![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
File: EyhoZEV55uth9HcdZ7QGZPUBFvo.mft (raw, json)
Hash identifier: J5bKlJ+BVLddATccjq546/bgVtx78pmh7OnVAaaBVOY=
Subject key identifier: EA:63:6E:6E:50:F0:CB:F3:F6:C5:20:68:78:01:11:41:60:4C:BF:C0
Authority key identifier: 13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA
Certificate issuer: /CN=132868644579e6eb61f4771d67b40664f50116fa
Certificate serial: 019510C7DFED286D091637C6225C30B90FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
Manifest number: 0FEE
Signing time: Sun 16 Feb 2025 22:01:29 +0000
Manifest this update: Sun 16 Feb 2025 22:01:29 +0000
Manifest next update: Mon 17 Feb 2025 22:01:29 +0000
Files and hashes: 1: EyhoZEV55uth9HcdZ7QGZPUBFvo.crl (hash: BogkdKlrK2b6T2xT+RwuqAO0X/4GTJ5SkuvTmwnwOEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:df:ed:28:6d:09:16:37:c6:22:5c:30:b9:0f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=132868644579e6eb61f4771d67b40664f50116fa
Validity
Not Before: Feb 16 22:01:29 2025 GMT
Not After : Feb 17 22:01:29 2025 GMT
Subject: CN=ea636e6e50f0cbf3f6c5206878011141604cbfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:ad:a7:ff:df:d7:a7:6c:0f:c5:15:4b:63:
c9:7c:f2:be:a0:d8:e7:f1:bd:e7:40:39:f9:f9:3e:
c8:24:c6:67:6d:e8:5e:7e:d7:40:f3:aa:25:cb:3a:
af:cb:41:ef:28:92:3e:da:e3:77:82:8f:35:60:87:
01:a6:c5:23:5e:34:a7:ff:1f:03:43:f2:9f:ab:9b:
1b:db:88:5a:5e:c1:01:03:c5:7e:22:0c:a7:27:ec:
68:a5:58:88:dc:a8:d2:6c:91:9d:17:f3:a3:37:8e:
80:dd:a0:99:bc:b5:dd:74:96:62:bb:c4:cd:42:92:
cc:19:e5:0e:ae:88:48:7d:fe:6c:96:5f:35:72:65:
3a:1d:f9:3c:5a:e3:6d:67:70:0c:16:6c:30:40:7a:
dd:da:40:c0:fe:6f:8a:bf:9f:12:00:e3:13:f6:81:
d8:29:93:c6:44:41:2e:5b:e1:98:68:b8:55:25:1e:
84:8d:a3:da:41:e6:eb:69:35:77:16:96:c2:ec:15:
c3:9b:f9:c7:28:95:9a:0b:aa:7b:7a:23:3e:a7:9e:
7f:9d:96:86:bc:45:fa:82:f3:29:95:65:48:b2:f4:
ee:71:ad:93:90:90:7b:c4:95:98:55:7b:48:5b:b0:
e5:62:5f:37:46:10:fa:84:44:fd:18:30:a2:f9:1b:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:63:6E:6E:50:F0:CB:F3:F6:C5:20:68:78:01:11:41:60:4C:BF:C0
X509v3 Authority Key Identifier:
keyid:13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e0:6f:2f:71:25:2e:c5:4b:29:2a:17:bf:db:37:d5:70:ca:
cd:df:89:50:92:e6:01:3c:90:e0:6c:3c:35:53:0c:0a:ff:a3:
f5:30:cf:10:22:da:66:e7:2f:3e:e2:78:99:39:52:bc:58:5e:
e5:a3:fa:fa:27:e6:eb:ec:df:74:f5:60:d2:57:b9:d0:f5:3e:
a3:0a:ae:f9:c1:59:60:08:1b:a2:a0:10:8c:52:95:14:b1:0f:
44:f9:f2:5c:f8:35:35:c8:b4:ce:b4:f0:bd:90:b5:99:f7:8f:
84:8c:26:bf:8b:b1:9c:59:63:b9:4f:d0:c7:e1:1a:64:84:26:
43:3d:e9:20:79:cf:ad:7e:46:90:8a:d3:5e:15:1a:29:79:09:
a7:5e:40:26:41:d4:31:1e:0e:4b:98:16:4b:77:af:c0:4f:cc:
4d:29:75:ee:93:12:b9:f6:61:88:f8:70:c9:fd:42:dd:2d:df:
bd:7a:aa:80:cc:43:78:13:1f:e6:3b:1d:8d:78:12:08:8a:9a:
d5:11:59:6b:8e:73:29:27:cb:59:b3:7c:2e:a5:31:db:58:d8:
4f:54:41:9a:5e:7e:94:6c:dc:76:d3:66:b0:f2:1b:c0:51:42:
36:94:b7:b6:61:ab:b4:fd:47:29:04:ef:11:62:34:e8:25:2c:
aa:ca:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:56 2025 by rpki-client