![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
File: Rns5TPikBRwWfUaLx7iSpx3uTQM.mft (raw, json)
Hash identifier: DOZL3+Q17/BbK1/8uJRfsDajKhSJnNeILvVMXuUsHOI=
Subject key identifier: FB:CE:AF:15:DC:A3:38:90:4D:CF:46:78:97:76:00:ED:61:1C:99:62
Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
Certificate issuer: /CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Certificate serial: 019511D96A77A3440B352BA4A50746AEF55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
Manifest number: 0845
Signing time: Mon 17 Feb 2025 03:00:15 +0000
Manifest this update: Mon 17 Feb 2025 03:00:15 +0000
Manifest next update: Tue 18 Feb 2025 03:00:15 +0000
Files and hashes: 1: Rns5TPikBRwWfUaLx7iSpx3uTQM.crl (hash: HiFWwPeYDUmcxAiAnqmR5zvJ2uZQGCPZ8xF2kEKwkGA=)
2: dgAEK4wIhzdNcfF05upWmZfXZZk.roa (hash: U/vt5a1C9rZX//TwbwJI8SM4gcB/oWBETRm681WJLz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:6a:77:a3:44:0b:35:2b:a4:a5:07:46:ae:f5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Validity
Not Before: Feb 17 03:00:15 2025 GMT
Not After : Feb 18 03:00:15 2025 GMT
Subject: CN=fbceaf15dca338904dcf4678977600ed611c9962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:66:18:ca:03:0e:cf:82:57:11:5c:60:9b:
d2:a1:2f:b9:85:11:af:93:27:af:0f:06:ab:47:be:
ab:a3:21:ec:db:56:08:a5:eb:43:b3:5c:09:50:83:
d7:be:11:f5:75:db:a7:59:54:60:86:c0:ab:fd:6e:
42:6e:16:cd:35:fc:ab:47:db:4e:59:19:66:49:d7:
b3:89:dd:5a:55:05:48:f2:b6:8e:0b:40:9c:04:35:
1d:bb:74:4f:19:ce:36:9e:fd:a9:8f:b4:ec:ac:81:
78:a1:3b:84:00:bf:bb:cc:c5:78:f1:46:02:a8:69:
3d:1a:ca:32:a0:04:e8:eb:f1:b7:d1:7f:ff:f9:0e:
61:14:76:77:8f:cb:77:b2:87:8a:8b:78:c7:f2:61:
8e:c9:4c:7f:be:07:46:9f:2e:92:13:20:db:71:17:
53:91:a3:dc:19:8a:fa:03:92:01:af:ee:16:33:9c:
70:e2:0c:d7:0d:a9:7b:20:db:04:04:c0:50:4d:b9:
8b:5d:b1:24:bb:03:63:06:11:40:9c:c7:23:d8:3c:
2f:3d:35:bc:ef:45:5b:f4:14:66:fa:10:66:ad:73:
48:6f:b6:19:a5:60:c3:6e:2d:24:29:71:16:94:6c:
f5:33:aa:ee:61:a4:a9:65:4e:b4:e7:84:8a:20:c6:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CE:AF:15:DC:A3:38:90:4D:CF:46:78:97:76:00:ED:61:1C:99:62
X509v3 Authority Key Identifier:
keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ad:7a:0b:6a:18:f9:7f:40:8d:75:b9:db:19:bf:67:91:c6:
cf:c0:5f:06:6e:ce:85:6d:3a:7d:81:0b:5b:2a:d7:f6:8f:b4:
90:90:99:20:56:24:30:72:36:84:fc:71:f5:69:7e:62:57:50:
29:ec:99:16:32:50:a1:93:9c:2e:76:97:56:93:54:65:0c:8a:
1b:07:9b:3d:70:2f:e6:61:4d:49:af:3b:eb:4e:ce:4c:e4:cb:
74:a0:c0:1b:d2:21:cb:e5:3c:c1:82:cc:cd:36:7f:2a:14:6c:
e4:23:2c:05:fe:30:38:29:6b:a1:e8:d1:b3:a7:a1:70:fa:ba:
26:56:f8:7c:58:a3:81:2d:9a:2b:fd:87:70:66:c9:39:f9:f8:
22:8e:ef:77:1b:4a:b0:cc:ee:27:7f:3d:2b:1e:54:4d:dc:f7:
e8:49:99:02:fe:39:02:55:56:0d:f0:c8:77:3c:46:50:ef:f9:
57:01:07:28:bd:e8:ab:f4:75:64:0c:78:eb:85:90:00:3f:02:
31:b9:a8:04:4b:68:6c:cb:2a:de:60:e9:e9:65:06:d2:5e:1f:
a2:08:b8:06:2a:c7:a0:4e:57:88:24:b7:ea:b9:a6:66:08:06:
2b:1d:55:d7:12:24:67:ca:8f:4e:c8:3f:a3:12:00:2c:5d:89:
88:d4:b7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:07 2025 by rpki-client