![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/13/4E25B674B45A4F99EB569891A3C77D13A308FEEE.mft
File: 4E25B674B45A4F99EB569891A3C77D13A308FEEE.mft (raw, json)
Hash identifier: zditNDEoQmsKo4xI21hBLXaE4Vh1OaTP1Q8Bm5Io+s8=
Subject key identifier: 6E:99:AD:6F:67:9C:DB:C1:1C:52:6A:0F:07:4C:02:53:08:BF:28:FF
Authority key identifier: 4E:25:B6:74:B4:5A:4F:99:EB:56:98:91:A3:C7:7D:13:A3:08:FE:EE
Certificate issuer: /CN=4e25b674b45a4f99eb569891a3c77d13a308feee
Certificate serial: 27B07E7AE896E33AC9BBB94EC4031686B46615CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiW2dLRaT5nrVpiRo8d9E6MI_u4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/13/4E25B674B45A4F99EB569891A3C77D13A308FEEE.mft
Manifest number: 0250
Signing time: Wed 24 Jan 2024 04:35:41 +0000
Manifest this update: Wed 24 Jan 2024 04:30:39 +0000
Manifest next update: Thu 25 Jan 2024 08:32:39 +0000
Files and hashes: 1: 4E25B674B45A4F99EB569891A3C77D13A308FEEE.crl (hash: Z5tOQrHulhLUajilEiqHeajPSXtjkcd9T9rzbqA5IUg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b0:7e:7a:e8:96:e3:3a:c9:bb:b9:4e:c4:03:16:86:b4:66:15:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e25b674b45a4f99eb569891a3c77d13a308feee
Validity
Not Before: Jan 24 04:30:39 2024 GMT
Not After : Jan 25 08:32:39 2024 GMT
Subject: CN=6E99AD6F679CDBC11C526A0F074C025308BF28FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:f6:eb:b8:61:ba:de:38:06:4d:40:9e:f7:
85:51:86:b0:81:67:6a:fa:ca:1d:7e:92:20:60:3b:
2f:a2:1a:a3:5a:8d:76:d1:9b:32:92:8c:aa:b3:1c:
00:f0:82:95:91:fb:d9:df:a3:a9:40:3f:83:11:92:
fe:17:2d:4e:38:03:ee:00:b6:5b:27:90:1b:73:6e:
44:70:f0:0e:1b:00:c6:12:a8:39:e1:0a:64:c6:89:
3e:d0:6f:88:56:9e:62:39:12:09:e2:57:1a:b5:89:
a6:e2:40:7e:cf:b8:63:47:2f:32:c7:65:50:07:31:
44:12:a8:5e:57:59:96:d5:28:1e:3e:51:f5:58:63:
28:e8:44:aa:cf:f9:48:d9:1f:28:ff:d0:3f:14:5b:
d0:6e:99:5c:7f:a9:70:16:46:f7:8c:c3:75:87:8b:
54:f2:96:2f:34:4a:59:24:17:4f:c7:51:8a:3a:cd:
7a:28:d8:ea:bd:97:e2:a5:97:08:20:99:02:8e:f4:
9b:67:05:96:3f:48:87:f3:e8:f8:73:da:1c:7c:63:
b9:d4:97:9e:c8:f5:8a:9f:09:cf:9f:3f:8e:c8:66:
0b:ca:ca:78:08:78:a3:1e:ce:2a:6c:ed:f2:83:30:
70:7d:ca:ed:bf:17:f5:44:cf:e2:cc:08:b7:06:8b:
0f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:99:AD:6F:67:9C:DB:C1:1C:52:6A:0F:07:4C:02:53:08:BF:28:FF
X509v3 Authority Key Identifier:
keyid:4E:25:B6:74:B4:5A:4F:99:EB:56:98:91:A3:C7:7D:13:A3:08:FE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/13/4E25B674B45A4F99EB569891A3C77D13A308FEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiW2dLRaT5nrVpiRo8d9E6MI_u4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/13/4E25B674B45A4F99EB569891A3C77D13A308FEEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3c:9e:e3:88:f2:67:f8:27:31:b3:e9:7f:91:06:8c:f4:74:
70:97:34:75:53:04:f3:6e:57:d7:77:be:63:60:25:61:6f:1c:
c1:75:7e:82:fa:bf:28:4a:44:aa:b9:9d:9b:6f:93:ed:91:7d:
ec:b2:e0:86:c1:86:84:9b:95:af:f6:c1:11:ee:9f:b8:7c:2b:
6c:e7:fb:81:9d:1c:b1:33:f0:14:01:e9:73:9c:1c:d1:7d:fb:
23:8f:4e:99:47:ed:a6:30:48:5d:0b:cc:06:a1:41:96:c2:c6:
01:04:32:3f:8d:4c:8d:28:91:75:d0:5f:53:a8:0b:0d:b7:f1:
7d:a1:e8:2f:2f:1a:6b:16:66:0d:31:b3:7d:2b:ec:cb:b5:7c:
ff:e1:9f:b1:49:bf:1b:db:fd:4a:db:69:bc:b5:8c:04:2a:ee:
73:75:4a:9c:25:77:a1:da:5e:65:a6:c2:a4:1c:a9:3a:50:b5:
3b:76:47:e5:4c:d7:56:14:df:66:50:95:23:88:aa:62:a4:ff:
77:29:7c:fb:c7:22:d4:50:8d:8d:cf:3e:65:77:fe:7d:9b:47:
52:19:12:5d:93:c0:99:ba:7e:50:e7:b9:29:4c:be:ba:64:06:
55:95:3c:44:62:64:42:db:d0:79:65:e1:6c:2e:73:8f:46:2b:
15:25:5f:e5
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUJ7B+euiW4zrJu7lOxAMWhrRmFcswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGUyNWI2NzRiNDVhNGY5OWViNTY5ODkxYTNjNzdkMTNh
MzA4ZmVlZTAeFw0yNDAxMjQwNDMwMzlaFw0yNDAxMjUwODMyMzlaMDMxMTAvBgNV
BAMTKDZFOTlBRDZGNjc5Q0RCQzExQzUyNkEwRjA3NEMwMjUzMDhCRjI4RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOm/bruGG63jgGTUCe94VRhrCB
Z2r6yh1+kiBgOy+iGqNajXbRmzKSjKqzHADwgpWR+9nfo6lAP4MRkv4XLU44A+4A
tlsnkBtzbkRw8A4bAMYSqDnhCmTGiT7Qb4hWnmI5EgniVxq1iabiQH7PuGNHLzLH
ZVAHMUQSqF5XWZbVKB4+UfVYYyjoRKrP+UjZHyj/0D8UW9BumVx/qXAWRveMw3WH
i1Tyli80SlkkF0/HUYo6zXoo2Oq9l+KllwggmQKO9JtnBZY/SIfz6Phz2hx8Y7nU
l57I9YqfCc+fP47IZgvKyngIeKMezips7fKDMHB9yu2/F/VEz+LMCLcGiw/bAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUbpmtb2ec28EcUmoPB0wCUwi/KP8wHwYDVR0j
BBgwFoAUTiW2dLRaT5nrVpiRo8d9E6MI/u4wDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzdiNTc1ZWE3LTc4NmYtNGIyZC1hNDU1LTc5ZDdmYzQz
ZWNlZS8xMy80RTI1QjY3NEI0NUE0Rjk5RUI1Njk4OTFBM0M3N0QxM0EzMDhGRUVF
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVGlXMmRMUmFUNW5yVnBpUm84ZDlF
Nk1JX3U0LmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YjU3NWVh
Ny03ODZmLTRiMmQtYTQ1NS03OWQ3ZmM0M2VjZWUvMTMvNEUyNUI2NzRCNDVBNEY5
OUVCNTY5ODkxQTNDNzdEMTNBMzA4RkVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHE8nuOI8mf4JzGz
6X+RBoz0dHCXNHVTBPNuV9d3vmNgJWFvHMF1foL6vyhKRKq5nZtvk+2Rfeyy4IbB
hoSbla/2wRHun7h8K2zn+4GdHLEz8BQB6XOcHNF9+yOPTplH7aYwSF0LzAahQZbC
xgEEMj+NTI0okXXQX1OoCw238X2h6C8vGmsWZg0xs30r7Mu1fP/hn7FJvxvb/Urb
aby1jAQq7nN1Spwld6HaXmWmwqQcqTpQtTt2R+VM11YU32ZQlSOIqmKk/3cpfPvH
ItRQjY3PPmV3/n2bR1IZEl2TwJm6flDnuSlMvrpkBlWVPERiZELb0Hll4Wwuc49G
KxUlX+U=
-----END CERTIFICATE-----
Generated at Tue Feb 18 06:52:39 2025 by rpki-client