![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
File: qqbmeSWCHkuHnIA-wKUiRflnOtA.mft (raw, json)
Hash identifier: xam4nLvg6ETJcR/4APlZfnyPGOBqRMKdynzSStC5Y5Y=
Subject key identifier: BF:96:DC:30:B0:08:00:03:1A:59:BF:7F:D4:04:83:72:94:3D:4B:73
Authority key identifier: AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0
Certificate issuer: /CN=aaa6e67925821e4b879c803ec0a52245f9673ad0
Certificate serial: 019510FDF07537780A1EA5BC276A1DFDD14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
Manifest number: 01F8
Signing time: Sun 16 Feb 2025 23:00:32 +0000
Manifest this update: Sun 16 Feb 2025 23:00:32 +0000
Manifest next update: Mon 17 Feb 2025 23:00:32 +0000
Files and hashes: 1: qqbmeSWCHkuHnIA-wKUiRflnOtA.crl (hash: 641pOVUqF8Vzr3jcNeiuoeW7AWioMXPFiOrKfEm4X0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:f0:75:37:78:0a:1e:a5:bc:27:6a:1d:fd:d1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa6e67925821e4b879c803ec0a52245f9673ad0
Validity
Not Before: Feb 16 23:00:32 2025 GMT
Not After : Feb 17 23:00:32 2025 GMT
Subject: CN=bf96dc30b00800031a59bf7fd4048372943d4b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:5f:6f:92:a9:16:66:69:5e:a3:b7:c5:0c:
57:61:97:c5:3d:f9:de:79:10:37:16:a0:51:b0:9a:
65:5f:41:be:17:84:c3:fb:ec:d6:b8:21:71:51:c4:
44:01:6a:cc:a1:9a:1a:71:18:e4:65:db:08:95:ca:
29:ae:8b:c1:6b:88:33:4c:b6:1f:8f:cc:8c:1f:d6:
b8:0e:44:41:0b:67:30:7c:54:15:ab:6a:52:37:54:
5a:71:90:34:04:28:00:56:00:2f:1c:05:6e:fd:bc:
0b:df:8f:a0:68:8c:af:b9:dc:e1:95:28:aa:77:ff:
5f:5e:79:d9:cc:fa:74:09:31:e0:99:0b:f6:c1:56:
79:c3:3e:19:42:5a:27:4c:2b:83:ee:f6:2a:75:1c:
bb:d8:42:ff:32:3c:12:cc:2c:22:50:a5:7b:fc:68:
56:c4:f6:f8:7d:5c:64:d7:0c:2b:6d:4c:04:7c:7d:
38:4c:97:45:db:11:98:30:02:bf:e4:f1:16:9a:33:
9c:1b:84:5b:6f:03:35:d8:ee:bc:65:a5:28:f0:44:
55:58:b2:bd:9b:1c:21:9f:2c:b7:95:c3:ac:d2:4b:
81:17:19:c3:98:33:fd:4c:4a:89:76:b7:51:6b:fd:
00:dc:84:09:c8:93:33:0f:9c:7a:a9:0c:11:0e:a4:
ed:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:96:DC:30:B0:08:00:03:1A:59:BF:7F:D4:04:83:72:94:3D:4B:73
X509v3 Authority Key Identifier:
keyid:AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:83:41:6f:38:56:5c:70:8b:ae:9c:e5:c1:71:03:93:d7:c0:
fe:80:68:80:4b:c5:ae:eb:c3:90:6a:3e:27:fe:57:5a:69:ea:
67:84:11:4d:3d:6b:d4:8d:94:aa:49:af:4a:30:98:e1:ef:eb:
aa:99:5d:12:bf:ba:af:ad:63:53:d5:a5:fa:dd:f8:5f:69:e4:
67:b6:8d:fd:72:b5:f7:ac:9c:22:56:8f:15:5e:e9:f6:b6:d3:
72:69:49:ac:c3:bf:b2:98:4f:52:c1:69:5c:7a:a7:c3:ea:25:
f8:43:5e:53:68:06:77:08:50:15:bb:4c:3a:97:5f:c5:8b:79:
8a:d6:42:56:c6:fa:9b:c3:41:57:13:93:90:d8:d9:75:69:a0:
ac:d3:27:7a:35:1f:27:73:04:e3:7a:f0:49:9d:27:e1:c8:6f:
61:99:2c:d5:5e:13:0d:09:d9:60:0b:23:38:f8:e4:cb:51:06:
62:0b:dc:df:ca:c8:f7:c0:d9:37:23:44:6f:89:04:86:d9:c7:
cd:f9:35:41:86:52:95:6f:db:02:4a:c4:8d:0e:7a:89:ca:8e:
35:8e:05:fe:eb:cc:bc:7c:82:a8:e4:12:f2:e8:58:c9:d6:8c:
f0:7e:99:62:63:7f:2e:49:47:9d:e7:70:bd:54:e4:96:b4:98:
87:8c:0a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:43 2025 by rpki-client