![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
File: IsFSYGEl62bVIiY_oDEJu_C7o9o.mft (raw, json)
Hash identifier: sdWD6LB+rTrOQf+4NiwcmJ3VSSVPLAt0VIYGQ+DqLJw=
Subject key identifier: 4E:32:80:27:0D:88:1E:E4:44:E4:73:16:B0:63:5E:9B:A9:81:15:10
Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
Certificate issuer: /CN=22c152606125eb66d522263fa03109bbf0bba3da
Certificate serial: 019510C738378CE6C329D6234D5EBCA477B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
Manifest number: 1459
Signing time: Sun 16 Feb 2025 22:00:46 +0000
Manifest this update: Sun 16 Feb 2025 22:00:46 +0000
Manifest next update: Mon 17 Feb 2025 22:00:46 +0000
Files and hashes: 1: IsFSYGEl62bVIiY_oDEJu_C7o9o.crl (hash: 4Mdnkn0UCVdgY4i+Ax0Md55DM/pHY6KnrQqW8k+7USo=)
2: sY4zDGKaTiswT3v9bquB0z3xZ38.roa (hash: UFeTme0jN/PK2GkSjMta2wryPzRGN56pgsmPYrOPfD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:38:37:8c:e6:c3:29:d6:23:4d:5e:bc:a4:77:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da
Validity
Not Before: Feb 16 22:00:46 2025 GMT
Not After : Feb 17 22:00:46 2025 GMT
Subject: CN=4e3280270d881ee444e47316b0635e9ba9811510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:1d:7e:2a:d7:a8:bf:b5:da:a4:28:6c:d8:
16:54:f7:94:01:42:f4:91:d9:24:f0:2a:3b:c3:87:
a5:20:7c:42:72:df:fd:20:a2:61:ec:e0:9e:64:bd:
68:b8:75:78:a6:bd:31:9f:5e:47:28:c8:d9:8c:8b:
9b:57:20:49:ec:2d:66:fb:60:ab:7c:82:bb:14:8c:
d1:83:35:6c:73:34:50:e3:f7:5c:6c:6b:09:89:6e:
37:e5:f0:4f:9c:e2:97:a2:e4:00:3b:50:ea:97:77:
1d:92:50:2c:e2:21:22:e9:22:75:dc:84:be:77:5b:
f4:f6:a0:be:e2:0d:a6:57:4d:b4:23:99:1e:90:44:
3b:f8:09:36:8c:c4:3a:07:27:70:5b:77:62:9d:f8:
bb:d8:63:2b:8d:01:cf:8b:f9:f3:aa:c3:14:07:7e:
d7:b2:0a:92:93:b9:eb:4d:df:7f:20:bd:a7:2d:91:
dd:db:65:49:55:13:2d:c4:a3:30:87:f7:64:ea:4c:
93:ff:04:ca:c6:9d:10:31:a7:ff:ef:15:34:a3:97:
b1:62:92:60:0c:19:59:3b:ff:ea:1e:83:5d:65:38:
0c:1d:8f:f4:39:d4:e1:34:87:62:c4:69:a5:d8:be:
64:8c:42:17:f1:4c:4e:4d:a7:aa:ad:bc:44:fe:f1:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:32:80:27:0D:88:1E:E4:44:E4:73:16:B0:63:5E:9B:A9:81:15:10
X509v3 Authority Key Identifier:
keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a6:86:07:d8:f7:7e:d9:4f:e6:b4:af:55:81:bb:46:ff:2b:
0a:b0:df:f8:40:8e:21:44:db:39:39:a7:87:a0:eb:bd:f2:52:
36:38:85:ec:88:54:51:de:b9:6b:70:89:56:42:a0:83:0a:a1:
c0:b8:3a:35:bb:aa:0c:c6:1c:e2:70:3c:02:8f:a0:b7:13:b2:
06:d7:ef:f4:6d:94:a8:9e:72:cc:c5:ac:6b:10:ae:b4:53:88:
92:36:e7:ef:97:9d:c1:de:f7:32:3c:9f:36:bb:bb:0f:a3:61:
80:aa:80:7d:51:dd:59:a4:79:da:d3:95:89:90:d7:e4:26:0d:
f2:0a:f8:d5:9f:3b:05:75:f2:ba:56:0c:aa:87:b6:3f:e9:bf:
8d:da:10:2d:2d:08:95:df:0a:4b:e9:39:62:d9:eb:77:24:75:
1d:eb:9b:ec:72:52:61:f9:52:cd:04:c3:eb:23:2d:11:16:71:
50:25:8e:1f:e1:34:9d:9f:26:ca:5c:c8:c2:e5:25:72:ce:62:
28:b8:c7:c2:91:68:8f:d9:9e:3b:12:bf:51:28:2b:91:60:26:
72:d8:63:39:6a:bd:47:b7:bb:31:f9:a6:d2:2a:fe:df:24:de:
39:08:c4:34:01:b3:3e:66:30:dd:a2:8e:55:72:de:43:8f:2b:
15:32:90:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:37 2025 by rpki-client