![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
File: YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft (raw, json)
Hash identifier: S7zOR5+51PpRTVxeQeTm8mvsNCPavatleR0KsfR82M8=
Subject key identifier: 2C:90:4D:CA:CD:52:D7:1E:C3:4A:45:44:03:89:9B:60:55:FD:2D:82
Authority key identifier: 61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
Certificate issuer: /CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Certificate serial: 019510FDDE4034D19143987A6E68F5922B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
Manifest number: 0BDF
Signing time: Sun 16 Feb 2025 23:00:27 +0000
Manifest this update: Sun 16 Feb 2025 23:00:27 +0000
Manifest next update: Mon 17 Feb 2025 23:00:27 +0000
Files and hashes: 1: YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl (hash: WkYP9Pvy+61i2twAHmReLkqS3CPYe7eIAlsaoIsQrf0=)
2: dC8gOmayB-chyoQvohvN-0T41MI.roa (hash: CEU2++abo0F1b85LSOtJ8mERuDAvIcX+n86rAzfnRdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:de:40:34:d1:91:43:98:7a:6e:68:f5:92:2b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Validity
Not Before: Feb 16 23:00:27 2025 GMT
Not After : Feb 17 23:00:27 2025 GMT
Subject: CN=2c904dcacd52d71ec34a454403899b6055fd2d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:02:51:44:d8:d6:a8:db:bb:6c:21:dc:3d:
88:00:cb:c2:9e:4e:1e:d8:b4:cf:66:bc:4c:89:85:
7e:5d:22:57:eb:16:07:c3:a3:ae:a9:4e:50:e5:a0:
dc:ba:1a:6f:d9:70:e4:33:81:1e:97:bb:4a:9c:52:
01:a9:0f:b6:c5:d8:99:a1:26:ba:3d:c1:30:f3:3e:
1c:9f:8c:64:bb:51:0e:58:d4:25:e8:8e:e7:8f:53:
3e:94:33:ec:9c:d6:b8:c1:4d:b3:19:5c:99:b4:6e:
2d:20:73:92:5f:7e:1f:13:62:6e:f8:b6:ea:bd:6b:
df:62:80:a4:e7:ba:3d:09:07:62:f0:3e:25:b1:f3:
49:7b:fa:b9:fb:b4:82:77:7c:eb:08:4f:61:e1:ff:
fe:10:0c:6b:bb:9d:09:a2:4d:ad:89:a7:10:bd:f7:
05:c1:a6:c0:1d:73:36:87:93:7b:7d:88:9d:2f:69:
7a:96:cc:35:5d:85:d1:19:83:14:9a:fb:58:b3:27:
be:c1:82:8b:c4:26:96:4c:67:f7:8f:c3:72:6e:cd:
59:f5:2c:6f:4b:49:00:3d:be:bd:fe:a1:0d:8b:dd:
53:05:17:4b:78:c8:22:5f:d8:c3:8f:36:a9:a8:4d:
ca:df:67:79:6f:5c:d3:63:c4:6c:8c:99:96:7e:b4:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:90:4D:CA:CD:52:D7:1E:C3:4A:45:44:03:89:9B:60:55:FD:2D:82
X509v3 Authority Key Identifier:
keyid:61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5f:c6:a1:8f:57:ca:c0:21:87:d0:c0:4c:43:ac:10:79:9e:
0f:73:b6:0c:01:ea:65:bf:ed:78:52:30:09:14:d0:64:c9:7e:
f5:df:20:68:7a:ee:5f:5f:fd:b0:ce:21:3c:cd:64:40:fd:34:
c7:39:26:ec:ca:58:72:83:ac:60:3d:83:1c:e0:5c:fa:91:0d:
aa:b5:25:2e:29:02:57:e1:55:6d:fa:ce:af:d8:54:d3:a2:ea:
70:e3:c7:f8:6c:ab:57:c0:2f:8b:f4:ea:9c:3f:0a:ed:58:47:
05:7c:f9:df:63:59:1a:91:41:cd:25:ae:b0:4b:c0:c8:3f:32:
50:85:d4:14:ee:9d:80:b1:79:dc:56:c6:41:88:bd:3c:d8:c5:
63:9c:5c:39:1a:14:31:a4:f0:c2:67:70:a8:a2:1e:b3:fc:62:
cd:43:ab:c1:18:99:8a:c9:71:50:1f:bc:43:99:10:66:ad:a8:
e9:94:27:11:df:fd:5d:9a:27:bb:d4:97:09:7b:6d:fa:ae:67:
2f:4d:76:59:31:ac:e1:c3:a3:db:b0:81:03:61:a3:b8:7f:09:
0a:6f:0f:d6:86:da:ef:42:74:bb:95:3e:23:ba:53:f6:37:af:
1f:2c:0f:12:ae:bd:8f:b8:fc:c0:f3:8a:2d:32:41:31:9f:76:
de:3b:15:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:10 2025 by rpki-client