![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
File: 76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json)
Hash identifier: vDkX2WGVxgTZcxxTXDFOPlsjXZPd6dYS+F940ToiXrs=
Subject key identifier: E0:92:74:EE:9C:E5:D8:B4:BD:82:48:E3:19:B0:6C:2D:DA:F5:FD:15
Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
Certificate issuer: /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Certificate serial: 019510FE2F28200B126B17FDB4D4EB0FF1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
Manifest number: 0218
Signing time: Sun 16 Feb 2025 23:00:48 +0000
Manifest this update: Sun 16 Feb 2025 23:00:48 +0000
Manifest next update: Mon 17 Feb 2025 23:00:48 +0000
Files and hashes: 1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: SgpzzSgj0hW6V9O2qxjW1laZ7rNNznpGm8frcpt3inw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:2f:28:20:0b:12:6b:17:fd:b4:d4:eb:0f:f1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Validity
Not Before: Feb 16 23:00:48 2025 GMT
Not After : Feb 17 23:00:48 2025 GMT
Subject: CN=e09274ee9ce5d8b4bd8248e319b06c2ddaf5fd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dd:9d:aa:32:14:d5:c4:4d:48:ef:e6:88:47:
3a:20:c1:4b:fc:f4:d7:52:99:ef:30:19:df:98:e7:
85:3c:d3:28:1c:3c:19:e8:23:d2:01:fb:87:64:02:
bf:fd:d4:c7:e4:8d:24:58:30:29:cc:57:1b:2d:e8:
79:38:7c:90:3d:41:12:67:5b:65:b8:40:4d:30:c4:
46:bb:da:e7:9d:32:be:78:ce:1b:f2:14:52:0b:4b:
ce:49:2b:21:ce:42:a8:03:8e:83:29:7e:02:72:63:
21:fa:b6:48:39:84:14:95:bb:b3:a6:43:c7:4e:56:
a0:56:d4:fc:e5:47:fa:e9:07:88:8b:57:68:3a:49:
c5:36:a3:73:8a:18:80:67:1a:09:6e:45:d7:23:5e:
55:d3:45:ff:4c:a9:3d:85:9b:e7:69:94:13:8b:ee:
3a:f4:c1:f3:86:1f:f6:a5:50:f7:97:21:de:dc:11:
40:fc:9b:f9:55:cf:cd:47:1c:64:a0:ba:7e:c6:43:
e5:49:02:45:90:ed:09:5b:fb:3c:90:bf:00:55:d2:
33:e0:60:74:4a:fe:fe:3d:f9:57:b4:61:dd:16:56:
a3:a3:6f:c3:93:9e:5e:e4:83:95:f9:de:5c:95:bb:
3d:b6:83:a8:d8:05:3e:30:3d:20:65:5e:5f:90:ff:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:92:74:EE:9C:E5:D8:B4:BD:82:48:E3:19:B0:6C:2D:DA:F5:FD:15
X509v3 Authority Key Identifier:
keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:96:e4:f7:5d:db:33:f1:eb:f5:5b:72:7b:54:50:a3:2d:d6:
da:57:c4:b1:e6:58:68:0d:2e:5a:67:3b:a5:f2:51:76:5a:ac:
5e:5f:b9:8f:d0:1e:88:d4:86:88:cf:34:b3:86:0c:99:09:ab:
8d:25:69:bc:03:db:c0:30:06:14:94:c9:2c:68:75:8b:c8:17:
6a:6c:95:eb:78:3b:3d:30:99:9f:6c:60:7d:ef:ab:e2:63:d1:
00:de:36:99:8c:70:4d:cc:69:64:94:77:84:9e:12:3a:5f:82:
7d:e0:22:70:be:77:5a:df:11:90:78:4b:b8:e0:7d:77:2f:13:
d1:50:eb:c3:52:fe:76:ac:4c:a3:fb:11:ce:76:56:d3:3c:55:
08:b8:34:6d:23:7a:f6:be:1d:cc:e1:d3:48:81:1d:af:db:3f:
ff:67:41:ca:32:24:5c:c5:14:8c:7b:1c:6e:66:c3:f2:35:93:
6c:c6:e6:5b:bc:43:f7:8d:ae:6f:2e:3b:92:17:76:66:8f:7a:
22:8d:da:6e:78:60:70:50:7e:f6:d6:3a:f0:d4:ad:e9:4f:bf:
48:74:a8:0d:52:b0:f6:f2:98:71:75:84:12:5a:51:be:20:dc:
75:3a:b5:59:89:4e:60:1d:48:d1:69:98:30:93:a1:f6:f4:0a:
2c:ff:7c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:09 2025 by rpki-client