![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier: ORiwFzQCruYRIZ8Eg0cG4J5s62JCGBRjXU+Bam9gd4o=
Subject key identifier: 44:97:BB:55:22:B4:90:A4:F6:0E:7A:B3:15:EC:00:C3:91:9E:26:A3
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 019511D970E1BF303890EF3A6BAD13652B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number: 06F4
Signing time: Mon 17 Feb 2025 03:00:17 +0000
Manifest this update: Mon 17 Feb 2025 03:00:17 +0000
Manifest next update: Tue 18 Feb 2025 03:00:17 +0000
Files and hashes: 1: 4HntnwbwwM5vMcJuIab-USv0aos.roa (hash: D4Y8oo/1p1CfNZ78xGazKWpJcNpM6vsLdZIWby5+wsA=)
2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: iO0xyNyPzGhPqjZb6lbHm0jVEbzgOHYtlPI42ahbCgk=)
3: xqQfiVZ1kttrOCR7xRSiCiiX2fY.roa (hash: 9+bsofjuuct5WmR8AYlK+fsU9sOrJTXhdDVACpV84ik=)
4: z6m9WxpDgDoLf4lFQ6-3riSMGBo.roa (hash: DdTxEazjHwj9S4/2pF5uXHejE6sdQfki7PScehxeU80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:70:e1:bf:30:38:90:ef:3a:6b:ad:13:65:2b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: Feb 17 03:00:17 2025 GMT
Not After : Feb 18 03:00:17 2025 GMT
Subject: CN=4497bb5522b490a4f60e7ab315ec00c3919e26a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:ad:4d:42:48:5c:67:f4:69:34:40:f1:23:
b7:dd:20:d3:28:57:ec:b0:f6:20:9e:e1:8d:cf:e7:
95:5d:5e:53:69:5b:7f:92:42:af:4b:e4:49:e0:0e:
bb:1f:94:69:5d:83:8a:54:0a:5b:e9:66:96:07:18:
62:31:cf:ec:3b:ed:fb:9c:90:c6:f3:0a:5b:64:a7:
c4:e2:b6:5a:30:12:5c:8c:f1:09:bd:44:5d:c0:27:
9a:47:4d:ff:93:28:5b:df:19:52:ac:db:d6:b8:37:
04:ae:e8:b1:58:ec:eb:0f:f2:38:b1:00:c7:ac:38:
65:f3:2e:f2:80:92:ab:ca:46:a2:e7:40:2f:5b:c6:
ee:81:9b:c3:65:8e:88:c6:07:6a:fb:91:03:56:dc:
42:19:8c:4a:37:26:80:56:20:41:7e:2e:58:9a:3c:
8e:6d:df:24:69:d6:83:b9:20:b8:dc:dc:c9:96:da:
46:e5:93:dc:4b:5e:ae:18:70:91:8b:71:39:66:77:
03:7f:fb:fe:8f:d8:c0:db:ce:01:df:ca:c4:96:bc:
1c:fc:48:9f:9b:cc:f4:3f:66:83:42:5e:28:17:fc:
b2:50:cc:56:31:1d:27:5f:06:0d:ab:cc:80:ac:2d:
37:71:03:0d:c5:8d:6b:a8:d7:56:fd:ce:a4:36:fa:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:97:BB:55:22:B4:90:A4:F6:0E:7A:B3:15:EC:00:C3:91:9E:26:A3
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:38:5c:60:cd:13:ea:b4:f2:64:b6:6f:fe:6c:dc:9f:fa:30:
cf:7f:d2:c0:55:14:2d:62:df:cb:f9:78:e4:99:6b:96:56:53:
74:08:99:c0:0f:7e:70:8e:61:24:a8:92:78:19:db:f9:c5:4f:
5a:07:f9:f8:07:4f:ac:36:79:24:18:3b:71:b3:33:73:8c:87:
fb:d3:67:39:4e:dc:ae:67:a5:a4:e2:5e:d5:3c:e8:eb:54:85:
29:eb:89:ba:98:82:d7:0e:d7:cf:f4:1b:a7:32:13:f6:50:0f:
24:4d:0c:fb:5b:4f:41:6f:2b:68:3c:b9:2e:76:00:32:2e:e3:
27:db:49:a8:23:06:55:c7:9c:e9:4a:33:02:fc:6f:20:c8:d7:
c7:54:c5:81:57:5e:bf:2c:41:91:14:0b:84:74:3c:3c:43:a7:
2e:58:2b:6a:89:a3:c7:b5:4b:3d:5f:17:8e:8a:2f:5e:cb:5e:
f9:57:05:41:87:50:26:a5:6b:83:d3:34:70:ad:6f:54:4e:66:
79:5a:3a:21:2d:30:ee:87:5d:1b:41:05:8f:71:85:27:b0:5a:
88:49:44:c7:c3:cb:3e:af:c5:a4:f6:96:f6:4c:55:dd:f9:a0:
09:ca:de:6b:58:e0:7f:de:1d:d2:a2:be:87:2e:ca:a8:28:af:
4e:81:a8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:16 2025 by rpki-client