![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/eb38d3-a4a1-4869-893f-b4605a8b24ba/1/qU8KMqYC1kH7KE2ZKNMr-E9gpNw.mft
File: qU8KMqYC1kH7KE2ZKNMr-E9gpNw.mft (raw, json)
Hash identifier: MLA3AghOhyfHNDmEApjFXo1HTD7iJH2hufG69AOdgNI=
Subject key identifier: E7:91:E6:B5:4F:A5:F1:55:6A:2D:A4:E1:10:07:9F:DC:49:DF:14:79
Authority key identifier: A9:4F:0A:32:A6:02:D6:41:FB:28:4D:99:28:D3:2B:F8:4F:60:A4:DC
Certificate issuer: /CN=a94f0a32a602d641fb284d9928d32bf84f60a4dc
Certificate serial: 018C9054078A454564133EEFDBDFB992DBAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qU8KMqYC1kH7KE2ZKNMr-E9gpNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/eb38d3-a4a1-4869-893f-b4605a8b24ba/1/qU8KMqYC1kH7KE2ZKNMr-E9gpNw.mft
Manifest number: 08BF
Signing time: Fri 22 Dec 2023 07:01:15 +0000
Manifest this update: Fri 22 Dec 2023 07:01:15 +0000
Manifest next update: Sat 23 Dec 2023 07:01:15 +0000
Files and hashes: 1: ktU1xwbuBs7TX3bHrSI1gDERwyI.roa (hash: D/7cbZjQJhBMrciAWZMlMcFoCCVgt1esSXotE+pPi2U=)
2: qU8KMqYC1kH7KE2ZKNMr-E9gpNw.crl (hash: EGQSeFdAraHI0BnFa1AdF2ajj3kv+H0X6Wq6D+u7nR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:54:07:8a:45:45:64:13:3e:ef:db:df:b9:92:db:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a94f0a32a602d641fb284d9928d32bf84f60a4dc
Validity
Not Before: Dec 22 07:01:15 2023 GMT
Not After : Dec 23 07:01:15 2023 GMT
Subject: CN=e791e6b54fa5f1556a2da4e110079fdc49df1479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:2e:f0:1f:4e:dd:02:15:4e:d0:5f:e4:2a:
6f:dd:46:60:8a:89:c6:b9:54:2f:84:21:cc:27:0b:
ad:46:d5:b9:b3:78:f9:c8:ab:67:c0:26:77:27:f2:
18:c9:e7:f0:2e:b8:50:55:37:14:51:6b:0b:a3:88:
4a:6e:ce:7b:b7:e5:80:39:eb:08:1f:93:81:12:2e:
49:78:04:6e:89:23:b8:17:57:9e:b4:03:7e:ee:bd:
7e:87:7f:cb:cc:7e:28:9f:dc:5b:d7:49:89:26:da:
5a:09:26:bb:8b:ce:1d:da:2a:24:75:a6:7d:9d:66:
95:0d:17:11:6f:11:1e:ab:d5:83:21:b7:9a:25:12:
3f:ee:c6:24:9a:dd:51:ae:53:8c:e0:43:a1:60:eb:
fd:99:83:82:6e:10:5b:53:b1:11:50:b3:55:df:82:
f9:d6:ec:3e:ca:fa:95:19:5d:09:1e:dc:4a:38:85:
33:2d:05:04:57:3b:9d:32:25:5c:e7:c0:95:ca:43:
d6:56:d5:25:ee:1e:ea:6f:31:6b:11:8c:67:26:e9:
3d:d5:40:7f:95:1c:4e:eb:84:8b:bd:ed:9b:a3:ae:
cb:bf:dd:06:2b:35:fd:52:78:b9:e5:5c:8a:90:40:
68:08:e6:67:d6:2b:b2:0e:5d:70:10:39:cf:46:aa:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:91:E6:B5:4F:A5:F1:55:6A:2D:A4:E1:10:07:9F:DC:49:DF:14:79
X509v3 Authority Key Identifier:
keyid:A9:4F:0A:32:A6:02:D6:41:FB:28:4D:99:28:D3:2B:F8:4F:60:A4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qU8KMqYC1kH7KE2ZKNMr-E9gpNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/eb38d3-a4a1-4869-893f-b4605a8b24ba/1/qU8KMqYC1kH7KE2ZKNMr-E9gpNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/eb38d3-a4a1-4869-893f-b4605a8b24ba/1/qU8KMqYC1kH7KE2ZKNMr-E9gpNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2e:ba:8a:b7:e4:de:c4:1b:01:7f:b4:78:a1:7b:45:9c:62:
99:b8:0b:0a:99:39:bf:38:16:18:a2:b3:e1:9b:47:81:1e:6b:
fd:8f:62:51:cc:9a:43:0e:a3:15:5f:51:73:8f:e0:d2:79:22:
35:18:24:02:47:17:90:e3:57:77:e6:3a:89:a3:bc:27:23:3c:
7a:f6:12:7b:24:18:36:5b:e4:99:85:0a:d2:71:61:32:99:b9:
ac:95:01:5f:58:3c:38:0c:1a:2c:6d:14:3f:19:1e:e6:82:df:
df:0e:6d:9e:e2:ab:96:36:16:a5:51:05:d6:ef:7e:00:0b:cf:
5f:af:ab:0a:b0:e9:6e:0c:92:bf:c3:9c:dd:9f:83:32:20:86:
da:67:23:c1:93:c6:a0:b1:13:f1:c5:95:bc:37:e8:d6:4c:1f:
a9:88:f3:29:51:14:18:0d:d9:08:17:3a:50:7b:fa:66:0e:2c:
68:7a:a0:fb:fa:87:f3:89:ab:db:cc:ae:4a:b0:85:fa:fc:09:
aa:cc:04:a1:b2:9b:37:86:93:a3:8e:59:d4:4a:02:14:34:c8:
31:7b:82:7e:81:f8:f3:dc:be:0e:7c:a3:36:d3:91:de:a7:a9:
f3:a5:8f:71:ac:4e:69:1b:84:ee:18:36:2f:b9:c7:d9:3f:8c:
2f:f1:85:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:42 2025 by rpki-client