![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/nyRmMuhX83DDA491VF8SK46xbRo.mft
File: nyRmMuhX83DDA491VF8SK46xbRo.mft (raw, json)
Hash identifier: +zN9wdDAq2i127uNq198l3UKp3sdnSQNTG16QKFqBe4=
Subject key identifier: 67:2B:66:EC:41:5A:9F:07:E6:2A:4F:4C:29:F0:CF:31:2B:0E:16:2E
Authority key identifier: 9F:24:66:32:E8:57:F3:70:C3:03:8F:75:54:5F:12:2B:8E:B1:6D:1A
Certificate issuer: /CN=9f246632e857f370c3038f75545f122b8eb16d1a
Certificate serial: 018B8F7A5EB5E1FAAC3C11264D09E398DEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyRmMuhX83DDA491VF8SK46xbRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/nyRmMuhX83DDA491VF8SK46xbRo.mft
Manifest number: 0864
Signing time: Thu 02 Nov 2023 10:00:43 +0000
Manifest this update: Thu 02 Nov 2023 10:00:43 +0000
Manifest next update: Fri 03 Nov 2023 10:00:43 +0000
Files and hashes: 1: nyRmMuhX83DDA491VF8SK46xbRo.crl (hash: 9AGoS12jhEjrWJ2MRwWHDLYOw8Q7v1GtmIMqnU1O0xo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:7a:5e:b5:e1:fa:ac:3c:11:26:4d:09:e3:98:de:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f246632e857f370c3038f75545f122b8eb16d1a
Validity
Not Before: Nov 2 10:00:43 2023 GMT
Not After : Nov 3 10:00:43 2023 GMT
Subject: CN=672b66ec415a9f07e62a4f4c29f0cf312b0e162e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3a:ab:e9:e0:64:ae:37:93:f4:35:c3:1b:fd:
37:f2:62:9c:4e:8d:18:2e:ed:aa:e4:be:d1:53:b3:
01:7b:93:97:be:1d:45:96:ff:4e:83:db:f0:2f:cc:
94:43:cc:c6:18:7f:81:c6:3e:ec:d1:87:44:2d:9b:
ca:11:60:71:29:82:a9:d6:cb:ac:e4:d4:19:a4:e9:
78:61:b7:50:32:a8:88:94:2b:10:47:50:0e:21:ca:
6d:4b:49:73:35:34:5c:df:86:27:82:1d:38:76:cf:
49:e3:4a:24:18:20:34:11:21:47:b9:ad:8b:97:f5:
62:81:45:e5:02:12:c9:40:2b:15:45:b2:97:04:26:
8e:df:86:24:04:46:cc:f8:a4:d2:8f:55:8a:27:83:
9b:b0:3c:cb:d0:cb:8c:5d:02:50:c3:b3:04:89:5e:
eb:96:f3:18:01:39:30:5c:db:c9:86:b2:48:d3:1c:
c1:b3:b2:29:c5:e5:0b:53:0b:39:92:51:07:0f:bc:
14:3e:bf:0e:0e:16:4a:37:15:bd:f4:a9:34:bb:d6:
f6:3c:ea:ef:6d:50:5d:52:a7:26:db:9a:09:26:4d:
27:0b:18:47:95:b8:99:ba:76:1d:10:9e:8b:e4:6a:
ca:55:fe:1b:d8:35:5a:f8:38:fb:54:94:d8:58:a4:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2B:66:EC:41:5A:9F:07:E6:2A:4F:4C:29:F0:CF:31:2B:0E:16:2E
X509v3 Authority Key Identifier:
keyid:9F:24:66:32:E8:57:F3:70:C3:03:8F:75:54:5F:12:2B:8E:B1:6D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyRmMuhX83DDA491VF8SK46xbRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/nyRmMuhX83DDA491VF8SK46xbRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/nyRmMuhX83DDA491VF8SK46xbRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6e:c7:90:9a:29:79:3d:09:8c:19:e7:d5:27:01:4e:ce:db:
be:8e:93:43:6b:7d:f0:9b:7f:38:37:62:d1:c4:d6:bc:73:e4:
26:2c:c5:9f:be:51:1d:2f:bb:fc:24:10:ce:2f:9d:19:eb:81:
ad:9e:8e:35:f5:96:4a:f6:26:3d:f6:59:94:8b:ce:7d:86:d3:
1d:8c:97:5b:9a:f7:68:44:72:48:fe:1b:dd:05:6e:0b:33:44:
b2:b8:cf:15:26:c9:8a:ca:7f:8c:30:4b:b2:99:13:28:c4:59:
18:fa:3f:35:a3:60:1b:f0:48:d4:d1:f0:23:9b:45:51:d6:74:
71:95:01:dc:30:4d:8f:96:05:e7:c7:7f:06:81:bb:5d:b3:6e:
33:50:50:11:61:7e:63:41:f6:c8:b6:18:18:d9:9d:e4:ec:15:
48:f9:40:52:04:b8:45:fb:97:b6:3e:ed:6a:39:64:96:1d:27:
1d:fb:53:43:81:fc:96:44:d7:0c:89:80:8b:c4:8a:eb:99:fc:
35:15:01:66:a2:95:23:78:d5:fb:ac:99:ba:ba:66:83:41:8b:
95:87:d0:04:ec:8c:e8:76:40:f9:f1:2c:dd:50:e4:ca:65:db:
fb:d8:48:0a:fd:94:ca:fe:9b:90:b8:a3:70:c0:ae:b3:97:e2:
31:54:fb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:26 2025 by rpki-client