![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
File: se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft (raw, json)
Hash identifier: y6++M6a8YAMvd7T9MmsPwqH+UB9/k2gew4ipgxldVhU=
Subject key identifier: F9:42:AB:2C:81:77:A9:51:5B:C1:09:3B:0C:F3:74:29:AB:0F:60:79
Authority key identifier: B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
Certificate issuer: /CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Certificate serial: 019510C72C990C9F829F9D918AF727770BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
Manifest number: 0DD4
Signing time: Sun 16 Feb 2025 22:00:43 +0000
Manifest this update: Sun 16 Feb 2025 22:00:43 +0000
Manifest next update: Mon 17 Feb 2025 22:00:43 +0000
Files and hashes: 1: se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl (hash: HIrdb8hRo6xvnpqkiJvbWAYOUWLLweJde17CgiGy36I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:2c:99:0c:9f:82:9f:9d:91:8a:f7:27:77:0b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Validity
Not Before: Feb 16 22:00:43 2025 GMT
Not After : Feb 17 22:00:43 2025 GMT
Subject: CN=f942ab2c8177a9515bc1093b0cf37429ab0f6079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:79:e3:f1:47:5d:ba:96:32:bf:ed:98:a0:
ad:1e:49:7c:c1:62:47:35:f7:8d:0d:0b:dc:51:93:
ea:c7:f1:89:e5:2b:fe:98:e8:7a:e1:d3:6c:09:e3:
95:a8:71:aa:08:cb:a8:4b:70:8e:e9:ab:e4:e1:b5:
ef:5a:2c:11:18:63:92:34:f5:ce:56:a6:4e:be:7b:
a4:d0:ac:0f:e0:4b:28:ee:52:d0:b4:19:3a:9a:1e:
89:8a:3d:13:e4:cb:f0:1f:93:f1:a8:a6:a6:b9:a8:
a6:76:14:e4:40:d4:67:b5:e6:3e:84:df:5f:e9:0a:
b4:46:ff:7e:94:5e:64:27:19:2f:73:10:90:b4:63:
a6:a0:e0:76:57:44:31:08:8f:f8:f1:0c:24:1d:2a:
50:3a:23:bb:17:08:39:2b:8c:4f:85:6f:9f:3d:2d:
14:5d:97:27:b3:c3:47:e9:95:20:f0:d6:64:46:74:
35:c7:5f:c9:f3:5e:a6:34:ae:41:c2:48:88:22:f1:
e3:dc:96:d6:3f:37:7c:7b:13:90:dd:0d:e9:60:bd:
5e:1e:a3:10:e1:67:bb:58:67:6a:13:57:b9:15:9e:
ee:c9:c0:01:a5:27:c8:29:cb:f6:ea:d2:03:c1:37:
db:30:9f:11:06:b8:d5:b9:3f:97:32:47:bf:1a:c2:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:42:AB:2C:81:77:A9:51:5B:C1:09:3B:0C:F3:74:29:AB:0F:60:79
X509v3 Authority Key Identifier:
keyid:B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b5:57:ae:e4:d1:23:9c:38:56:c1:ac:3e:d6:11:64:c0:d2:
f8:b8:8d:fc:0a:64:8e:26:72:f6:da:d6:54:c1:6c:b5:3b:54:
14:f0:42:78:50:a2:40:0a:a4:c1:47:99:11:d8:83:48:16:61:
48:ad:da:ef:44:56:ae:6e:2e:54:46:e5:92:d0:08:0c:a7:ee:
91:14:8f:79:c7:dd:08:98:e9:e0:9e:bd:fe:55:4f:c2:b2:ec:
6a:bc:1a:7f:1b:3c:d2:66:74:d4:b4:b8:4f:e1:27:e8:da:ff:
14:4f:13:e4:11:4a:d4:9a:c8:a9:4c:ca:61:ae:89:a3:f0:7a:
9a:79:73:a9:11:25:cf:3d:53:f9:76:63:a0:61:49:55:81:8c:
99:97:8a:a1:c2:48:3b:da:92:b7:3b:42:7c:49:c4:74:8e:b3:
f8:d1:71:b9:4a:16:15:81:15:82:91:10:b6:dc:ca:07:2d:da:
62:6e:c5:6c:70:d1:72:00:3f:16:71:a3:27:d2:f2:d4:fb:88:
0a:c4:45:91:5e:4e:10:c2:d5:59:c7:cc:4a:a3:75:95:6e:82:
5e:c3:6a:8a:d3:3e:87:ab:ed:62:f0:c1:a8:53:2b:00:34:44:
ac:34:da:7a:17:46:a5:87:64:61:6b:05:cf:a2:80:6c:0c:69:
99:b6:53:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:20 2025 by rpki-client