![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
File: Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json)
Hash identifier: QJXq717lQHkm8dEW06T8/pYOEIlvk1e64L+KOxHTx24=
Subject key identifier: F8:D6:F2:6D:D2:A7:2F:16:62:D1:3E:0B:ED:E6:FE:F7:73:4B:A9:22
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial: 01951134EF0DCF16C175A5E04162256BC879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
Manifest number: 11AC
Signing time: Mon 17 Feb 2025 00:00:36 +0000
Manifest this update: Mon 17 Feb 2025 00:00:36 +0000
Manifest next update: Tue 18 Feb 2025 00:00:36 +0000
Files and hashes: 1: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: eJk/4NetG9E99IpgyHiCMqUm8DAlJrbg3d8azEHq/LM=)
2: Qgkf9isvn9G1i53cocvwB25dPG0.roa (hash: 7pOvhNxITVVpr4C2N2+h/b2aAgFP8cFKYE5FjzDD/YQ=)
3: XGxdWNZPiFptk-3w7OILGgkhItU.roa (hash: xf5heCAI8Pty8+MuLnNYj13qa72HA9enfkhk9E22KD4=)
4: XQLqdml-mlBf3Z-90xd5Tk9chkc.roa (hash: nSfERnt4sWaMf0P1jQhY7bLFNZayDQ04cDYTAEFX1MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:ef:0d:cf:16:c1:75:a5:e0:41:62:25:6b:c8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
Validity
Not Before: Feb 17 00:00:36 2025 GMT
Not After : Feb 18 00:00:36 2025 GMT
Subject: CN=f8d6f26dd2a72f1662d13e0bede6fef7734ba922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:77:06:ac:5f:61:7d:ef:16:33:4f:99:3f:
6b:ae:3e:7d:14:14:d8:24:bb:5f:b5:de:a4:d7:e8:
2f:7a:de:95:6c:ec:26:10:c2:81:16:44:72:d1:e1:
bf:65:20:cf:98:7a:94:18:51:a0:aa:86:7a:c1:84:
ae:2c:15:87:eb:ac:a2:e1:4a:f6:1c:c5:99:18:6a:
61:7c:84:56:ba:56:e0:aa:32:be:dd:e3:7d:ce:83:
53:92:6c:7c:e9:05:25:66:1d:16:ed:f4:91:d5:f5:
87:e3:fc:b2:cc:65:cd:b7:58:61:5e:2c:a5:25:ac:
24:22:ed:52:9a:cc:f5:67:8e:e1:56:fd:08:29:29:
13:68:73:22:f4:e8:0a:24:41:b7:d0:c0:8b:6a:d1:
ed:49:9e:a9:d2:9a:58:35:5d:11:94:57:73:79:3a:
45:5e:e3:ba:c0:74:2e:ce:f3:1e:0d:8b:ec:2c:57:
3a:50:10:ba:20:c3:79:de:ff:7a:5d:9b:cc:d2:70:
9d:f1:a8:68:0f:b9:d2:06:9a:6d:5b:b3:8f:e6:71:
d4:21:58:f6:a6:78:8e:e7:c9:ad:d2:4e:fe:91:d7:
d4:13:86:cf:fc:d3:7a:f6:af:c3:db:fb:10:e1:f5:
f5:42:61:9a:70:41:56:63:a4:f0:46:b5:66:53:d8:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:F2:6D:D2:A7:2F:16:62:D1:3E:0B:ED:E6:FE:F7:73:4B:A9:22
X509v3 Authority Key Identifier:
keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7d:15:58:e4:fb:42:83:da:c4:20:6b:b7:46:42:44:db:f5:
24:e3:82:a3:2f:f8:bb:27:df:cf:25:bc:97:ad:83:80:7f:b5:
c9:e9:16:94:f4:95:d6:34:42:9f:c2:b4:39:f7:ca:a0:84:28:
b5:e9:5d:3f:69:da:c5:05:c3:2f:a6:87:95:b8:9b:cb:58:87:
bc:6d:89:85:bd:c3:e0:6c:bb:7f:17:de:74:f0:67:d4:63:1d:
b8:b1:79:1a:d0:f4:0a:30:0a:44:40:e9:43:bd:a4:19:d1:91:
56:ff:6e:8e:c1:6b:1c:d2:e8:dd:2c:94:96:39:ea:04:44:b7:
ff:3a:0b:d6:1f:b5:0e:f3:45:85:86:b8:63:d2:15:ae:87:7d:
08:a9:c6:a8:59:2f:c5:38:65:04:f4:12:4f:98:e7:b6:9d:b9:
7e:cc:53:64:9c:a1:16:51:13:11:e4:19:d6:fb:b4:97:e4:08:
2c:7c:e3:80:e0:79:3c:33:df:4f:50:2f:1f:c6:f7:c7:c2:89:
4a:49:74:b6:a2:80:69:42:6e:d2:bc:ed:41:73:3b:84:79:a7:
44:72:6e:51:4a:1f:e5:c6:6a:30:c8:58:30:35:07:79:f0:71:
be:84:02:e7:f6:17:60:d5:01:64:de:d2:86:dd:68:37:e2:91:
fc:8b:45:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:20 2025 by rpki-client