![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier: gPRI+QvZAtheXnoeMFX6hkMJnz8N/NjOWznZ6wuF7n0=
Subject key identifier: 77:31:27:90:71:EB:AC:49:BC:61:37:27:17:7E:9F:20:F1:76:B9:3E
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 01951134E20A5A392E8147C280CA7DFFFE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 00:00:33 +0000
Manifest this update: Mon 17 Feb 2025 00:00:33 +0000
Manifest next update: Tue 18 Feb 2025 00:00:33 +0000
Files and hashes: 1: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: 8zI4eg6UlAwhw1lFVaA5Njzd3esu8uC/PIj9B+tl5AE=)
2: gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa (hash: +WQhnu3iWgtDqgj16Fdo45N/RQNl/1eQLYZcURm+NBk=)
3: tMCKKQ7T7_7JMjdc5UvMftnS0Sc.roa (hash: kzZ53feDoHQUM5QIs7aC6l1igadYhsq3pYnx3tG/SUI=)
4: vAe0qaUyTUIuHmAAhYqj4zN2sw0.roa (hash: 3z87N8KdJYLCcQ5QrhHjn7HBESoNRNkblDe3tPncPYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:e2:0a:5a:39:2e:81:47:c2:80:ca:7d:ff:fe:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Feb 17 00:00:33 2025 GMT
Not After : Feb 18 00:00:33 2025 GMT
Subject: CN=7731279071ebac49bc613727177e9f20f176b93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:de:17:19:46:58:5c:52:a3:0f:ba:f8:52:
62:c4:f0:cd:56:ea:bd:a9:69:d4:d7:02:ee:62:28:
68:fc:ac:54:4b:73:09:a4:ab:c4:35:03:82:88:11:
9c:a2:d0:50:4d:4a:a5:44:dd:c5:af:37:db:c3:54:
cb:8d:ec:17:87:69:c4:be:fc:d8:29:c0:33:1c:d0:
e4:93:5b:2e:da:ce:84:a6:74:81:ef:52:44:94:7a:
eb:6d:a2:4d:81:6c:35:b2:91:71:54:fc:0c:ac:ae:
f5:4f:5a:f0:ac:d0:ba:88:d5:3f:fb:8c:a2:6b:df:
7a:d4:8f:87:52:f3:72:a4:3f:ae:e4:e2:48:ef:c7:
d4:76:7e:b0:82:61:db:79:b5:e0:d3:1b:32:f2:b8:
60:b4:d7:ad:fe:fd:1e:75:31:ec:0e:24:28:df:15:
29:93:8c:99:51:93:29:cf:56:d0:fb:2d:b3:d2:91:
cf:10:de:a2:34:a8:8f:83:9b:cf:ef:2d:df:12:3d:
cc:ee:98:68:75:34:e2:03:e9:bb:82:8c:17:75:51:
3e:f5:20:30:bd:c4:40:e6:d6:98:77:2e:c5:98:c3:
a5:b5:3c:d2:22:65:6d:8d:50:b6:21:61:69:39:c7:
0b:a4:82:de:9e:04:e8:8c:a2:a6:b7:2c:9d:c7:ba:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:31:27:90:71:EB:AC:49:BC:61:37:27:17:7E:9F:20:F1:76:B9:3E
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:28:e0:85:02:72:c0:3d:c4:e8:3a:64:d8:04:7b:dc:41:d8:
f9:66:a2:50:ae:ca:3b:82:68:8d:57:b1:21:86:a6:22:b6:6f:
b7:c1:e9:43:6e:45:65:d6:b9:b1:39:43:d7:6f:2d:fa:11:a6:
a7:cb:53:68:47:c0:a8:f3:1e:c6:a6:4d:61:ef:58:30:92:fa:
35:c9:c7:9a:1d:9d:1f:c4:df:64:69:5d:52:74:19:a6:2d:9c:
ef:3a:fe:1c:46:70:e7:49:51:55:25:cc:0a:ad:2d:cf:75:1b:
26:c9:89:82:01:96:7e:30:89:dc:5f:9e:6f:d7:b1:7d:b3:cf:
dd:1a:b8:21:88:b2:40:35:79:26:f1:92:83:f7:3c:d5:37:c5:
3e:6a:bc:b9:5e:9c:84:63:bc:ae:db:50:df:65:62:dd:30:3a:
5d:b5:31:8d:1d:d8:bc:8d:bd:c2:5f:8c:31:1b:a8:a8:94:55:
dd:26:c5:3c:cc:4f:9b:c1:3d:7a:4d:63:a8:79:d0:c7:83:a1:
d1:ed:d9:eb:72:2b:4f:e5:c4:02:de:26:a1:96:79:0b:9d:15:
57:42:1f:e0:41:a8:78:95:29:89:07:97:7a:08:6a:b5:20:ea:
ec:b3:75:48:1e:9b:0d:9c:0e:68:2f:20:9e:2c:5c:9b:40:61:
34:27:10:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:11 2025 by rpki-client