![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File: B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier: 0rw4yjVzN2U2l3pc7Y1t3qcSLF0S1B3OBwdcTv3uUWE=
Subject key identifier: 2F:51:05:FE:3D:E3:41:09:7F:BF:E1:06:44:A5:A1:72:3D:F8:93:B9
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer: /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial: 0195108FEAF15975B5465A0EA7DB7C227DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 21:00:21 +0000
Manifest this update: Sun 16 Feb 2025 21:00:21 +0000
Manifest next update: Mon 17 Feb 2025 21:00:21 +0000
Files and hashes: 1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: WPgufoXkIs6UdRyj6uwQ92C0On8YizVwEvUDYJuhMQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:ea:f1:59:75:b5:46:5a:0e:a7:db:7c:22:7d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Validity
Not Before: Feb 16 21:00:21 2025 GMT
Not After : Feb 17 21:00:21 2025 GMT
Subject: CN=2f5105fe3de341097fbfe10644a5a1723df893b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:6d:fa:5b:e1:f5:4e:ef:d9:89:6c:ab:e6:
76:38:4e:57:4f:c1:19:7a:d4:39:de:a9:7b:d4:30:
0d:28:ef:b1:63:87:05:3e:53:b8:b6:7b:f8:2e:e7:
49:c5:0d:ad:65:16:d2:e8:e3:d4:6e:cc:af:cb:4f:
15:77:e6:c3:e7:7b:96:69:7a:05:b6:5c:5c:6c:c9:
9e:58:fe:7b:4e:0a:11:29:89:b7:53:92:6c:ab:16:
48:de:58:9a:1d:a5:8e:c5:a8:86:d3:82:8a:b5:4a:
ae:50:51:0b:af:f7:a1:b1:fd:09:27:6d:95:72:99:
e9:bc:96:ba:76:75:6e:fa:06:01:5a:f8:e2:1b:a0:
5d:4d:6c:06:be:95:d5:a3:40:c5:20:d8:d0:10:bd:
e9:39:f5:bd:73:64:9d:ce:41:fa:d5:af:0b:0f:8b:
cd:97:62:25:6e:51:d0:64:c7:6e:36:85:6e:73:a3:
13:80:eb:7a:58:4e:f8:5a:75:b2:3e:2c:2b:b4:3c:
d9:39:3b:e3:19:06:a8:85:29:b2:3f:50:81:da:aa:
e9:94:d8:e1:68:b3:6c:ec:0e:e3:0d:e3:da:3c:ad:
e3:b5:e2:31:25:43:ae:6a:95:8c:0f:a7:34:47:82:
55:73:64:7c:d6:fc:be:a5:b5:a2:1d:28:36:92:14:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:51:05:FE:3D:E3:41:09:7F:BF:E1:06:44:A5:A1:72:3D:F8:93:B9
X509v3 Authority Key Identifier:
keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:94:4e:9b:74:66:4f:58:6c:ea:36:77:2d:d8:8a:e9:e3:8a:
fa:96:79:7c:83:69:06:e1:8d:eb:b5:b5:dc:4d:9d:ac:67:a0:
cc:89:fa:ae:da:78:9c:c4:73:b4:ba:01:7b:31:6f:4f:1f:bd:
5d:d5:1f:d0:7d:71:12:b3:c9:0b:c0:af:06:04:9f:55:77:34:
9a:f4:94:00:a3:cd:b3:78:25:ed:67:6f:d7:de:1a:df:16:35:
ae:aa:b8:dd:db:71:0d:e4:91:46:eb:b2:6e:8e:4d:32:30:40:
96:27:fb:2a:cb:63:7b:0f:10:7b:b3:3e:2b:e3:56:a1:11:22:
ea:0b:c2:14:93:c2:a7:40:ec:26:1d:cc:09:b6:40:90:a2:b1:
1f:46:e5:6f:d0:6a:95:f7:47:0e:d3:0a:54:c8:ec:af:fd:7d:
04:8c:ac:e4:f4:35:bb:c2:bb:07:70:0b:af:67:69:7b:49:c9:
ae:31:19:a9:70:d1:db:2c:a6:aa:7b:09:01:9c:27:87:5a:93:
cb:12:da:df:47:5b:58:74:1e:23:a9:ce:4e:ae:7b:f6:4e:97:
0c:a3:79:9f:6c:14:3a:cc:4d:4a:46:f6:e4:5d:48:17:e8:73:
42:ec:d4:44:2e:7a:d3:fa:f8:0b:51:6c:90:a4:d2:44:8d:88:
95:2e:1d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:42 2025 by rpki-client