![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier: DK8ueXQHiAwPETYRjSuZd3qCBVWtOby3cz1ewNDqWx8=
Subject key identifier: 96:95:56:51:D7:58:89:79:89:31:16:49:B7:11:50:99:16:33:A0:FA
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer: /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial: 0195108FB167926DFE7C779F3C49F1E571DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number: 0334
Signing time: Sun 16 Feb 2025 21:00:07 +0000
Manifest this update: Sun 16 Feb 2025 21:00:07 +0000
Manifest next update: Mon 17 Feb 2025 21:00:07 +0000
Files and hashes: 1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: XudN3ATcJsBfoYOlWNwu+4LsJIXacXNERB9piJ9MDb0=)
2: GwUYPxJQaw648raZgaiMud0BTgo.roa (hash: LGJZt6ikz8yBfuTCs6jZTUAALLEYDfmbRQi7+ExvBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:b1:67:92:6d:fe:7c:77:9f:3c:49:f1:e5:71:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Validity
Not Before: Feb 16 21:00:07 2025 GMT
Not After : Feb 17 21:00:07 2025 GMT
Subject: CN=96955651d758897989311649b71150991633a0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:20:69:84:2d:d6:f5:a8:f8:6e:e7:a1:8e:
7b:58:4b:0d:9f:14:c9:8f:28:ab:73:7e:95:99:bc:
2d:0b:cb:55:61:e3:75:62:66:6e:dd:a1:e4:9e:13:
63:5f:b6:19:9a:83:25:67:43:14:c8:38:39:5b:b3:
df:ad:81:31:ec:01:7d:f7:3c:9a:8a:2e:43:35:fa:
2d:e8:f0:02:90:e3:4f:ee:57:45:dd:98:ef:1c:74:
41:16:f2:62:f8:d6:53:34:f1:5d:51:76:0b:fb:d2:
00:33:56:1b:8c:cc:b5:83:6a:dd:06:7c:65:fe:e2:
06:82:4d:e2:6e:1f:c1:f4:85:8f:ba:e1:b4:a6:9b:
0c:c2:0c:39:e3:38:d1:5c:71:d7:9a:df:bc:c2:51:
90:a9:c2:97:e0:4c:24:8e:d8:14:b9:e9:b8:af:90:
a4:b3:94:ee:e4:4e:c1:1f:5c:1c:2f:f6:df:ed:56:
46:e3:74:a9:5b:a7:a2:7c:5d:08:66:08:84:f7:a8:
f3:d4:9a:80:c5:28:65:52:56:cd:3b:b5:0e:53:51:
fc:38:de:4e:32:35:63:0a:47:30:56:e3:97:eb:27:
00:a9:fe:7d:ec:d1:e9:1a:5a:e6:a9:2d:93:52:01:
84:9e:ed:d7:30:c9:c7:dd:38:9e:b9:a3:6f:94:b8:
7e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:95:56:51:D7:58:89:79:89:31:16:49:B7:11:50:99:16:33:A0:FA
X509v3 Authority Key Identifier:
keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4f:4f:b5:76:32:bf:79:69:94:55:26:d7:99:a0:8e:6c:af:
db:1d:65:8b:a6:36:9b:e7:93:78:23:d7:69:17:c0:32:c0:e3:
20:e4:33:50:a0:42:96:92:ee:b4:9a:e3:05:8a:0a:00:79:60:
00:4a:a3:ec:80:33:a5:f4:7e:1e:00:95:25:4d:f1:3f:d2:66:
dc:62:4a:e1:e7:df:6d:c2:c4:f7:c5:1e:79:0f:2c:85:ce:80:
3b:db:4e:ed:5b:87:b4:10:1d:6e:28:fe:d3:44:e6:71:aa:7d:
d8:79:ba:de:0e:3d:47:4e:c4:1a:86:17:d7:ec:45:75:c3:48:
ab:bb:27:4f:40:cb:e8:af:8d:81:ca:85:ee:2a:41:62:60:b4:
57:bf:f3:32:1d:61:73:d5:4b:2a:94:63:3a:94:a1:47:23:f6:
14:ca:a2:0a:9c:f6:fa:98:c6:18:6d:9d:e0:46:54:79:29:a2:
ad:ec:09:53:4f:4c:ad:2c:77:7b:43:3f:2e:63:85:a9:d9:e1:
89:7e:42:77:d0:66:a0:89:66:29:27:c3:33:f4:2a:fd:55:bf:
4d:62:1a:71:1c:93:3a:b1:74:34:91:cd:90:1c:db:ba:13:43:
e9:b8:c2:ce:ef:94:a7:10:74:79:25:a2:c3:17:3b:31:26:e7:
01:2a:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:39 2025 by rpki-client