![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
File: GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json)
Hash identifier: kdrnRKnyFyj7qqhgJ0hcrcgZysxm5hU+TTstkzCnnXE=
Subject key identifier: 87:82:7C:7E:00:77:63:69:0F:09:FC:E7:79:AB:A8:8D:84:0C:DD:7B
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial: 0195121055A3BC8AA5F2D2F0F00A58DD3B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
Manifest number: 032D
Signing time: Mon 17 Feb 2025 04:00:15 +0000
Manifest this update: Mon 17 Feb 2025 04:00:15 +0000
Manifest next update: Tue 18 Feb 2025 04:00:15 +0000
Files and hashes: 1: 1BCQS42AU0GGH4PRx7vWlNY6UnM.roa (hash: UsPM1kz8JudOE7Cn+hyYQwficWvW1KbcDmuvAJ6iOSc=)
2: 31ag2HrgANjhnzyqvzYcA_GuDbg.roa (hash: 2P8QZCQEYwZ7T/ngNrFwmBzstV47MWzT0cHknGsfldw=)
3: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: O0+KW/Fa0TNpruE85vIHmY0YdFb2UXz9vM/kH1f5LxE=)
4: xKJMBlinbdfn34LVJF69A7qgGkk.roa (hash: ghKwNM3pv6/CjqUkOttxn9jN7TiH2L3Yp/7tBiGxOUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:55:a3:bc:8a:a5:f2:d2:f0:f0:0a:58:dd:3b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Validity
Not Before: Feb 17 04:00:15 2025 GMT
Not After : Feb 18 04:00:15 2025 GMT
Subject: CN=87827c7e007763690f09fce779aba88d840cdd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:9c:68:66:51:35:47:c3:40:98:c1:6c:0f:
16:1c:7c:58:80:8f:73:fc:c1:0c:25:8c:20:70:b0:
f3:c6:bb:0f:7e:fd:67:a5:82:32:5d:0b:87:58:a7:
d5:00:d2:db:c8:3d:8a:70:ed:ae:5b:03:a6:a0:2a:
58:5f:ca:61:b8:9c:fa:82:ae:47:c0:ff:8d:cb:6b:
bd:58:28:2c:98:f1:49:09:3e:68:73:b1:c1:91:48:
27:4e:0e:07:d4:07:45:41:50:1f:aa:67:4a:40:a0:
be:b1:75:27:65:d1:29:22:e7:0a:0c:65:de:6e:fd:
66:0a:37:25:59:e5:77:4c:4a:c5:d7:fd:1e:15:1e:
ef:68:c4:38:ff:f1:8d:08:5a:df:84:ce:b5:ef:ba:
df:07:9a:70:2b:42:97:c4:c9:70:9a:fc:34:65:c6:
ad:95:12:e8:3c:5a:bc:d9:44:d6:12:b3:b5:39:85:
2c:38:c8:20:c8:62:85:ef:17:b4:d4:9e:c8:5b:32:
7a:59:0a:a9:7d:ab:b1:f8:72:9c:86:c3:d0:6a:7c:
bc:28:21:cd:53:a9:95:c8:ba:6e:d4:10:9a:ff:45:
22:8b:5d:07:47:20:d2:4a:d6:b8:0c:f9:8d:cf:3c:
25:3e:a7:a1:ef:ce:eb:14:58:a7:54:e5:f1:83:4e:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:82:7C:7E:00:77:63:69:0F:09:FC:E7:79:AB:A8:8D:84:0C:DD:7B
X509v3 Authority Key Identifier:
keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1b:ed:04:cc:66:a1:0e:70:5f:2f:68:9f:9c:dd:41:10:af:
7c:94:e5:85:d7:d7:de:00:89:b1:ef:6d:76:bf:22:3f:6b:1e:
20:03:1e:92:80:85:96:a6:6e:14:94:f7:bd:74:81:b7:76:2d:
be:5a:53:ea:2c:dd:cb:9a:00:4f:b0:67:51:bf:01:16:df:b8:
06:b2:37:c4:28:17:3d:c5:ef:a3:4e:4f:78:ba:91:58:c2:82:
8b:f9:5f:62:2a:fb:2b:12:c6:cb:40:44:43:36:52:e2:10:11:
b1:94:a7:94:69:9b:46:b9:ec:48:03:d7:ac:27:54:f9:4b:c6:
97:88:31:75:22:54:6a:43:00:a1:02:b5:dd:cb:e1:0e:16:00:
98:bd:12:46:ba:76:7b:ca:2b:94:e5:19:b2:67:fe:c1:a0:c7:
af:f4:35:e6:9b:3b:95:b9:7c:d5:42:05:aa:7a:20:3b:db:11:
16:8a:00:58:99:ce:c4:6e:d4:c7:63:c8:a6:dd:f5:ea:b7:3f:
4d:c8:d6:71:99:39:0e:8e:39:f8:17:14:c7:59:cd:32:0a:d6:
92:7d:3b:c0:f1:f9:86:49:c1:6d:15:d8:b1:f1:62:78:cb:61:
d8:e7:e7:64:5a:45:96:26:eb:22:20:8d:61:61:47:7e:d8:c0:
82:e1:8d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:30 2025 by rpki-client