![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
File: K0bJzPf_e9zPg3dioOFXvcE1cOA.mft (raw, json)
Hash identifier: Te1bl6oH2YJM5oLOkamedii3qpYZWYIbuWZjBHAgP/I=
Subject key identifier: 2B:C8:12:5C:F9:17:7E:F8:34:CC:AD:C6:C3:7E:20:6B:5B:71:9F:20
Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Certificate issuer: /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Certificate serial: 019511348E02F8D8A5873300FBFE6C33E144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
Manifest number: 0467
Signing time: Mon 17 Feb 2025 00:00:11 +0000
Manifest this update: Mon 17 Feb 2025 00:00:11 +0000
Manifest next update: Tue 18 Feb 2025 00:00:11 +0000
Files and hashes: 1: K0bJzPf_e9zPg3dioOFXvcE1cOA.crl (hash: mqrW4Auf9fou0rWWhygL/baLSWLYArXeDvRnK7jJlA4=)
2: qLWefGaIQEsRkcA1tO3guUVq3OU.roa (hash: xslOk/6LQdIGFli9jwCBp6kVRfq8yxFvis0Kh4JP+fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:8e:02:f8:d8:a5:87:33:00:fb:fe:6c:33:e1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Validity
Not Before: Feb 17 00:00:11 2025 GMT
Not After : Feb 18 00:00:11 2025 GMT
Subject: CN=2bc8125cf9177ef834ccadc6c37e206b5b719f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a2:1b:92:41:34:cb:dd:a2:29:a6:96:2e:ad:
2c:96:c7:bc:f4:f1:67:59:95:59:58:e3:ac:58:f9:
3e:07:78:6c:3d:d5:77:b1:e6:bb:76:f8:5e:03:1a:
6d:2d:82:e9:79:50:2e:aa:c2:f4:b5:a2:2e:a9:7b:
c4:bb:5c:5a:45:3e:ef:e5:24:f0:f4:a6:03:17:60:
b9:65:cb:57:4d:d9:09:37:59:24:3a:f5:24:6a:e6:
27:7e:32:e7:71:8e:81:0b:71:dc:f4:d2:ea:c4:a3:
60:69:a5:ea:26:10:16:1d:2b:22:88:07:05:20:9f:
03:66:08:af:f6:cc:00:9b:f8:9a:ae:1e:49:8a:6b:
21:52:eb:a1:a7:10:8a:e8:3d:f3:4f:d3:cc:6f:a9:
4e:98:45:51:de:81:38:74:84:48:ad:b2:03:75:9a:
f7:1d:27:d0:e6:4a:ad:7a:d8:6e:91:74:57:35:86:
57:7e:13:b2:b7:63:1d:e7:89:77:54:1f:ef:63:e2:
31:67:32:ea:71:40:cd:36:ed:b8:60:61:ec:84:81:
ab:76:d8:cf:4b:c3:47:06:f5:3b:9d:73:94:2f:5c:
3f:a0:5f:f3:ef:e0:5f:1c:ae:64:ca:7a:a8:70:f5:
4b:ab:72:e3:8a:e0:69:1b:04:e4:fd:27:87:cc:0e:
51:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:12:5C:F9:17:7E:F8:34:CC:AD:C6:C3:7E:20:6B:5B:71:9F:20
X509v3 Authority Key Identifier:
keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f0:9b:78:80:78:bc:0b:c8:e3:b9:c8:29:2d:a6:a7:1a:ba:
b3:8d:f0:d0:01:20:32:fe:61:60:c3:fe:a4:98:23:64:63:b1:
e6:88:ec:0f:8f:73:be:e1:17:63:c9:fe:f3:19:cd:3e:8b:4d:
48:9d:d4:47:52:70:0f:a8:8d:af:cd:5b:0b:08:d7:19:3e:cb:
a5:ce:a1:d9:48:3e:9c:a2:6a:24:9b:19:75:34:c2:a8:9c:28:
49:54:3b:aa:bb:eb:df:8b:81:b1:07:29:e5:5f:43:d9:99:b4:
33:26:7c:ec:08:57:d0:cf:6e:7d:80:89:ba:21:da:6f:44:30:
76:b0:f2:ce:e4:bd:da:c0:15:bb:3a:d8:97:74:19:a4:08:7b:
5b:2e:a0:d4:dd:6f:3d:a8:72:41:07:5f:d9:d6:b5:8a:69:3d:
a5:c2:be:e2:8a:d8:2e:94:05:2c:e3:7e:6f:88:61:8a:a8:c3:
dc:8a:cb:ca:71:e9:fa:ce:b4:df:8d:e3:2d:38:1e:ad:4e:e3:
c1:a7:c4:f7:bc:46:c3:9d:4c:64:d6:97:b2:60:25:d8:f6:2f:
9c:a4:47:25:72:ab:e7:6f:b2:ce:10:b0:e7:d3:a2:74:5e:64:
75:8b:7a:37:24:54:2d:1c:bb:d0:7b:98:c8:f1:1f:3e:40:ed:
77:0d:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:23 2025 by rpki-client