![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
File: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft (raw, json)
Hash identifier: nrzF5PTIUuNV2WDtrzy6fBdRv7YA524YzAHpjfpSR9g=
Subject key identifier: A1:C7:84:16:54:D5:20:DA:40:E4:96:7A:B8:86:A6:4B:B1:09:D9:E8
Authority key identifier: 8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C
Certificate issuer: /CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
Certificate serial: 019512478A3B1ED853BF8BBDF51107F2B62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
Manifest number: 0F15
Signing time: Mon 17 Feb 2025 05:00:33 +0000
Manifest this update: Mon 17 Feb 2025 05:00:33 +0000
Manifest next update: Tue 18 Feb 2025 05:00:33 +0000
Files and hashes: 1: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl (hash: nKepemjtSJ6Nt2X5kBDhFD57FqOp/4oqkYLrmvpzQno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:8a:3b:1e:d8:53:bf:8b:bd:f5:11:07:f2:b6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
Validity
Not Before: Feb 17 05:00:33 2025 GMT
Not After : Feb 18 05:00:33 2025 GMT
Subject: CN=a1c7841654d520da40e4967ab886a64bb109d9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e3:9b:98:a0:4f:57:a1:5b:d8:e4:c2:76:84:
c4:5e:66:01:f3:85:88:ca:8e:b8:f4:13:a3:5c:b4:
eb:98:3e:51:a9:1b:2f:48:b7:69:4d:32:f1:7a:ae:
c3:a8:00:7b:b9:0b:e3:39:74:2a:dc:4e:39:26:31:
b0:b0:7d:70:3c:05:01:7e:78:22:5d:41:53:bd:a3:
86:64:01:2a:af:7e:20:5f:b0:32:d8:8d:da:2f:3f:
5a:8b:81:0e:60:30:f1:26:4f:6e:aa:ad:a6:14:ec:
7f:1f:f2:08:c4:54:44:32:e3:22:11:74:02:39:ca:
93:29:0e:70:72:95:16:3f:2c:8f:1b:05:da:4d:62:
d6:5f:b3:99:f3:03:93:7c:0e:d1:91:6a:d2:bc:b2:
be:47:f4:32:da:43:c3:aa:c0:46:54:d9:98:01:29:
e7:cc:01:a9:49:0a:e4:99:29:7e:9c:70:3d:e4:17:
ea:43:77:19:ff:7c:09:75:21:5f:3d:7d:ef:24:4c:
fe:53:e4:1c:31:0b:99:5d:53:6d:20:1f:c1:69:84:
2a:c5:49:cb:96:7c:6f:e1:4d:85:1e:92:3a:ef:aa:
a7:43:a8:2e:e6:5d:a3:7b:14:87:ee:d4:f3:91:cc:
bc:65:e7:a0:ff:ce:1f:7c:fb:b8:af:59:59:6f:eb:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:84:16:54:D5:20:DA:40:E4:96:7A:B8:86:A6:4B:B1:09:D9:E8
X509v3 Authority Key Identifier:
keyid:8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1f:92:41:c9:9c:30:09:98:09:f5:cd:3b:3b:9b:04:a0:75:
34:8c:73:c3:25:6a:2d:54:0a:d7:c2:53:7a:ed:5d:31:90:8c:
a5:c2:50:25:cb:a7:76:a2:8f:3d:b5:da:12:4f:a7:fb:05:7c:
9a:3b:44:be:20:07:2f:ab:83:25:cc:aa:39:1e:36:b7:40:ec:
1e:ae:7e:b7:64:f7:2e:53:ca:2e:f3:4f:39:ab:eb:b2:94:55:
68:45:35:d1:2b:5c:df:aa:c4:5f:71:23:c3:94:a4:4d:dc:fc:
8f:79:65:e9:7f:0f:bd:b3:71:38:df:f0:2b:9a:d8:a7:e3:0b:
af:a6:c0:b4:ff:b5:44:89:01:7c:e3:c7:0b:bd:96:53:47:2c:
1d:82:32:33:e3:ad:9b:ce:2e:b7:ff:c3:13:49:d8:a3:88:cb:
64:69:05:31:83:ed:e8:46:c9:5f:13:b1:3b:32:79:32:a5:27:
eb:be:12:f4:ca:53:e4:ec:9a:f7:ed:01:c4:bf:23:96:fe:78:
71:69:71:df:65:fc:31:63:fd:84:9b:3e:a2:7f:e0:40:96:9a:
dc:b8:8a:87:89:89:de:d7:23:bd:14:09:29:b8:7d:2c:46:d4:
d3:7f:cf:af:83:a0:62:35:36:03:9f:0a:8b:13:f6:9b:e2:fe:
43:8f:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:07 2025 by rpki-client