![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/207/77FEF1A87BF2B44B6EBBE88A85B74B0E547F6BB3.mft
File: 77FEF1A87BF2B44B6EBBE88A85B74B0E547F6BB3.mft (raw, json)
Hash identifier: d2BeYD0FnCVxHPQZxLR292BNWYytMs7mh0sCERE7z3s=
Subject key identifier: EE:4B:39:B4:75:64:72:A8:3D:53:18:94:8D:20:0D:28:ED:68:FC:C5
Authority key identifier: 77:FE:F1:A8:7B:F2:B4:4B:6E:BB:E8:8A:85:B7:4B:0E:54:7F:6B:B3
Certificate issuer: /CN=77fef1a87bf2b44b6ebbe88a85b74b0e547f6bb3
Certificate serial: 05CD6D786A0715BF6DF0DDE36053CDF3675707C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_7xqHvytEtuu-iKhbdLDlR_a7M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/207/77FEF1A87BF2B44B6EBBE88A85B74B0E547F6BB3.mft
Manifest number: 0525
Signing time: Wed 20 Dec 2023 19:18:40 +0000
Manifest this update: Wed 20 Dec 2023 19:13:40 +0000
Manifest next update: Thu 21 Dec 2023 22:47:40 +0000
Files and hashes: 1: 77FEF1A87BF2B44B6EBBE88A85B74B0E547F6BB3.crl (hash: D7Gw8kTrE3dcwG/xeztmcPDgWtqKe1e/nrmM24b9RBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:cd:6d:78:6a:07:15:bf:6d:f0:dd:e3:60:53:cd:f3:67:57:07:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fef1a87bf2b44b6ebbe88a85b74b0e547f6bb3
Validity
Not Before: Dec 20 19:13:40 2023 GMT
Not After : Dec 21 22:47:40 2023 GMT
Subject: CN=EE4B39B4756472A83D5318948D200D28ED68FCC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:a0:b2:c5:38:c0:96:fd:b7:4c:45:4b:4e:
12:18:58:03:90:be:3b:2e:3b:c6:57:58:11:02:31:
5d:90:c9:ed:97:db:fe:30:06:f3:40:47:45:68:6f:
bd:23:19:f0:52:bc:c8:5d:77:51:f6:00:ac:0e:89:
e4:9f:ad:4a:97:31:73:23:2d:72:28:6d:8a:9c:5e:
e1:31:5b:5f:24:eb:6d:c6:c3:92:5a:d1:eb:6d:c4:
bb:32:6c:8e:f6:98:15:bc:6d:2a:b1:af:6b:57:a6:
a7:91:6d:f1:79:70:f3:46:6c:4d:da:59:c7:a9:86:
ef:d9:65:a7:2e:b1:16:ab:f7:fe:05:7e:18:71:1b:
09:98:cf:a9:84:46:74:68:fe:6a:38:b4:1a:8a:b5:
bd:16:cc:2b:94:88:7d:2c:8d:aa:b5:fc:ac:03:e1:
c4:f2:88:1e:35:6c:a0:19:15:74:d9:f0:df:02:de:
54:8e:d9:ca:ef:32:da:47:40:cd:5f:88:90:8f:93:
9c:b5:5f:f6:70:8d:ee:31:b8:d7:66:63:2d:27:c3:
16:e8:3d:ee:bc:94:44:a6:f4:51:5d:a8:2d:a8:0a:
97:3f:4c:7a:73:91:a4:99:99:cf:ea:30:9f:e4:42:
3b:68:c0:e9:36:28:f7:25:37:4f:a0:b8:e9:df:59:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4B:39:B4:75:64:72:A8:3D:53:18:94:8D:20:0D:28:ED:68:FC:C5
X509v3 Authority Key Identifier:
keyid:77:FE:F1:A8:7B:F2:B4:4B:6E:BB:E8:8A:85:B7:4B:0E:54:7F:6B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/207/77FEF1A87BF2B44B6EBBE88A85B74B0E547F6BB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_7xqHvytEtuu-iKhbdLDlR_a7M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/207/77FEF1A87BF2B44B6EBBE88A85B74B0E547F6BB3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:93:1a:ec:a5:80:75:e2:9d:27:03:6d:6d:4f:dc:78:2e:ad:
02:7e:44:e9:ca:4f:a3:d3:0c:e4:72:73:bb:e3:3b:06:de:11:
4d:e3:67:07:59:a0:7b:2b:75:2a:a1:46:41:bb:6b:d9:f6:49:
fa:fd:de:be:de:b8:21:74:6f:92:f5:6c:ce:1d:3e:a0:9a:87:
63:be:ff:33:43:5a:02:1c:e2:7e:49:94:12:4a:ed:50:c0:71:
67:4c:28:32:b6:dd:fe:79:d7:e5:b8:6f:28:d4:20:1c:c2:fb:
89:b0:7c:f2:4b:b4:8d:a8:fa:47:70:29:a9:5a:66:cf:56:58:
35:37:19:91:76:20:f0:33:ad:8e:f0:24:5e:8f:5a:ec:d4:c7:
88:72:f7:1e:43:45:b2:72:49:e5:1e:51:e3:da:1b:4a:ea:de:
29:6e:f4:bc:f3:99:a2:7c:de:6b:9f:b2:de:0b:45:b5:e0:5e:
97:65:97:99:23:47:18:8c:9f:40:7b:64:61:f3:4d:6a:60:55:
74:9f:c0:92:61:9a:74:d4:3f:34:0a:e1:db:05:c0:df:62:79:
14:e7:9e:c5:ed:db:47:62:95:64:0f:dd:d1:bc:e9:07:40:c7:
f1:3b:30:b4:70:68:5f:3f:a3:ab:a9:6d:f3:4f:94:e6:2b:2b:
a7:05:ce:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:52 2025 by rpki-client