![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/794dcae4-f54d-4264-a4cd-b681163af61e/0/5EA0C2FD9805D498E11665F9293C369A95C62DC3.mft
File: 5EA0C2FD9805D498E11665F9293C369A95C62DC3.mft (raw, json)
Hash identifier: D+lgOMLm6y+wpYmHqFfRfXIlg/Hrjjpwz7DoeMxsgiw=
Subject key identifier: 2D:4B:9A:BC:7E:83:AC:67:CD:C4:A4:38:D4:18:82:1A:43:2A:5E:5D
Authority key identifier: 5E:A0:C2:FD:98:05:D4:98:E1:16:65:F9:29:3C:36:9A:95:C6:2D:C3
Certificate issuer: /CN=5ea0c2fd9805d498e11665f9293c369a95c62dc3
Certificate serial: 1E49FCF21C7FA01DAD1D48E3BD0DF4F68B719E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqDC_ZgF1JjhFmX5KTw2mpXGLcM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/794dcae4-f54d-4264-a4cd-b681163af61e/0/5EA0C2FD9805D498E11665F9293C369A95C62DC3.mft
Manifest number: 01
Signing time: Mon 06 May 2024 21:09:01 +0000
Manifest this update: Mon 06 May 2024 21:04:01 +0000
Manifest next update: Tue 07 May 2024 21:52:01 +0000
Files and hashes: 1: 5EA0C2FD9805D498E11665F9293C369A95C62DC3.crl (hash: J6U2yRB7Q5/VAZJqqmEDvJrMp2h3WL6mQStX8o2we/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:49:fc:f2:1c:7f:a0:1d:ad:1d:48:e3:bd:0d:f4:f6:8b:71:9e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea0c2fd9805d498e11665f9293c369a95c62dc3
Validity
Not Before: May 6 21:04:01 2024 GMT
Not After : May 7 21:52:01 2024 GMT
Subject: CN=2D4B9ABC7E83AC67CDC4A438D418821A432A5E5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:5e:fd:29:2a:88:85:9a:41:8c:c1:1c:da:
ad:7c:0c:c7:02:f2:8d:e7:0a:1b:14:e4:c5:06:7b:
93:4b:64:b9:3f:22:4e:27:49:a4:52:6b:a5:8d:0f:
b7:e1:5c:59:d0:b5:61:4f:26:7a:2d:33:57:da:6d:
23:1d:64:be:1b:7e:fc:01:89:5e:9d:ab:57:25:08:
e9:47:f0:64:2c:f6:70:56:67:4e:08:a2:87:b5:3a:
33:fb:07:f5:00:2b:41:75:be:35:ee:69:a7:5f:7b:
79:69:7d:00:bf:7b:ef:5b:d7:b5:89:00:8c:8e:2b:
72:d9:b8:39:97:f1:e2:2e:d5:7e:2a:cc:b4:64:7f:
71:12:60:79:70:65:a5:6d:1a:3c:d3:56:08:0d:80:
56:28:e0:b6:f4:df:3c:47:c8:a5:0f:9e:e6:55:27:
b8:09:d3:2e:93:1a:41:e0:33:5b:be:3e:4b:27:0f:
23:cf:5e:ee:5c:9a:b0:15:5a:16:f2:8d:83:b4:a2:
1f:25:1c:6d:43:e5:38:b2:6f:5c:52:1b:a0:24:47:
4d:99:f5:a0:db:e5:c9:bd:5c:5b:1b:75:3d:76:63:
85:02:79:08:89:43:29:da:f1:5b:1b:82:45:e8:3f:
15:03:e3:76:4a:3c:ee:68:c9:c2:4b:83:da:a6:9e:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4B:9A:BC:7E:83:AC:67:CD:C4:A4:38:D4:18:82:1A:43:2A:5E:5D
X509v3 Authority Key Identifier:
keyid:5E:A0:C2:FD:98:05:D4:98:E1:16:65:F9:29:3C:36:9A:95:C6:2D:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/794dcae4-f54d-4264-a4cd-b681163af61e/0/5EA0C2FD9805D498E11665F9293C369A95C62DC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqDC_ZgF1JjhFmX5KTw2mpXGLcM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/794dcae4-f54d-4264-a4cd-b681163af61e/0/5EA0C2FD9805D498E11665F9293C369A95C62DC3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e2:6b:5e:35:fa:a2:2b:96:0d:2e:d9:77:24:ae:7d:d2:f1:
d6:5a:25:6a:9b:ea:ad:c8:e5:db:6b:3c:4e:ce:3e:fe:fe:a6:
75:a2:cf:3f:ea:51:c8:d0:12:1b:1a:ca:0c:15:4e:56:cd:2f:
b1:9a:3c:e3:22:17:ae:7b:0a:86:d0:d4:1f:cc:8e:a3:73:48:
f5:c9:23:78:ce:a6:1f:84:35:b5:db:08:81:21:91:a9:2c:38:
b6:c7:02:eb:39:22:76:3e:63:34:00:b6:1d:a7:9f:0b:2d:63:
28:93:c1:0f:cf:e5:ff:14:01:06:a1:6c:62:d9:e9:7e:90:5e:
00:f0:c3:59:73:51:f1:22:0a:fc:59:98:3d:e2:8d:46:fd:74:
d7:4e:85:ab:ae:90:87:d5:aa:7d:a2:da:c1:07:62:fa:6c:03:
c3:64:68:4c:6f:f0:4d:42:de:81:09:df:45:7d:84:d1:43:d8:
54:cf:6f:59:1c:d7:3f:92:c5:4f:bd:52:21:c3:76:67:46:1d:
83:a5:b8:91:ad:20:03:1a:b9:25:d7:c0:c1:6c:aa:53:8c:5b:
55:50:ff:af:7e:4d:cc:d2:97:5a:5f:02:aa:9b:b7:3f:34:4a:
3c:9a:33:db:ef:32:22:8d:b1:96:05:76:10:0a:62:8d:3a:fa:
ff:9c:8e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:42:28 2025 by rpki-client