![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
File: nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json)
Hash identifier: GYtSyqxp+9YYRU9XM7o6HE1D/57FmGNlMEyObqTny/0=
Subject key identifier: 94:07:A5:BF:BD:C0:93:6A:75:7A:9D:AA:08:35:DA:DC:85:71:8A:34
Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
Certificate issuer: /CN=9e3f1579ae176662d663a3834c0fef824cee033c
Certificate serial: 019511D97314D1C4FBF3ACB016B1C55E2892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
Manifest number: 0185
Signing time: Mon 17 Feb 2025 03:00:18 +0000
Manifest this update: Mon 17 Feb 2025 03:00:18 +0000
Manifest next update: Tue 18 Feb 2025 03:00:18 +0000
Files and hashes: 1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: poXGA4it5uQyOOVAuGfGYFh7dwILslp4wbKimJ8U3qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:73:14:d1:c4:fb:f3:ac:b0:16:b1:c5:5e:28:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c
Validity
Not Before: Feb 17 03:00:18 2025 GMT
Not After : Feb 18 03:00:18 2025 GMT
Subject: CN=9407a5bfbdc0936a757a9daa0835dadc85718a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:85:32:c2:18:45:ce:fd:08:dd:d8:98:14:
ed:77:d0:8f:3c:ff:3a:40:b1:ca:6a:4b:9a:1b:41:
d6:21:2e:a8:db:8a:82:d9:74:b8:20:93:28:17:bb:
28:51:e3:31:14:00:88:45:22:55:8e:fa:03:09:8a:
ca:5a:d2:c3:d4:63:e3:10:0a:e4:e7:85:00:a9:2c:
1b:e6:2a:d5:49:43:f4:cc:f7:e6:ad:ce:94:d5:cd:
2e:3c:f8:49:c3:e7:03:04:74:10:8d:15:35:1c:a3:
e4:46:45:b0:d1:e5:b8:b9:46:6d:7b:41:53:99:98:
a0:3b:6c:42:2b:61:61:13:90:a6:94:8c:17:1e:d5:
81:6e:52:e7:4f:98:99:ca:37:d8:fe:52:39:ea:0f:
ab:04:9b:31:dc:97:ab:1b:ef:7e:f6:b3:f9:ec:4d:
3b:a5:dd:b0:68:66:a6:54:ca:40:2f:db:93:0f:b1:
4b:25:c2:b1:63:07:af:30:6f:d6:7e:36:fa:5d:ef:
7f:a1:cb:ef:0b:0d:ec:e4:ac:da:85:a0:f0:32:75:
58:41:b4:c7:21:d9:b7:3e:15:f5:0d:c3:12:b5:26:
b1:c5:e4:9d:65:53:b3:90:c9:ea:20:69:52:a0:dd:
5c:9e:e8:f3:02:a6:6e:8a:7f:2f:9d:9c:7b:41:13:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:07:A5:BF:BD:C0:93:6A:75:7A:9D:AA:08:35:DA:DC:85:71:8A:34
X509v3 Authority Key Identifier:
keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bd:88:67:c0:b3:33:c0:7e:98:26:f2:0b:bb:d1:c1:d2:f0:
1a:87:f3:83:ab:0b:b1:37:f3:24:a4:3f:08:a4:56:0c:04:ac:
9a:f3:37:c2:41:6b:a1:63:69:1e:fa:b7:cf:a0:7e:15:9b:1d:
38:ea:f2:24:ce:c0:2d:74:31:51:1b:d6:7f:9c:d8:cf:e9:1c:
36:c2:28:58:df:ad:31:bb:0e:b9:f5:1f:05:30:6b:e9:83:36:
09:d4:ab:4b:81:33:26:65:71:a5:31:20:48:e9:ba:68:23:30:
2f:87:b0:cc:3f:f0:76:44:90:5f:dc:a7:60:14:43:fb:4d:bb:
72:83:ad:65:8b:f7:93:22:ca:17:23:f1:26:56:71:aa:d1:d2:
03:89:d8:a6:0d:2e:fb:6f:4a:1a:dc:c3:cb:d8:09:78:0e:1d:
6b:f6:b3:d4:64:3c:60:93:f0:1a:00:69:18:c1:7c:9e:58:b0:
81:1b:26:62:99:6c:44:47:da:97:42:aa:8b:da:bb:17:be:e7:
8b:b2:65:ab:6f:03:17:f7:89:8b:69:fc:85:d4:60:a3:ec:54:
36:fc:88:b2:38:25:18:3d:77:cb:7e:83:7e:f1:7e:01:e6:f8:
b5:a5:06:fd:8f:92:b0:e5:ad:5d:bb:94:1c:cd:04:24:8e:2b:
9c:27:db:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:21 2025 by rpki-client