![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.mft
File: 503177A5FC39DD005C41B770207D6705510713A8.mft (raw, json)
Hash identifier: Iff/B5NVsWJhgTSkZorg8WruUHVwKsKfJIIaTqWH9gc=
Subject key identifier: B5:CC:79:2F:D7:DB:B6:6A:EC:BA:EA:E5:3F:C8:19:B7:FA:0D:D0:50
Authority key identifier: 50:31:77:A5:FC:39:DD:00:5C:41:B7:70:20:7D:67:05:51:07:13:A8
Certificate issuer: /CN=503177A5FC39DD005C41B770207D6705510713A8
Certificate serial: 3DB4F7E349243BBB433FDC143BBB1BD148873D91
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/503177A5FC39DD005C41B770207D6705510713A8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.mft
Manifest number: 09
Signing time: Wed 26 Jun 2024 09:17:54 +0000
Manifest this update: Wed 26 Jun 2024 09:12:54 +0000
Manifest next update: Thu 27 Jun 2024 10:34:54 +0000
Files and hashes: 1: 503177A5FC39DD005C41B770207D6705510713A8.crl (hash: DnODyoBnZfQAFt9KlDXPbFV+iSFstSbxf5tzwwEkkoQ=)
2: 326131323a646434373a383430303a3a2f34352d3438203d3e20323033303639.roa (hash: hf0sTrKrDJ4boI08ZHhNaHWTmMq+esR34eLQdUrR3Dc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:b4:f7:e3:49:24:3b:bb:43:3f:dc:14:3b:bb:1b:d1:48:87:3d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=503177A5FC39DD005C41B770207D6705510713A8
Validity
Not Before: Jun 26 09:12:54 2024 GMT
Not After : Jun 27 10:34:54 2024 GMT
Subject: CN=B5CC792FD7DBB66AECBAEAE53FC819B7FA0DD050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:e4:fe:f4:86:4a:96:f6:51:8f:01:f0:de:
51:20:fa:a1:16:c8:6f:b4:96:f8:83:0d:c5:1c:6d:
81:fd:a7:3d:2f:8f:ca:6d:2e:cc:48:db:07:82:b1:
25:db:ac:0c:27:05:e3:78:12:ff:5f:35:d9:bd:1f:
ad:c2:60:06:da:a9:7b:01:b0:ed:92:dd:fa:be:68:
11:bb:24:23:56:fc:d9:5d:b8:23:21:ca:07:01:f0:
87:82:55:31:af:1c:1f:47:6f:95:95:69:57:9c:d6:
8e:60:48:0f:86:21:15:61:3c:34:7e:07:59:0b:8a:
91:6c:fc:b6:06:ce:ae:9f:42:c3:b3:41:79:c6:3e:
de:42:09:23:bb:bd:56:d8:ca:d8:f5:e9:ac:14:1f:
0e:28:d8:53:63:71:3c:f4:41:f1:cd:f0:d9:1a:d0:
8c:fe:4d:3a:7d:f4:ea:85:aa:a1:bd:8d:f8:11:71:
5e:cc:65:38:8b:17:ff:0b:7b:32:e9:14:7f:b6:f7:
c7:4a:b1:80:4c:38:01:7b:1a:4c:c2:cb:d0:57:b2:
99:01:87:fe:4e:67:2b:4f:62:91:de:fb:66:e5:46:
5c:83:a5:40:07:23:7b:83:fb:a6:74:dc:f9:bd:67:
72:04:fe:37:84:b4:6d:26:0b:da:21:9a:30:03:97:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CC:79:2F:D7:DB:B6:6A:EC:BA:EA:E5:3F:C8:19:B7:FA:0D:D0:50
X509v3 Authority Key Identifier:
keyid:50:31:77:A5:FC:39:DD:00:5C:41:B7:70:20:7D:67:05:51:07:13:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/503177A5FC39DD005C41B770207D6705510713A8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ce:e1:69:4b:9b:d5:57:19:fd:b0:fc:e8:79:88:9b:76:50:
2b:a0:e3:4e:c9:89:42:7d:e0:2d:d4:cb:37:38:d6:6f:26:87:
24:97:63:07:5f:46:7e:9e:f1:fc:f6:95:e0:a6:a3:26:34:05:
7f:b1:2a:c5:a8:84:be:6c:fa:5b:37:91:29:b9:d4:6b:b3:d4:
1d:ad:20:51:36:d5:34:fd:a6:75:03:63:e3:14:12:df:80:21:
7c:6f:4c:ba:50:7d:ae:64:2a:d0:88:86:89:50:d9:0d:c9:70:
31:47:78:9c:9c:47:50:61:3c:45:f8:02:fc:a4:66:01:d0:d9:
cd:e6:f6:b0:04:bc:d4:0e:eb:a8:ba:bb:d3:ab:03:14:35:5f:
b5:4b:08:36:01:01:08:3f:a3:34:b1:12:27:d4:a2:6f:cd:ad:
8b:ea:2e:14:bd:de:65:69:d7:f5:81:66:1d:81:ea:cc:15:18:
fd:26:7a:f0:bb:b6:c2:e8:34:12:0e:d0:ce:9e:45:28:cc:a9:
97:a7:fc:c6:94:51:16:3a:fb:e5:7d:fe:78:2a:c3:a9:a0:52:
6d:bf:6b:33:d7:eb:4f:cd:62:6f:1a:07:7e:71:12:cf:c6:53:
ef:7a:90:1a:91:45:fd:aa:bd:05:29:95:1d:24:62:94:a2:13:
d2:98:04:b7
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUPbT340kkO7tDP9wUO7sb0UiHPZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAzMTc3QTVGQzM5REQwMDVDNDFCNzcwMjA3RDY3MDU1
MTA3MTNBODAeFw0yNDA2MjYwOTEyNTRaFw0yNDA2MjcxMDM0NTRaMDMxMTAvBgNV
BAMTKEI1Q0M3OTJGRDdEQkI2NkFFQ0JBRUFFNTNGQzgxOUI3RkEwREQwNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCswOT+9IZKlvZRjwHw3lEg+qEW
yG+0lviDDcUcbYH9pz0vj8ptLsxI2weCsSXbrAwnBeN4Ev9fNdm9H63CYAbaqXsB
sO2S3fq+aBG7JCNW/NlduCMhygcB8IeCVTGvHB9Hb5WVaVec1o5gSA+GIRVhPDR+
B1kLipFs/LYGzq6fQsOzQXnGPt5CCSO7vVbYytj16awUHw4o2FNjcTz0QfHN8Nka
0Iz+TTp99OqFqqG9jfgRcV7MZTiLF/8LezLpFH+298dKsYBMOAF7GkzCy9BXspkB
h/5OZytPYpHe+2blRlyDpUAHI3uD+6Z03Pm9Z3IE/jeEtG0mC9ohmjADl4oNAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUtcx5L9fbtmrsuurlP8gZt/oN0FAwHwYDVR0j
BBgwFoAUUDF3pfw53QBcQbdwIH1nBVEHE6gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjBiZThmN2ItZDQ0Yy00Y2EyLWJlYjMtMmRkNDFiYWVl
ODM3LzMvNTAzMTc3QTVGQzM5REQwMDVDNDFCNzcwMjA3RDY3MDU1MTA3MTNBOC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03Mjc4LTQ2
Y2YtYWJkMS05OWNkMWZkMmJlNGUvNi81MDMxNzdBNUZDMzlERDAwNUM0MUI3NzAy
MDdENjcwNTUxMDcxM0E4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzYwYmU4ZjdiLWQ0NGMtNGNhMi1iZWIzLTJkZDQxYmFlZTgzNy8zLzUwMzE3N0E1
RkMzOUREMDA1QzQxQjc3MDIwN0Q2NzA1NTEwNzEzQTgubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBIzuFp
S5vVVxn9sPzoeYibdlAroONOyYlCfeAt1Ms3ONZvJockl2MHX0Z+nvH89pXgpqMm
NAV/sSrFqIS+bPpbN5EpudRrs9QdrSBRNtU0/aZ1A2PjFBLfgCF8b0y6UH2uZCrQ
iIaJUNkNyXAxR3icnEdQYTxF+AL8pGYB0NnN5vawBLzUDuuourvTqwMUNV+1Swg2
AQEIP6M0sRIn1KJvza2L6i4Uvd5ladf1gWYdgerMFRj9Jnrwu7bC6DQSDtDOnkUo
zKmXp/zGlFEWOvvlff54KsOpoFJtv2sz1+tPzWJvGgd+cRLPxlPvepAakUX9qr0F
KZUdJGKUohPSmAS3
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:15 2025 by rpki-client