![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
File: Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft (raw, json)
Hash identifier: Q0iz6ldcEgO9wwyu0pKHaZrvrETFPFjarMk5ErO8gfk=
Subject key identifier: F4:40:2D:51:22:8A:54:5D:B5:28:81:5F:6F:95:09:BC:73:E5:8F:B9
Authority key identifier: 63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF
Certificate issuer: /CN=63ef6bdbc42ad06defdad72679414346d8d048df
Certificate serial: 0195127E4A214FC2CA0C25FE109260F7142A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
Manifest number: 1452
Signing time: Mon 17 Feb 2025 06:00:21 +0000
Manifest this update: Mon 17 Feb 2025 06:00:21 +0000
Manifest next update: Tue 18 Feb 2025 06:00:21 +0000
Files and hashes: 1: Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl (hash: WEK2KX9k1qJ98S0blyaAVGUO4tiQpn7nOeVa2Ai8JtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:4a:21:4f:c2:ca:0c:25:fe:10:92:60:f7:14:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ef6bdbc42ad06defdad72679414346d8d048df
Validity
Not Before: Feb 17 06:00:21 2025 GMT
Not After : Feb 18 06:00:21 2025 GMT
Subject: CN=f4402d51228a545db528815f6f9509bc73e58fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:96:12:53:b8:f1:1c:d9:06:39:bd:44:0a:
33:3e:e2:20:b0:66:a6:c2:65:1f:45:a9:61:2b:c4:
72:f5:8d:3a:93:1f:ff:3b:37:6e:a6:22:f2:50:c0:
69:86:58:56:97:2f:1e:a2:78:85:2e:73:fd:91:11:
1a:29:d5:6b:81:35:b9:db:e0:ee:d2:68:fc:8d:60:
47:a7:da:50:ea:9b:1a:9f:67:d2:aa:69:d9:3b:e3:
ef:f7:f0:70:e0:b9:f9:ee:07:4f:38:c9:8a:1c:81:
04:cd:9c:8b:20:b4:ae:14:7d:26:06:92:e8:4d:73:
60:39:d7:85:68:62:27:b0:0a:d2:57:6b:5f:20:33:
24:1d:b1:a2:15:0c:75:46:9a:92:20:d0:37:a7:e3:
2a:b7:81:53:ac:05:e8:82:24:52:a8:4c:b3:60:13:
cf:f9:b2:44:93:91:cb:60:12:aa:18:33:cc:ca:ab:
fa:27:87:8d:b6:fe:2a:b7:eb:3a:1a:0d:ff:a1:db:
bc:a8:59:67:d4:f1:1d:0a:0a:00:ef:25:2a:fd:4e:
e8:9c:42:75:e9:25:e4:bc:23:02:d5:ec:4c:c1:73:
ac:f5:c8:23:19:80:87:8c:f4:8f:d5:12:46:9f:fc:
74:70:a6:fe:6d:47:d0:22:48:8f:50:1c:87:57:f8:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:40:2D:51:22:8A:54:5D:B5:28:81:5F:6F:95:09:BC:73:E5:8F:B9
X509v3 Authority Key Identifier:
keyid:63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2a:62:00:3c:26:ad:2d:cb:1d:c5:57:22:67:fd:40:04:fa:
dd:fc:8a:a3:8e:cf:87:83:c9:ef:fc:cd:85:33:ef:44:30:39:
16:06:86:54:26:5c:b6:df:a8:d1:6c:ee:28:24:6a:5e:d5:50:
27:00:54:94:ad:5b:ea:86:7b:91:37:7f:9e:8c:7d:e4:d7:8a:
b6:9d:7b:03:15:37:4f:ba:9c:28:c0:6f:c9:0f:e4:da:25:48:
aa:c3:83:d0:ec:24:c6:d7:7e:e5:bf:79:3b:8e:6e:96:47:aa:
95:1a:c4:ee:8a:a2:55:08:2b:0e:e6:a7:ee:16:68:e6:f4:e1:
2f:f5:66:e6:6b:cd:b1:97:ff:bc:61:1f:31:a2:70:fa:97:ce:
81:d5:1b:46:3f:7a:55:22:09:24:ac:f4:26:1d:dd:9d:00:86:
d3:17:16:60:dc:81:ba:bc:87:44:ad:c5:0b:9b:c3:eb:23:79:
08:5f:ce:43:99:aa:e3:2f:d6:71:39:95:b2:19:4e:31:8c:a5:
b1:b6:0b:1a:08:2a:14:8c:7f:d2:01:e7:60:69:f4:a9:a8:f4:
b2:a7:68:42:a7:9a:46:36:83:b5:c0:fa:cf:f9:0b:84:b3:57:
ff:62:18:cb:0f:76:61:05:de:c6:14:03:a0:93:10:cf:a1:41:
c7:ac:dd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:36 2025 by rpki-client