![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft
File: bIlKsevTD7N84imjdNPjE52QUY8.mft (raw, json)
Hash identifier: 6qKvnSyYoSQ88os81UuPQgzjRIw6X87exsCjceHx1po=
Subject key identifier: C3:37:66:D9:5F:FB:82:7D:24:6D:9B:59:A4:8F:88:1A:CC:34:60:8B
Authority key identifier: 6C:89:4A:B1:EB:D3:0F:B3:7C:E2:29:A3:74:D3:E3:13:9D:90:51:8F
Certificate issuer: /CN=6c894ab1ebd30fb37ce229a374d3e3139d90518f
Certificate serial: 019511A291F8E1D72235F5B724EAAC62B5B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlKsevTD7N84imjdNPjE52QUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft
Manifest number: 0496
Signing time: Mon 17 Feb 2025 02:00:21 +0000
Manifest this update: Mon 17 Feb 2025 02:00:21 +0000
Manifest next update: Tue 18 Feb 2025 02:00:21 +0000
Files and hashes: 1: bIlKsevTD7N84imjdNPjE52QUY8.crl (hash: fXSgZMxHAYsl+Q528zOB59/UtaTqtp4R3N4LJGlOjGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIlKsevTD7N84imjdNPjE52QUY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:91:f8:e1:d7:22:35:f5:b7:24:ea:ac:62:b5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c894ab1ebd30fb37ce229a374d3e3139d90518f
Validity
Not Before: Feb 17 02:00:21 2025 GMT
Not After : Feb 18 02:00:21 2025 GMT
Subject: CN=c33766d95ffb827d246d9b59a48f881acc34608b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:82:8d:b4:61:bd:24:41:36:bb:16:5b:f7:
29:32:8b:5b:ef:57:56:bc:7c:53:14:47:de:96:26:
3e:f7:da:01:f7:a1:31:b0:22:b1:c2:37:2e:70:14:
4e:9e:b4:41:be:88:b0:ce:d1:fc:25:9c:86:e1:69:
d4:06:1e:2b:07:ee:9e:e4:fd:29:18:a6:38:15:7a:
1b:eb:76:e9:19:a4:7e:fc:c5:c6:e3:dc:89:5f:87:
c5:52:0b:33:49:c5:0a:23:a8:5f:b5:a6:46:0b:0e:
07:6c:7a:64:a8:78:df:c8:4c:77:5a:3f:e9:7c:7f:
83:a9:f6:a5:22:aa:8e:d1:f5:8b:7f:4c:66:55:8d:
1b:9d:11:cb:3c:2b:e3:54:ca:b5:3d:03:b2:94:8a:
d8:e4:5a:fc:70:3f:e3:de:25:32:aa:ac:cd:2b:77:
8a:1c:bd:09:e4:63:dd:c3:2a:64:31:f3:b1:5d:8e:
f3:fa:31:58:91:92:31:33:5c:67:42:b3:cf:2b:27:
85:f0:cd:c8:0b:f1:fa:5e:60:12:10:b4:9a:f4:ac:
31:1c:80:87:85:e5:56:0f:e7:d0:4f:5a:b2:88:99:
14:fa:24:2a:4b:0c:a5:82:74:4d:0d:ff:c2:0e:e7:
39:5d:30:ec:55:08:43:27:c4:d9:99:96:d6:b9:c3:
69:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:37:66:D9:5F:FB:82:7D:24:6D:9B:59:A4:8F:88:1A:CC:34:60:8B
X509v3 Authority Key Identifier:
keyid:6C:89:4A:B1:EB:D3:0F:B3:7C:E2:29:A3:74:D3:E3:13:9D:90:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlKsevTD7N84imjdNPjE52QUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cc:5c:86:8b:1c:14:76:14:69:a5:41:45:21:1b:8c:a9:eb:
05:71:c0:72:5c:ec:7a:3d:28:30:ff:09:c7:bd:3d:cb:d7:46:
7d:84:8c:97:90:13:9d:f2:37:cf:f2:f4:1f:84:ff:9d:b8:03:
b4:00:81:a9:67:88:bd:19:7e:a6:88:67:ab:ef:f4:1b:97:e4:
0f:0a:a3:51:50:e5:67:d7:c5:1a:ec:10:54:a1:1e:30:de:f7:
b3:8f:08:7d:b5:69:e8:78:5d:a9:2c:1a:0b:c9:ec:09:22:0d:
3f:8a:c9:46:26:d4:59:70:9b:31:4e:04:f0:52:be:99:7a:93:
8f:83:7c:83:a1:b9:d1:69:67:1c:13:f8:b1:cc:f5:49:62:ef:
cb:01:99:10:1e:43:90:c6:75:10:93:73:3a:d1:0f:97:35:9e:
36:7d:1a:45:23:7b:0d:c9:94:98:85:4d:b8:2d:d9:71:0c:6c:
63:5c:06:ee:8d:37:44:fe:f7:49:2c:68:50:48:3e:ce:41:50:
f6:41:c5:7c:0f:a7:87:d8:87:b6:76:34:8c:5d:4d:c7:e5:4a:
99:57:8b:16:20:46:03:48:91:9b:e2:bc:8f:a9:b3:df:98:e1:
7a:26:14:e9:bf:3f:a1:18:47:b5:79:df:6c:2b:ca:e4:ad:31:
46:8d:74:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURopH44dciNfW3JOqsYrWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjODk0YWIxZWJkMzBmYjM3Y2UyMjlhMzc0ZDNlMzEzOWQ5
MDUxOGYwHhcNMjUwMjE3MDIwMDIxWhcNMjUwMjE4MDIwMDIxWjAzMTEwLwYDVQQD
EyhjMzM3NjZkOTVmZmI4MjdkMjQ2ZDliNTlhNDhmODgxYWNjMzQ2MDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUeCjbRhvSRBNrsWW/cpMotb71dW
vHxTFEfeliY+99oB96ExsCKxwjcucBROnrRBvoiwztH8JZyG4WnUBh4rB+6e5P0p
GKY4FXob63bpGaR+/MXG49yJX4fFUgszScUKI6hftaZGCw4HbHpkqHjfyEx3Wj/p
fH+DqfalIqqO0fWLf0xmVY0bnRHLPCvjVMq1PQOylIrY5Fr8cD/j3iUyqqzNK3eK
HL0J5GPdwypkMfOxXY7z+jFYkZIxM1xnQrPPKyeF8M3IC/H6XmASELSa9KwxHICH
heVWD+fQT1qyiJkU+iQqSwylgnRNDf/CDuc5XTDsVQhDJ8TZmZbWucNpvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMM3Ztlf+4J9JG2bWaSPiBrMNGCLMB8GA1UdIwQY
MBaAFGyJSrHr0w+zfOIpo3TT4xOdkFGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklsS3NldlREN044NGltamROUGpFNTJRVVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZmFmNzYtMWJjMi00NzIxLTk0OTgt
YTFhZTU5ZTE2ODczLzEvYklsS3NldlREN044NGltamROUGpFNTJRVVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZmFmNzYtMWJjMi00NzIxLTk0OTgtYTFhZTU5ZTE2ODcz
LzEvYklsS3NldlREN044NGltamROUGpFNTJRVVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8xchosc
FHYUaaVBRSEbjKnrBXHAclzsej0oMP8Jx709y9dGfYSMl5ATnfI3z/L0H4T/nbgD
tACBqWeIvRl+pohnq+/0G5fkDwqjUVDlZ9fFGuwQVKEeMN73s48IfbVp6HhdqSwa
C8nsCSINP4rJRibUWXCbMU4E8FK+mXqTj4N8g6G50WlnHBP4scz1SWLvywGZEB5D
kMZ1EJNzOtEPlzWeNn0aRSN7DcmUmIVNuC3ZcQxsY1wG7o03RP73SSxoUEg+zkFQ
9kHFfA+nh9iHtnY0jF1Nx+VKmVeLFiBGA0iRm+K8j6mz35jheiYU6b8/oRhHtXnf
bCvK5K0xRo10cA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:10 2025 by rpki-client