![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
File: Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft (raw, json)
Hash identifier: ctimC8qbnaxmOPzvDpFl3zIuSoT0SunasdGs2Kl2XYo=
Subject key identifier: D1:48:D3:59:1F:F0:90:43:49:4C:73:B3:68:36:F7:1F:40:3C:F9:67
Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
Certificate issuer: /CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Certificate serial: 0195108FC14682F3B4FAB7E44F811059F2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
Manifest number: 03CD
Signing time: Sun 16 Feb 2025 21:00:11 +0000
Manifest this update: Sun 16 Feb 2025 21:00:11 +0000
Manifest next update: Mon 17 Feb 2025 21:00:11 +0000
Files and hashes: 1: Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl (hash: gSkFzFoDTphxzPrAB86bZm5CS5u//ccqpJdS5weAJVw=)
2: jSw8bTH4hTcqpfa7bHW8ZyPkknU.roa (hash: ABUXiiTkIZUHgQ3xysDCG98yDMZyrM6LOi10VqvVwCc=)
3: zC-XVtksfypCOwDmUdUeVllfLQI.roa (hash: q1lLlXPM1B2OuaAxpSk6zZYVH0rc6yp93NQ9Af6bSzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:c1:46:82:f3:b4:fa:b7:e4:4f:81:10:59:f2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Validity
Not Before: Feb 16 21:00:11 2025 GMT
Not After : Feb 17 21:00:11 2025 GMT
Subject: CN=d148d3591ff09043494c73b36836f71f403cf967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d0:72:49:8a:78:bf:b8:96:e5:26:af:05:29:
e5:25:09:8d:d8:93:0a:ce:4b:ea:4c:f1:bb:89:ab:
e1:97:96:b0:58:d1:42:1a:cb:a9:10:33:01:fc:b7:
d2:d5:18:d2:90:d3:74:83:6d:cd:a2:68:68:f4:4a:
93:84:ad:2d:e2:8e:70:ce:e6:5a:8d:01:12:0a:cd:
77:88:04:96:3b:c8:f7:a2:2c:b4:c9:3b:a4:26:97:
8f:9b:9d:c4:32:66:ff:7d:3f:8d:cc:ae:95:98:8b:
95:12:66:ff:70:e6:71:7a:a7:72:0c:9a:e4:33:73:
35:10:3a:29:a9:b9:2e:16:63:ff:69:b8:17:c8:0e:
96:df:a9:d8:ef:1d:42:2e:a8:d1:6d:c1:65:12:e0:
32:32:a8:48:3c:4e:b5:d9:3e:35:ac:73:20:45:35:
6e:83:d5:ef:5b:32:10:92:da:c4:96:cc:90:8f:56:
d3:c2:dd:40:42:da:0d:71:4f:33:ee:c1:c8:59:f2:
45:70:d6:eb:a3:ae:f0:80:e4:71:bc:99:ec:f2:8d:
9a:95:5e:ea:8a:87:3b:3b:41:da:25:0e:02:da:bd:
31:41:3b:4b:05:10:95:61:dd:6d:fc:6e:02:a0:f1:
7e:7e:6f:ce:39:c5:b4:76:20:c4:78:dc:4e:59:a0:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:48:D3:59:1F:F0:90:43:49:4C:73:B3:68:36:F7:1F:40:3C:F9:67
X509v3 Authority Key Identifier:
keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:21:ae:f4:d3:41:fe:4d:6a:ef:49:a6:39:96:08:50:29:2d:
b1:32:44:62:a7:83:29:85:8c:28:ca:8e:f8:8d:52:eb:91:9a:
89:02:32:b5:b3:e3:02:6e:cc:2e:4c:ff:c4:b7:f0:7a:c7:4e:
42:75:12:02:e3:10:ae:f7:3c:7a:ad:c4:48:73:01:ac:69:26:
9a:83:a1:50:34:67:6c:83:e9:ec:95:40:9f:8c:5d:e5:fb:5f:
02:85:d5:bd:41:ef:e3:c0:03:41:27:58:d2:59:ed:16:61:1f:
a7:a7:ff:0d:5f:47:b5:0f:d3:82:6d:a0:35:e5:04:89:56:f5:
68:b7:92:d9:b6:a4:30:06:3c:05:52:4f:20:bb:3c:13:eb:a6:
7f:64:51:4f:e0:b5:bd:33:92:d8:31:e5:1f:fd:ff:1a:ce:9d:
a1:ca:d7:7c:b6:e9:66:aa:2b:55:ba:78:97:b7:cc:0d:6a:e0:
6e:36:67:5d:19:98:d1:a1:96:70:38:33:95:63:0f:c1:21:03:
41:8c:e8:fd:86:54:54:de:15:09:93:6e:77:bd:5e:6b:ac:c7:
d3:8a:1a:29:6f:69:5f:fa:7a:a2:37:ff:48:64:7c:39:31:a6:
40:a3:86:2c:a6:7a:c5:69:6d:d5:ea:04:af:e6:7f:a5:75:66:
06:2b:7c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:23 2025 by rpki-client