![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c9ed9a-9922-4318-b0aa-10e71e5692f9/1/fZ1Jlku6nosEBA4twnAJ91XRoO4.mft
File: fZ1Jlku6nosEBA4twnAJ91XRoO4.mft (raw, json)
Hash identifier: WAPw/ngAgreHGj/twnZefvK1Aw+1H60aNS5IvNmFEbk=
Subject key identifier: B4:A4:A8:BD:29:1F:C8:F7:F7:FD:20:0B:B2:D4:D8:A5:3C:49:AD:5D
Authority key identifier: 7D:9D:49:96:4B:BA:9E:8B:04:04:0E:2D:C2:70:09:F7:55:D1:A0:EE
Certificate issuer: /CN=7d9d49964bba9e8b04040e2dc27009f755d1a0ee
Certificate serial: 01909B3AD0B4455C07AE0D5EE1D6182B4EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ1Jlku6nosEBA4twnAJ91XRoO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c9ed9a-9922-4318-b0aa-10e71e5692f9/1/fZ1Jlku6nosEBA4twnAJ91XRoO4.mft
Manifest number: 016C
Signing time: Wed 10 Jul 2024 06:00:41 +0000
Manifest this update: Wed 10 Jul 2024 06:00:41 +0000
Manifest next update: Thu 11 Jul 2024 06:00:41 +0000
Files and hashes: 1: T1gtWMJEUD7caRiEtBODjmtEb6w.roa (hash: LAllxPO1yYG08pgL5F6wlo6+nTzU0LeY7CLKxN1B9E8=)
2: fZ1Jlku6nosEBA4twnAJ91XRoO4.crl (hash: W+zIkAsacpLZiH0E9oyLxqL3BBH7XiRilptmTo3Gh5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:3a:d0:b4:45:5c:07:ae:0d:5e:e1:d6:18:2b:4e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9d49964bba9e8b04040e2dc27009f755d1a0ee
Validity
Not Before: Jul 10 06:00:41 2024 GMT
Not After : Jul 11 06:00:41 2024 GMT
Subject: CN=b4a4a8bd291fc8f7f7fd200bb2d4d8a53c49ad5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:dc:e0:0b:16:df:ea:b4:76:5d:de:57:bd:
5d:d9:40:64:a7:0c:f0:84:3a:d5:c9:02:a7:0c:75:
42:1f:fa:6b:85:bf:d9:cd:04:d8:4b:4a:02:9a:54:
46:ea:46:60:97:81:67:48:46:1b:23:e2:de:85:e9:
ae:38:bf:c2:fb:f9:81:59:c9:c1:e1:94:b0:2b:4b:
43:9b:d8:8b:27:fe:1d:c5:fd:d1:88:82:fe:cf:dc:
e6:08:3f:5d:ec:69:c2:e9:3a:25:f1:af:54:b6:a7:
84:e1:8b:da:29:39:49:c3:6f:64:5f:57:d3:0e:bd:
a2:68:dd:ee:79:5e:2a:45:0b:96:d6:20:ea:38:13:
eb:67:df:0a:fc:91:b1:51:af:30:6c:01:28:a7:cd:
b5:96:27:c4:bf:06:5a:89:e1:ef:3d:aa:fd:d0:a2:
bd:b3:16:bb:f8:48:d2:e9:0d:a1:42:bf:49:83:e2:
3a:f4:64:3a:67:0f:4d:48:cb:cb:5a:e7:63:f2:6e:
60:05:7f:f0:80:48:ee:d4:b1:52:95:3d:5a:6b:69:
7a:5f:cc:57:9f:85:c1:55:81:57:20:c6:e6:0b:69:
8a:6e:26:c2:1e:09:91:48:51:79:ef:98:71:68:05:
cd:43:34:0d:03:10:f4:85:35:68:ce:46:b0:9d:a4:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:A8:BD:29:1F:C8:F7:F7:FD:20:0B:B2:D4:D8:A5:3C:49:AD:5D
X509v3 Authority Key Identifier:
keyid:7D:9D:49:96:4B:BA:9E:8B:04:04:0E:2D:C2:70:09:F7:55:D1:A0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ1Jlku6nosEBA4twnAJ91XRoO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c9ed9a-9922-4318-b0aa-10e71e5692f9/1/fZ1Jlku6nosEBA4twnAJ91XRoO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c9ed9a-9922-4318-b0aa-10e71e5692f9/1/fZ1Jlku6nosEBA4twnAJ91XRoO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f6:7e:0c:69:6a:67:47:2f:02:94:c4:81:17:c9:2d:64:05:
c5:2f:02:49:ca:05:b6:c7:1c:69:a6:61:dd:73:32:dd:dc:3d:
85:9b:c6:c0:2e:78:9d:c0:ac:b1:28:2d:4e:3c:ad:a3:d0:09:
eb:1f:52:d1:b5:58:87:ec:b5:e8:0b:be:1c:3e:87:b5:f6:1c:
2e:43:f1:06:0b:be:1e:dc:e6:9f:29:fb:61:49:b9:a0:d4:df:
26:6f:9a:7f:fa:d0:30:b2:30:b8:46:52:18:9a:ac:cc:38:89:
45:b3:c3:f2:ae:6e:37:99:d1:e1:44:29:9b:14:88:b5:e8:29:
b5:03:fe:53:43:96:33:a2:43:41:c7:e1:dd:9a:be:81:d7:4c:
2f:0b:ca:28:95:b3:55:3b:74:91:ee:21:a6:bc:4d:ae:69:62:
b2:1f:cc:d7:1c:0b:07:30:66:f9:c9:94:76:87:c6:43:7c:d3:
03:1e:d5:d5:38:a6:1d:a0:49:db:06:e0:29:45:5b:6d:bb:45:
eb:69:e6:fe:30:5a:be:5e:9e:a8:e1:d4:a6:5b:1e:07:70:9c:
28:13:9a:ce:c1:42:67:d2:60:de:e5:3f:c7:5f:ac:78:e2:e1:
01:a1:9c:4d:cc:72:99:3e:1a:de:02:d8:03:f7:5a:b3:a9:07:
9c:50:25:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZCbOtC0RVwHrg1e4dYYK06nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkOWQ0OTk2NGJiYTllOGIwNDA0MGUyZGMyNzAwOWY3NTVk
MWEwZWUwHhcNMjQwNzEwMDYwMDQxWhcNMjQwNzExMDYwMDQxWjAzMTEwLwYDVQQD
EyhiNGE0YThiZDI5MWZjOGY3ZjdmZDIwMGJiMmQ0ZDhhNTNjNDlhZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvzc4AsW3+q0dl3eV71d2UBkpwzw
hDrVyQKnDHVCH/prhb/ZzQTYS0oCmlRG6kZgl4FnSEYbI+LehemuOL/C+/mBWcnB
4ZSwK0tDm9iLJ/4dxf3RiIL+z9zmCD9d7GnC6Tol8a9UtqeE4YvaKTlJw29kX1fT
Dr2iaN3ueV4qRQuW1iDqOBPrZ98K/JGxUa8wbAEop821lifEvwZaieHvPar90KK9
sxa7+EjS6Q2hQr9Jg+I69GQ6Zw9NSMvLWudj8m5gBX/wgEju1LFSlT1aa2l6X8xX
n4XBVYFXIMbmC2mKbibCHgmRSFF575hxaAXNQzQNAxD0hTVozkawnaSmVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSkqL0pH8j39/0gC7LU2KU8Sa1dMB8GA1UdIwQY
MBaAFH2dSZZLup6LBAQOLcJwCfdV0aDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZloxSmxrdTZub3NFQkE0dHduQUo5MVhSb080LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jOWVkOWEtOTkyMi00MzE4LWIwYWEt
MTBlNzFlNTY5MmY5LzEvZloxSmxrdTZub3NFQkE0dHduQUo5MVhSb080Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jOWVkOWEtOTkyMi00MzE4LWIwYWEtMTBlNzFlNTY5MmY5
LzEvZloxSmxrdTZub3NFQkE0dHduQUo5MVhSb080LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/Z+DGlq
Z0cvApTEgRfJLWQFxS8CScoFtsccaaZh3XMy3dw9hZvGwC54ncCssSgtTjyto9AJ
6x9S0bVYh+y16Au+HD6HtfYcLkPxBgu+Htzmnyn7YUm5oNTfJm+af/rQMLIwuEZS
GJqszDiJRbPD8q5uN5nR4UQpmxSItegptQP+U0OWM6JDQcfh3Zq+gddMLwvKKJWz
VTt0ke4hprxNrmlish/M1xwLBzBm+cmUdofGQ3zTAx7V1TimHaBJ2wbgKUVbbbtF
62nm/jBavl6eqOHUplseB3CcKBOazsFCZ9Jg3uU/x1+seOLhAaGcTcxymT4a3gLY
A/das6kHnFAliw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:22 2025 by rpki-client