![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
File: pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft (raw, json)
Hash identifier: /pe6ZfIhLRFjiei5TEDNCroiswSDzXTidJzrOLKjUpo=
Subject key identifier: 6D:89:48:EB:DC:95:93:1D:5B:C4:15:6D:14:41:96:94:F7:37:0C:3C
Authority key identifier: A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
Certificate issuer: /CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Certificate serial: 01951210D4DA05B1D808731A258870F80EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
Manifest number: 1286
Signing time: Mon 17 Feb 2025 04:00:47 +0000
Manifest this update: Mon 17 Feb 2025 04:00:47 +0000
Manifest next update: Tue 18 Feb 2025 04:00:47 +0000
Files and hashes: 1: pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl (hash: MYTJj6pWxB57LlU+rnftBsnhK3/hWq4IHwbPV6Gn9L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:d4:da:05:b1:d8:08:73:1a:25:88:70:f8:0e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Validity
Not Before: Feb 17 04:00:47 2025 GMT
Not After : Feb 18 04:00:47 2025 GMT
Subject: CN=6d8948ebdc95931d5bc4156d14419694f7370c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:06:cf:9c:13:86:56:e3:28:4a:3f:be:14:20:
7e:b7:5d:b3:86:6e:ed:e9:e3:3d:7a:3f:6f:74:d8:
4f:7c:da:0f:26:5e:4c:c3:ee:ae:32:77:43:b9:43:
8c:bf:1e:07:12:19:27:43:23:02:8a:4e:f4:9c:63:
48:f3:6b:fb:95:ee:29:6b:b6:7d:7b:f3:7b:a0:43:
a0:45:a8:7d:00:53:01:4f:53:6f:9f:2f:55:8e:7a:
75:de:0b:4e:f2:25:0b:80:3d:81:e0:0b:04:d3:e6:
e9:22:b6:0b:d3:9c:41:31:51:36:e3:8f:80:71:e1:
0f:82:c4:ba:be:49:b2:f6:82:d3:96:1a:27:f1:87:
33:ce:f4:00:5e:ad:cd:d7:06:fc:ef:d8:e6:6a:13:
60:f0:6b:85:50:1e:c0:21:1d:9a:96:c4:a5:fb:6d:
6e:a2:d4:4b:8e:b0:15:99:f2:74:80:92:ee:f7:7e:
62:1a:43:8b:cb:4c:d1:c8:6b:c0:e6:f7:96:b0:bb:
ae:bf:4a:b3:95:0a:ee:92:40:6e:50:43:fd:57:9a:
ee:d2:02:df:e3:ba:c1:c1:bf:26:8d:19:53:8a:1a:
58:b4:3d:82:4f:bf:68:ce:17:96:ae:08:ad:0c:f5:
ee:a8:a9:05:71:5e:70:b0:46:d6:46:c8:a9:db:fd:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:89:48:EB:DC:95:93:1D:5B:C4:15:6D:14:41:96:94:F7:37:0C:3C
X509v3 Authority Key Identifier:
keyid:A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c7:b1:b4:04:bd:ff:bc:84:83:3a:03:db:7e:ba:83:da:f6:
1b:f6:f6:4c:39:f1:c7:ee:08:92:b4:34:b1:bd:26:4a:0d:88:
fb:ba:fd:0d:6e:71:be:37:fd:d3:f3:c3:6e:b2:07:4b:bc:88:
32:d4:fd:e3:bb:d5:27:c2:fe:ca:2e:a2:25:3f:3c:9b:4e:bd:
e8:47:14:43:23:ce:f2:88:16:66:39:93:bc:c3:25:1a:c1:64:
2e:d4:81:bd:81:d8:c7:d7:b5:c1:f0:79:00:78:9c:aa:3c:26:
b1:82:13:30:71:52:04:cd:e8:ce:85:66:c1:b6:83:fd:65:e7:
eb:50:06:d6:d6:8f:6f:80:93:44:19:b5:3a:be:e7:46:ea:e9:
dc:6b:95:0b:89:5f:de:92:3c:1d:da:86:dd:0d:8d:2a:94:c0:
ad:7a:bc:bd:72:14:30:81:d4:00:1b:5d:78:61:a5:93:e4:38:
24:17:c7:36:e5:3c:3d:a5:ae:b9:5b:9a:e9:e3:5e:5e:dc:f5:
6a:b1:74:0e:c4:86:ef:00:04:8c:45:bc:d7:5b:76:f4:16:d7:
7b:80:29:df:cd:4f:7d:1a:d6:99:45:c3:99:47:7f:ea:6f:8b:
b1:cf:49:f7:80:48:63:c3:64:69:3e:b7:25:78:c7:0f:1e:2b:
62:a9:17:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:17 2025 by rpki-client