![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
File: M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json)
Hash identifier: PhgglHRVGIFJ5b/o5NyA5H3cY23mzcwOQHUnGRHM0Po=
Subject key identifier: 73:0A:FD:6D:A3:E0:4B:01:11:F2:15:2C:A6:D6:20:41:04:42:3C:28
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Certificate issuer: /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial: 019510FDCA74962261942A87FAD9E03226E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 23:00:22 +0000
Manifest this update: Sun 16 Feb 2025 23:00:22 +0000
Manifest next update: Mon 17 Feb 2025 23:00:22 +0000
Files and hashes: 1: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: oJmIXp8dWt6+xhpomSP/XJlOQitMff+5NTxEu2UDCYU=)
2: ty50ARtEa_FQbzkrRRpK05YUuG4.roa (hash: 6J3WVG0rq9sH9p5MoSA7/o/5BVS9JnWdKFb+LiKqGs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ca:74:96:22:61:94:2a:87:fa:d9:e0:32:26:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Validity
Not Before: Feb 16 23:00:22 2025 GMT
Not After : Feb 17 23:00:22 2025 GMT
Subject: CN=730afd6da3e04b0111f2152ca6d6204104423c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d6:4d:1d:93:d2:e3:0b:03:cd:84:16:bb:86:
56:b2:b6:2a:53:a7:01:6e:e6:1e:e4:ee:d7:f1:d2:
15:77:33:c4:96:87:af:8d:09:df:61:6c:97:a8:83:
81:a1:68:ad:a1:2a:54:53:94:83:4a:28:47:0a:75:
f3:7d:f1:36:52:b1:cf:38:42:cc:ad:d6:fe:01:86:
36:b2:44:e4:b8:a2:b6:94:cf:2d:c3:de:b2:f3:b6:
58:f3:b7:34:40:12:c8:e3:60:39:a0:24:e7:75:ef:
20:0d:89:40:a5:ed:1a:9e:30:76:66:98:b2:9e:2f:
08:cc:07:b9:a3:24:cb:3a:6d:6f:5f:ce:c1:af:ea:
99:ca:cc:a6:6f:fd:a5:c0:a5:a4:3d:22:de:ec:9c:
5c:7a:e8:1b:02:67:28:e4:06:cf:5f:d6:9d:be:77:
3a:3a:c9:2e:0e:53:11:79:05:bf:a8:5f:73:f2:8c:
c2:ff:c6:76:66:00:4b:92:05:a0:f6:fa:81:c8:e0:
fc:7b:66:1a:1f:23:1c:5a:7c:ee:0a:c4:e5:67:f9:
ec:26:ca:a8:ae:a1:c9:df:e5:c5:2a:1f:f8:59:d4:
66:f5:51:e2:36:1c:c4:ba:e7:54:34:a0:51:3e:a4:
1b:21:8a:2f:bf:0a:cc:d6:5a:c5:8b:ff:c0:d7:1e:
02:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0A:FD:6D:A3:E0:4B:01:11:F2:15:2C:A6:D6:20:41:04:42:3C:28
X509v3 Authority Key Identifier:
keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e3:78:7b:45:61:72:e3:cb:5f:44:3b:06:39:ee:d6:61:6b:
89:93:25:cd:0a:e8:68:d0:40:ef:15:13:3d:53:93:35:30:ec:
25:1b:c7:55:77:16:7c:c2:df:9f:a5:be:76:bf:92:db:40:3d:
c7:86:fb:7a:a0:0d:3f:f6:b4:0e:c0:e9:f5:d2:b9:02:6e:e7:
49:1e:46:05:29:74:a4:dd:83:e3:06:02:da:85:59:39:13:4e:
6c:f6:65:6e:05:64:c4:82:ba:9f:81:11:85:75:e5:e7:b7:b3:
b8:4f:ae:de:e5:e5:cb:72:77:9f:ec:14:71:ed:82:d7:cf:fb:
af:17:89:62:3b:6b:b6:1d:c4:7a:e5:8b:0f:04:2d:f0:d4:45:
bd:0c:75:d9:ff:d0:f8:05:e6:dd:97:25:0f:88:e7:a7:58:e7:
e4:e8:c1:2c:3e:d4:54:ca:5c:b8:47:6d:5c:42:e3:69:ce:eb:
4a:1a:df:88:03:f6:4d:af:c2:d6:da:81:9e:bb:b5:24:5d:dc:
b5:de:46:2f:90:5d:25:ab:b7:76:d0:b2:8c:66:de:89:c0:3f:
be:ec:8c:70:96:89:85:43:e4:63:c8:8e:ec:fd:9d:1b:f5:7e:
9c:62:1f:d2:58:c6:1d:3d:ce:66:a2:39:d4:25:fe:c6:2f:4a:
3e:a3:cd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:42 2025 by rpki-client