![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File: fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier: Y+evnzjJ5g4gurmawj9CD2TckwWRam9FjP5tzdpy/Oc=
Subject key identifier: A5:67:42:59:D2:D3:86:07:78:2A:80:37:FB:B6:D8:90:F7:D5:34:F6
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer: /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial: 019511354068FE47A8DD8648577599FB6EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number: 0D56
Signing time: Mon 17 Feb 2025 00:00:57 +0000
Manifest this update: Mon 17 Feb 2025 00:00:57 +0000
Manifest next update: Tue 18 Feb 2025 00:00:57 +0000
Files and hashes: 1: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: hWZ8S1NrgaWGd+Lx0Q1KNfJ7f/mQSn4k+aHIOr938+Q=)
2: pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa (hash: lPs9NFo1GbKQdNopdVVC2UFKPHRxF4UKX2B76mlkhRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:40:68:fe:47:a8:dd:86:48:57:75:99:fb:6e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Validity
Not Before: Feb 17 00:00:57 2025 GMT
Not After : Feb 18 00:00:57 2025 GMT
Subject: CN=a5674259d2d38607782a8037fbb6d890f7d534f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:f4:3f:bb:44:77:04:b8:25:84:88:d6:c2:
8a:d5:0b:e3:11:79:47:d0:15:48:3a:cf:81:72:40:
a6:b1:76:15:e3:24:c1:a6:28:7e:67:f1:bf:25:22:
ce:a4:91:8b:35:03:bf:ac:40:f8:84:b9:84:1c:46:
55:34:68:c8:ae:a2:17:98:37:e1:8c:47:0f:94:9b:
9b:a7:f8:0b:d4:f4:06:14:94:41:0c:b8:a3:91:1e:
c1:9f:ca:a8:a6:d9:99:d6:b2:c4:a8:39:aa:fa:ad:
c7:b2:be:0f:a3:bf:c9:f1:d5:4c:02:f7:1d:c0:69:
16:95:d8:83:83:65:fb:d4:f6:37:69:21:c7:a4:11:
e7:d0:24:9b:18:38:e6:e1:9b:26:cb:99:d0:6d:f2:
cd:0d:c3:19:37:a2:06:8d:8a:f5:25:e7:87:fc:74:
69:84:2e:45:f8:64:41:ff:ae:54:7e:f9:96:c9:e8:
0e:75:3a:89:26:00:88:9a:d2:62:c6:50:3e:08:01:
a6:a6:07:15:9f:6f:f8:5b:aa:eb:1f:33:eb:fa:ee:
0f:24:9e:26:66:98:f9:5e:71:f6:5a:22:2e:7e:73:
bd:c0:99:bd:12:4e:27:08:90:6e:63:31:d0:df:43:
05:48:a6:8b:9f:81:5e:55:45:f0:28:e6:ef:dc:73:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:67:42:59:D2:D3:86:07:78:2A:80:37:FB:B6:D8:90:F7:D5:34:F6
X509v3 Authority Key Identifier:
keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4a:61:24:36:fc:44:36:de:c4:5e:e9:5f:f4:f8:2f:c7:64:
8b:fa:88:5d:9f:2b:ee:2d:e5:bb:41:1f:74:42:58:98:ae:d0:
f7:8e:4e:1f:b1:ac:93:2b:ce:5d:6e:85:93:e7:28:dc:1a:92:
6f:a3:42:ea:b6:74:c6:5d:a0:ff:0e:16:c9:00:90:7c:c1:98:
9f:2d:bb:3b:2a:45:a8:24:25:e4:29:61:07:02:ca:e1:f9:05:
d8:0f:ee:51:7c:0b:eb:e4:7c:36:44:0f:28:43:d8:98:a5:21:
ea:dc:de:94:8a:13:a6:23:44:4b:c6:e3:3a:53:1a:5c:05:e8:
7a:c2:1f:1e:eb:bf:52:75:67:5c:b5:9c:b3:8f:c3:e3:cf:c6:
49:a5:f4:87:95:c8:56:30:23:c3:af:1b:21:46:d2:61:67:43:
e2:90:5c:bc:57:47:13:1a:0a:fa:6f:fc:f5:c5:09:8d:80:77:
77:e7:b3:d3:0f:21:06:f5:6f:3d:46:e1:7f:43:2f:52:58:cf:
3e:11:82:5d:49:5f:ff:d9:6a:a7:24:39:0f:45:aa:3b:f7:95:
6e:61:e0:79:26:31:06:ae:00:1c:2f:ea:5b:cc:d4:2f:ae:16:
96:99:9e:87:00:11:fd:fb:b4:52:c4:06:6f:a4:0f:e9:a5:2f:
72:f2:b1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:24 2025 by rpki-client