![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
File: zWv2DrCPHiOrqLp5fBFyREzhW3E.mft (raw, json)
Hash identifier: ONNJicpBVd+2e8nU7TR0ZL+Itk7Yi2JyXXpn2ypfD3k=
Subject key identifier: 2D:E8:6B:22:D1:0E:C2:19:3E:AA:CE:48:D2:FE:AE:0E:E3:B7:92:13
Authority key identifier: CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
Certificate issuer: /CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Certificate serial: 019510C6A031FB6B7A5F9B9DDFDB7872385B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
Manifest number: 0F04
Signing time: Sun 16 Feb 2025 22:00:07 +0000
Manifest this update: Sun 16 Feb 2025 22:00:07 +0000
Manifest next update: Mon 17 Feb 2025 22:00:07 +0000
Files and hashes: 1: zWv2DrCPHiOrqLp5fBFyREzhW3E.crl (hash: pm3I0F3WL21MygwxA/Rt8cTy58jQsE8yFT1qO+hhyJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:a0:31:fb:6b:7a:5f:9b:9d:df:db:78:72:38:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Validity
Not Before: Feb 16 22:00:07 2025 GMT
Not After : Feb 17 22:00:07 2025 GMT
Subject: CN=2de86b22d10ec2193eaace48d2feae0ee3b79213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:93:25:a4:5f:13:64:14:88:9f:60:31:a3:
19:74:e9:14:46:cd:e4:65:7f:01:4f:bb:73:c1:be:
a2:8e:30:45:a9:35:b4:9a:7d:09:f6:b0:a7:c7:67:
10:58:db:4c:ea:e3:c5:f5:3b:17:99:5b:a0:06:5f:
d3:17:e6:da:95:a8:31:cc:16:c7:55:3f:04:f8:2c:
f8:4f:17:85:4e:a4:5c:26:29:35:bd:28:2c:22:48:
34:71:10:c6:89:3c:15:1c:ac:8c:d4:33:c5:b0:58:
4c:47:05:5e:df:a9:91:13:52:0d:2d:cc:e7:f3:e2:
f7:5e:2a:92:0b:80:ee:17:b4:82:e1:de:5d:10:33:
2d:34:de:85:de:34:b5:62:34:dc:e7:19:ae:5d:a5:
cf:7b:7c:cf:96:b9:e3:55:20:fc:30:d6:8e:90:57:
8b:81:20:25:c3:5b:e6:7b:d9:2a:3e:0d:fa:af:ec:
c1:86:e8:c6:08:98:cd:d3:80:6b:b7:02:c7:64:39:
82:b6:94:5e:0e:7b:fe:61:a7:18:89:9d:93:f5:30:
90:c2:0e:f5:60:07:6e:a9:48:31:d0:ae:c7:64:00:
76:0c:db:c5:6f:35:51:38:f0:0c:5b:81:fd:3c:e9:
3f:17:be:c9:5a:fb:e9:71:3b:3b:3d:b4:6e:50:5f:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E8:6B:22:D1:0E:C2:19:3E:AA:CE:48:D2:FE:AE:0E:E3:B7:92:13
X509v3 Authority Key Identifier:
keyid:CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:24:73:fe:3f:f2:88:b7:bf:06:4d:e0:68:8e:2b:53:9e:07:
56:dc:03:7c:de:96:cb:d5:38:d0:2a:4a:92:33:75:08:8d:f0:
2a:f9:d4:64:68:1e:6e:f8:00:b3:af:d9:56:10:a8:e3:ad:a7:
59:e2:0d:9e:31:cd:97:b1:e4:23:08:78:b8:b0:5a:72:d2:af:
e5:1a:b4:26:0e:59:37:95:a1:fd:3c:67:e5:ad:c3:23:67:a8:
5c:3d:fb:00:f4:38:a8:11:46:20:0c:5c:4a:e3:20:1b:35:8b:
24:0f:c7:df:13:fa:50:97:4f:7d:04:45:88:e2:3c:78:62:5c:
59:be:fc:4f:69:27:f8:a6:26:7b:bf:94:c8:9e:31:1b:3f:1d:
17:6a:b0:78:a5:9b:d7:f6:65:a1:83:ec:7b:57:69:e7:21:02:
d8:78:23:95:77:57:b5:82:78:19:8b:45:7c:b6:93:57:f1:64:
b7:9e:16:fa:37:e6:f7:fc:9a:ec:ad:cb:e0:b2:1f:1d:80:ba:
13:b4:e9:30:5b:b1:d6:45:7b:4d:5d:23:87:1b:fb:19:b8:33:
e6:1f:2b:fc:ce:8a:3c:8d:e8:c7:2b:43:f8:4e:dd:77:27:8b:
d6:da:8d:04:24:51:63:53:ac:68:38:8e:97:38:90:e5:58:eb:
0f:d6:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:57 2025 by rpki-client