7fTIk3WGYcFKadCzBIX6G/lJCzbhg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:96:fe:f4:d3:f6:5c:62:7e:82:48:49:04:88:00:c2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06dfd388bd65791b8280d4678bb6ef07c9f5d7b
Validity
Not Before: Apr 19 00:51:43 2023 GMT
Not After : Apr 20 00:51:43 2023 GMT
Subject: CN=4710af3d234185da965123f2f4311685c1f2a3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7b:46:be:ec:ca:b0:91:17:e6:e5:c3:d9:9e:
2e:fe:e5:eb:70:a8:31:05:ef:a8:f7:56:8a:97:fd:
8f:47:ef:bf:7e:c8:e0:6b:d0:1b:1d:8c:25:4e:79:
c9:35:a9:41:c3:4c:bb:e1:5f:21:9d:33:b7:9e:04:
18:36:2b:b7:a2:4b:1e:78:79:45:1e:5d:82:0f:50:
17:4e:50:24:4d:92:e7:74:97:08:2b:8a:b1:c5:7c:
69:91:a4:54:af:ca:4f:d6:03:a7:ab:04:0a:9f:31:
b2:12:57:c1:89:d7:21:72:02:7a:a0:b7:c1:4c:fc:
b0:4e:3e:79:79:bd:58:9c:ba:71:35:95:d4:91:6b:
8e:aa:5c:86:11:2b:1a:f9:23:5f:89:0a:76:c6:53:
0c:0c:27:91:68:93:15:26:72:b9:c7:ab:cb:40:0e:
8c:22:5a:f8:61:86:52:19:a3:20:fc:55:35:8d:ba:
11:09:f3:f3:ee:c0:4b:f5:63:d9:fe:c3:8b:92:fe:
8f:91:04:84:6e:3b:ec:88:c8:df:78:a5:43:ab:78:
fb:79:3f:c7:f5:f4:63:3f:a7:a4:90:6d:5b:52:22:
89:5a:ee:d0:32:d0:a4:8f:29:8d:e5:05:6e:fc:2c:
c5:7c:ba:fe:45:43:fd:ef:3e:cb:1e:b7:d7:a5:f8:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:10:AF:3D:23:41:85:DA:96:51:23:F2:F4:31:16:85:C1:F2:A3:AB
X509v3 Authority Key Identifier:
keyid:E0:6D:FD:38:8B:D6:57:91:B8:28:0D:46:78:BB:6E:F0:7C:9F:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4G39OIvWV5G4KA1GeLtu8HyfXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/4G39OIvWV5G4KA1GeLtu8HyfXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/4G39OIvWV5G4KA1GeLtu8HyfXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0a:e6:87:e0:45:ba:8b:20:69:40:b4:ca:e1:c6:f6:2d:08:
9d:8f:40:82:20:cb:2f:0f:7d:4a:10:27:cd:3f:66:e3:a0:72:
28:d2:60:07:1a:c5:7c:e5:21:a5:32:39:b6:f8:c6:8c:13:7c:
f5:1a:f5:80:85:a1:2d:a8:da:c2:d1:a4:02:df:b4:57:df:a2:
1d:b3:eb:7c:ad:29:52:2a:b7:e7:95:f8:6b:af:a0:2a:a6:5d:
a9:4f:cb:23:b2:47:da:ee:f3:41:4c:d6:a6:5b:a2:b5:a3:15:
2c:74:69:7e:f0:eb:f1:8f:f5:b8:3f:29:d6:ca:b5:b9:b4:b4:
5c:7d:b3:3d:6b:fc:1a:e8:1c:4b:3b:16:57:8f:b0:7c:85:10:
e9:98:2b:ec:5f:0d:f0:e9:aa:37:2c:3a:c0:d8:73:81:75:a3:
5d:fd:88:1c:c4:b8:70:c3:5c:2e:ab:ee:a0:91:f0:b5:e1:97:
bc:b9:9c:37:20:fc:7d:03:9b:cc:e2:4d:5c:96:3b:f4:6e:af:
36:54:a4:51:02:0b:47:43:c6:95:40:c6:8b:04:48:9a:8b:b6:
d7:de:97:0c:f2:85:1d:61:da:37:13:3d:44:cf:a1:20:06:4f:
14:1f:b6:05:c8:c8:b5:90:8b:0c:e5:4f:f5:6c:9c:7c:9b:48:
f6:ad:15:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYeW/vTT9lxifoJISQSIAMKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNmRmZDM4OGJkNjU3OTFiODI4MGQ0Njc4YmI2ZWYwN2M5
ZjVkN2IwHhcNMjMwNDE5MDA1MTQzWhcNMjMwNDIwMDA1MTQzWjAzMTEwLwYDVQQD
Eyg0NzEwYWYzZDIzNDE4NWRhOTY1MTIzZjJmNDMxMTY4NWMxZjJhM2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmntGvuzKsJEX5uXD2Z4u/uXrcKgx
Be+o91aKl/2PR++/fsjga9AbHYwlTnnJNalBw0y74V8hnTO3ngQYNiu3okseeHlF
Hl2CD1AXTlAkTZLndJcIK4qxxXxpkaRUr8pP1gOnqwQKnzGyElfBidchcgJ6oLfB
TPywTj55eb1YnLpxNZXUkWuOqlyGESsa+SNfiQp2xlMMDCeRaJMVJnK5x6vLQA6M
Ilr4YYZSGaMg/FU1jboRCfPz7sBL9WPZ/sOLkv6PkQSEbjvsiMjfeKVDq3j7eT/H
9fRjP6ekkG1bUiKJWu7QMtCkjymN5QVu/CzFfLr+RUP97z7LHrfXpfgV2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcQrz0jQYXallEj8vQxFoXB8qOrMB8GA1UdIwQY
MBaAFOBt/TiL1leRuCgNRni7bvB8n117MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEczOU9JdldWNUc0S0ExR2VMdHU4SHlmWFhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lOWU4YzMtN2ZjZi00NDhlLTgzOTAt
Y2FmOGRiMGU5MzBlLzEvNEczOU9JdldWNUc0S0ExR2VMdHU4SHlmWFhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lOWU4YzMtN2ZjZi00NDhlLTgzOTAtY2FmOGRiMGU5MzBl
LzEvNEczOU9JdldWNUc0S0ExR2VMdHU4SHlmWFhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwrmh+BF
uosgaUC0yuHG9i0InY9AgiDLLw99ShAnzT9m46ByKNJgBxrFfOUhpTI5tvjGjBN8
9Rr1gIWhLajawtGkAt+0V9+iHbPrfK0pUiq355X4a6+gKqZdqU/LI7JH2u7zQUzW
pluitaMVLHRpfvDr8Y/1uD8p1sq1ubS0XH2zPWv8GugcSzsWV4+wfIUQ6Zgr7F8N
8OmqNyw6wNhzgXWjXf2IHMS4cMNcLqvuoJHwteGXvLmcNyD8fQObzOJNXJY79G6v
NlSkUQILR0PGlUDGiwRImou2196XDPKFHWHaNxM9RM+hIAZPFB+2BcjItZCLDOVP
9WycfJtI9q0VoQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:33 2025 by rpki-client