![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
File: uQBjLU-AFX1p71tT_mJNv4rf768.mft (raw, json)
Hash identifier: 3jwFub3QH8gIS9oUcadFINcjyMmcWIC6j74lYARNh/Q=
Subject key identifier: E9:BE:EC:FB:25:FC:67:05:AB:98:14:E2:E6:01:9F:6F:75:C3:6E:A8
Authority key identifier: B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF
Certificate issuer: /CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf
Certificate serial: 019510C693C189C3F16B100F7F3B22049249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
Manifest number: 0B21
Signing time: Sun 16 Feb 2025 22:00:03 +0000
Manifest this update: Sun 16 Feb 2025 22:00:03 +0000
Manifest next update: Mon 17 Feb 2025 22:00:03 +0000
Files and hashes: 1: uQBjLU-AFX1p71tT_mJNv4rf768.crl (hash: sesZ7BzlJ5iv7VfpHQE4SBJa5NiOqCyLGxGfZEF4iaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:93:c1:89:c3:f1:6b:10:0f:7f:3b:22:04:92:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf
Validity
Not Before: Feb 16 22:00:03 2025 GMT
Not After : Feb 17 22:00:03 2025 GMT
Subject: CN=e9beecfb25fc6705ab9814e2e6019f6f75c36ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:e6:23:67:fa:a7:6b:eb:81:c6:6b:04:57:
b8:c6:ee:21:e0:1e:e9:b6:eb:9f:c4:8c:22:0f:cd:
88:3d:a4:16:c9:20:9d:6f:ec:61:2b:16:af:20:c6:
75:0b:ca:9a:a5:f8:45:14:d8:1d:5d:4e:d5:68:f4:
98:43:f8:21:c2:04:73:17:89:66:7e:6f:4f:a4:d6:
9c:10:a4:0f:2c:78:4b:a9:a8:5b:79:06:27:8e:85:
27:06:5b:0b:3f:95:1b:0e:e6:11:b4:9b:d5:e5:76:
1a:58:13:8b:de:8b:85:f9:04:5f:3a:d4:46:b8:73:
8f:16:19:ea:51:35:91:e7:71:78:b0:71:d7:bc:f0:
4c:38:a3:0c:ef:33:92:31:56:aa:8a:33:05:c5:c1:
b0:f0:2b:6c:38:9d:64:a7:55:da:0e:4e:0b:8f:25:
44:6d:2b:93:7f:88:fa:e4:e1:c3:26:3c:c8:57:4a:
12:ce:1e:a7:eb:72:fc:aa:8d:5e:aa:5c:b2:ca:e2:
4a:39:9c:d2:50:9a:34:88:3e:ee:45:c6:b3:f7:ac:
88:8a:87:0c:93:c4:2a:7d:f5:c5:64:62:19:57:bc:
38:17:60:03:44:1c:f0:1c:38:d5:18:80:91:31:2c:
f9:1c:bc:e4:25:ff:ac:f6:6e:cf:4d:98:d5:1f:e1:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BE:EC:FB:25:FC:67:05:AB:98:14:E2:E6:01:9F:6F:75:C3:6E:A8
X509v3 Authority Key Identifier:
keyid:B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0b:60:98:c1:01:bf:c5:58:db:33:62:16:53:75:97:89:aa:
d2:6c:be:b5:fb:17:46:6a:5c:87:33:45:3f:2a:8d:3e:08:58:
6e:79:e1:dc:0b:79:ed:b3:bc:8a:c8:97:8f:a9:49:dc:12:8a:
ba:27:1a:4e:4b:e6:0d:71:9c:23:c4:86:3f:b2:b5:6d:cd:60:
f9:1b:3c:90:aa:d2:eb:00:40:27:f0:f9:cb:0a:06:82:ea:39:
2f:c2:56:53:04:7d:ff:cc:47:b1:22:1d:80:c7:53:62:3e:6b:
76:f3:b2:e9:f7:8b:79:92:cf:66:f6:05:f6:c0:74:44:e7:03:
cb:85:d1:ed:34:77:25:a3:0c:19:7a:1d:35:2a:54:ce:27:58:
94:b4:6b:11:ed:e7:c6:45:47:49:1a:bf:59:d7:09:4e:52:7a:
51:e9:f7:d9:a3:15:93:16:b5:e0:a3:e3:15:e0:09:e5:fb:dc:
31:a1:84:7a:25:0e:c8:c4:99:27:68:df:df:b2:4a:bb:19:06:
64:53:bf:b6:4b:1f:4c:70:1a:69:93:3b:28:de:8e:04:10:a3:
9f:c2:8b:40:2f:54:5b:58:30:8e:47:0c:ee:6b:09:f8:37:c3:
68:d6:2e:50:91:81:3c:89:7c:98:97:6f:2c:9d:d9:64:f6:5d:
8a:53:0d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:39 2025 by rpki-client