![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: p/HVO0E5FkswZ8U88V6kVgXcrkUJ97rH7ECQELCMqhM=
Subject key identifier: 77:8A:FD:3D:10:BA:90:78:74:D8:0C:D6:48:2F:21:76:6D:B6:46:0A
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 019510C711605142BF143BBEEBC9C682482E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 0F9A
Signing time: Sun 16 Feb 2025 22:00:36 +0000
Manifest this update: Sun 16 Feb 2025 22:00:36 +0000
Manifest next update: Mon 17 Feb 2025 22:00:36 +0000
Files and hashes: 1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=)
2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: 3t6nn1ZHABopme/6dN0S4b7gI1YwoHIJHvqSTLxYQdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:11:60:51:42:bf:14:3b:be:eb:c9:c6:82:48:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Feb 16 22:00:36 2025 GMT
Not After : Feb 17 22:00:36 2025 GMT
Subject: CN=778afd3d10ba907874d80cd6482f21766db6460a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:51:ce:d0:65:0f:3a:66:8a:4d:d1:88:b0:
0e:b4:fc:c1:e0:93:f2:f3:b5:1f:56:e6:d7:e6:26:
4d:a9:66:ed:cc:6c:50:5d:58:ba:bd:1f:7b:c7:ed:
65:86:36:48:0c:e4:38:b1:51:75:a8:bb:4c:6c:55:
26:2c:02:f9:24:87:ed:bd:fd:3e:3a:90:57:f6:60:
4b:66:ad:b9:fa:53:b5:cf:ca:94:14:83:fd:d1:4d:
6b:41:ab:dd:51:f6:3b:90:0a:d4:de:3f:1a:79:0b:
91:8e:9d:f9:06:30:e4:aa:72:68:be:e9:e5:51:d7:
d8:6d:3c:8d:2d:27:55:bb:93:0d:d4:a7:1f:07:2c:
41:c0:96:64:4a:aa:c5:ba:6d:5d:94:85:8e:b8:c3:
b5:fc:0a:18:cd:dd:c1:a2:b6:3d:df:ba:df:0f:48:
5a:8c:9f:e7:80:7c:40:30:3b:ac:f1:3e:44:2e:c0:
a6:9f:5d:33:84:1f:ac:c8:4d:37:85:8f:3e:b9:e3:
a1:a8:62:00:92:74:05:5c:00:da:b4:d3:d5:2c:8b:
b3:20:07:26:b5:ec:a8:b9:61:6d:3f:97:42:7a:10:
b0:5f:9d:28:14:4b:48:4e:c0:c7:f2:77:1c:36:85:
55:08:ac:be:ca:a7:b9:89:77:a5:bb:0a:84:e4:b1:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8A:FD:3D:10:BA:90:78:74:D8:0C:D6:48:2F:21:76:6D:B6:46:0A
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:44:2c:7a:2c:54:93:1f:e5:c6:79:2d:85:34:ec:05:7a:80:
59:82:34:0f:4f:e9:f3:a1:a3:46:2f:1a:6b:53:89:d2:04:32:
76:07:eb:0f:d4:91:8f:6c:5b:c4:c9:87:a6:12:91:70:b9:8a:
c0:99:d9:e5:bb:b3:94:ba:77:9e:d1:06:67:16:55:e5:06:f2:
ff:fd:19:67:52:45:88:c1:07:6a:03:b1:17:cb:d6:4a:31:9d:
4c:25:a8:28:cd:09:ea:88:65:c7:64:bf:52:95:8b:7d:6a:2c:
d4:33:4a:8b:20:c0:6d:f8:1e:af:21:dd:66:d7:3f:c9:9a:01:
d4:ff:6b:62:c9:8b:c6:d5:41:69:69:c0:4a:1b:49:8b:a4:00:
71:04:29:3d:02:d7:46:30:79:4e:bb:d1:1d:07:0b:88:7c:a6:
db:ad:cb:ec:44:3f:67:88:a4:1d:43:52:81:34:7f:68:3b:92:
59:a1:b8:7c:a9:1a:cd:64:3b:2c:b6:fc:df:5a:7a:41:41:53:
b0:18:b0:38:0a:58:aa:61:82:0c:a3:7b:06:e0:53:ab:81:cd:
f8:db:0e:44:dc:4a:3d:85:e7:97:58:4c:28:ac:a6:84:d0:bf:
eb:2a:6d:00:41:27:e3:87:19:67:16:d5:ea:5d:f9:57:6d:fc:
97:28:1e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:30 2025 by rpki-client