![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/bbd4c4-d2cd-41b7-9a4a-855169842eac/1/_eWXc9XgOHDIfVcJCXb7M7A8aF4.mft
File: _eWXc9XgOHDIfVcJCXb7M7A8aF4.mft (raw, json)
Hash identifier: PysjV/r9yO7hSzklKPScIxXpncDRx3RSG+TrJM0IabQ=
Subject key identifier: 7B:E7:17:87:7E:4F:56:90:BB:34:14:E2:39:1E:BB:ED:F1:49:9B:C4
Authority key identifier: FD:E5:97:73:D5:E0:38:70:C8:7D:57:09:09:76:FB:33:B0:3C:68:5E
Certificate issuer: /CN=fde59773d5e03870c87d57090976fb33b03c685e
Certificate serial: 018DC6647E72DCE8F9F2D5FEADEC97470AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_eWXc9XgOHDIfVcJCXb7M7A8aF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/bbd4c4-d2cd-41b7-9a4a-855169842eac/1/_eWXc9XgOHDIfVcJCXb7M7A8aF4.mft
Manifest number: 09A7
Signing time: Tue 20 Feb 2024 12:01:31 +0000
Manifest this update: Tue 20 Feb 2024 12:01:31 +0000
Manifest next update: Wed 21 Feb 2024 12:01:31 +0000
Files and hashes: 1: K7-XSSrAWczfDlLYN8VolhUffng.roa (hash: WsVsS/o5uGNS+GdTaLap26BfVQmTA3l5ylr+XLjXCaQ=)
2: Tu3qaqSRJZvoicdUyDYbvO9l6b4.roa (hash: jGfO/ABuBwBgqdAcmL4Vw0Xu6RJlR0ZFukftYu3nAdw=)
3: _eWXc9XgOHDIfVcJCXb7M7A8aF4.crl (hash: dm4ywhMNy91AuibsWLv2DikxD01oY45hRTX0BI0WJXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:64:7e:72:dc:e8:f9:f2:d5:fe:ad:ec:97:47:0a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde59773d5e03870c87d57090976fb33b03c685e
Validity
Not Before: Feb 20 12:01:31 2024 GMT
Not After : Feb 21 12:01:31 2024 GMT
Subject: CN=7be717877e4f5690bb3414e2391ebbedf1499bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:ad:c3:e5:ce:e4:fa:82:60:13:7b:6d:04:
2b:05:d5:ed:35:0e:e0:20:ca:69:6a:96:20:68:5c:
d9:11:95:71:cf:8b:4e:cb:52:5a:d0:ac:d7:b8:6e:
83:5b:02:14:2f:0d:50:4a:b8:1e:c6:3c:b1:ea:8f:
a5:d4:2a:c1:ab:99:12:44:f2:bd:ee:70:63:8a:2d:
51:e5:9a:40:cd:ea:e4:bd:fd:70:e9:3c:7d:80:8b:
6e:f8:16:16:6f:50:5e:b4:75:7b:bc:5d:a2:e0:00:
be:ec:06:fb:2b:fa:c2:14:12:49:e7:1c:9c:2c:ff:
2d:1b:6a:aa:d4:ef:3a:72:ac:08:b0:26:bd:33:9d:
dd:6e:49:5b:53:76:1d:be:a6:6d:b7:54:c8:78:b8:
96:e3:b9:1b:6d:6f:ea:30:82:c5:62:ae:7f:a5:fd:
b8:88:ef:33:37:ea:8d:a9:d4:32:5e:2d:2f:9a:2e:
fd:3d:6d:c3:46:e9:34:b1:28:6d:c7:ef:a7:c6:2e:
6b:58:3c:de:c6:c3:10:52:f5:3c:34:ee:cf:58:bf:
e6:bb:a4:d2:9a:d1:e9:aa:e4:2e:23:30:34:53:52:
5b:ef:c5:17:b3:b4:09:3d:dd:9f:af:b4:16:33:27:
b0:c8:0d:20:26:43:08:39:d7:aa:bf:78:9f:84:bb:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E7:17:87:7E:4F:56:90:BB:34:14:E2:39:1E:BB:ED:F1:49:9B:C4
X509v3 Authority Key Identifier:
keyid:FD:E5:97:73:D5:E0:38:70:C8:7D:57:09:09:76:FB:33:B0:3C:68:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eWXc9XgOHDIfVcJCXb7M7A8aF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bbd4c4-d2cd-41b7-9a4a-855169842eac/1/_eWXc9XgOHDIfVcJCXb7M7A8aF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bbd4c4-d2cd-41b7-9a4a-855169842eac/1/_eWXc9XgOHDIfVcJCXb7M7A8aF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0e:af:51:02:1c:5c:54:f4:6a:8b:4d:ed:23:fa:32:07:4a:
d2:60:3c:87:64:a4:e7:20:a6:57:9c:09:c0:06:b0:5a:d1:e8:
26:1d:46:2c:a9:3e:ba:7b:c8:a6:98:83:0f:7a:74:f5:14:f7:
4b:db:f7:1b:51:87:47:28:d9:6a:b3:91:b0:1a:21:02:d4:50:
20:db:ed:00:3f:44:e8:2f:01:6d:54:56:e9:89:4d:a6:38:57:
66:9a:88:d0:c2:b0:fc:40:fb:c2:e3:1a:48:cc:9a:27:7a:10:
a9:25:73:b1:e0:85:9b:1d:eb:fa:08:f3:9d:26:9f:18:f5:d2:
58:ae:48:49:e8:e1:9b:7b:09:d2:d3:22:68:e3:ea:bf:03:e9:
62:37:81:c7:7e:de:a7:23:eb:3a:0c:0f:80:9d:29:dc:03:b2:
18:61:13:11:f8:3f:b3:ce:a7:5a:2e:51:18:a7:f8:c3:1f:c4:
40:84:9d:62:bd:02:0a:e2:aa:b6:30:6b:18:54:6e:42:c9:55:
58:9e:1e:d3:22:5a:59:52:21:d8:e6:0d:b2:3a:a6:1a:ce:b9:
8b:19:25:b9:a1:89:f5:07:04:98:77:21:58:29:5c:49:74:ef:
03:a7:1f:47:46:a1:57:3d:0b:33:42:40:49:f1:2f:ab:0b:20:
54:b1:63:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:42 2025 by rpki-client