![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
File: q7lESdTSRidxdzvAimJFB9pRKw0.mft (raw, json)
Hash identifier: 10bsh2rhBZRouelcpFPJIutVACJj0jWtHUqazIvyyew=
Subject key identifier: 58:3C:7A:2D:5C:66:EE:71:5A:5E:EB:89:33:9E:11:8E:A5:6D:62:F8
Authority key identifier: AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
Certificate issuer: /CN=abb94449d4d2462771773bc08a624507da512b0d
Certificate serial: 019511A2A681B5D185AC562D7316D4F26859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
Manifest number: 053B
Signing time: Mon 17 Feb 2025 02:00:26 +0000
Manifest this update: Mon 17 Feb 2025 02:00:26 +0000
Manifest next update: Tue 18 Feb 2025 02:00:26 +0000
Files and hashes: 1: q7lESdTSRidxdzvAimJFB9pRKw0.crl (hash: WZqOHmJ387WBWNiQ0AekgxId/GI0vACHeVilWbW+cfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:a6:81:b5:d1:85:ac:56:2d:73:16:d4:f2:68:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb94449d4d2462771773bc08a624507da512b0d
Validity
Not Before: Feb 17 02:00:26 2025 GMT
Not After : Feb 18 02:00:26 2025 GMT
Subject: CN=583c7a2d5c66ee715a5eeb89339e118ea56d62f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:77:47:cf:2d:a6:44:0f:ef:5f:69:ad:be:
ff:35:40:8a:36:a9:94:2a:90:d1:ad:32:57:ed:ac:
2f:3c:19:36:82:7b:0f:25:2c:30:b6:ac:64:ed:f7:
54:b2:51:74:89:eb:06:5e:0c:92:99:40:ee:be:89:
05:7d:a2:64:92:0b:59:5d:aa:35:11:18:31:7c:ac:
28:57:6b:69:59:12:2c:59:32:25:8d:95:35:fa:6f:
3f:93:3b:3d:18:6c:96:bb:35:f7:71:55:a4:db:13:
15:34:e0:95:05:43:a6:8d:47:bf:cd:32:b9:d9:08:
e2:d4:71:4a:f5:4f:30:5b:c6:f4:cc:87:45:3d:00:
66:0d:e4:d6:0c:86:27:92:0f:47:3b:9b:65:9a:fd:
9c:b0:ad:08:1f:89:10:c6:49:e7:37:ce:5a:eb:cc:
6d:42:4f:7a:b0:c1:d4:d5:ac:19:01:f3:f3:0b:30:
8a:98:67:ef:68:9c:ec:f3:cc:52:6e:8b:b3:df:76:
b0:93:30:39:5c:29:e1:73:5b:56:60:e5:01:29:3a:
d1:c2:7b:5c:95:65:d5:7d:48:17:44:9e:a1:30:71:
ca:b2:b9:97:43:bc:1c:04:18:14:94:cf:d1:2f:d6:
57:85:ca:5e:3d:78:88:10:90:a4:6f:55:67:f4:20:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3C:7A:2D:5C:66:EE:71:5A:5E:EB:89:33:9E:11:8E:A5:6D:62:F8
X509v3 Authority Key Identifier:
keyid:AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5b:c0:08:56:76:f6:aa:93:90:7e:64:d5:d6:b7:67:e5:cd:
86:a0:4c:11:58:15:a0:6d:f9:4b:ed:ce:cb:c2:32:12:c7:6e:
d5:01:8e:6c:40:46:46:94:88:27:0f:a5:35:13:8a:44:54:01:
84:68:81:76:e9:e3:77:3d:63:ac:06:e0:39:16:b9:5a:40:3a:
b6:4a:af:c6:7b:58:ca:38:25:ac:df:55:e3:b3:13:30:24:9d:
17:c0:f7:af:1e:d7:e0:f7:55:31:fc:d5:47:94:c5:39:60:0c:
91:06:71:aa:05:29:4c:ed:be:58:de:9c:4c:9d:92:59:3e:19:
e5:5d:e5:e4:d2:fc:57:ae:49:8d:71:7f:77:b6:e7:4d:16:3e:
f2:89:88:69:33:e6:77:b1:dd:f0:b5:bd:63:cc:5d:81:65:55:
42:f3:ea:7c:c2:97:61:f1:79:93:25:59:b1:38:12:f1:21:7a:
87:48:2c:03:61:fd:1f:72:10:0e:15:1d:ac:ac:83:e6:bb:5b:
ef:f8:7e:7c:7b:46:10:d7:09:4c:88:7a:fd:b3:c9:ee:ce:06:
69:5f:0b:53:ad:9b:b9:97:1c:7d:f8:0c:ec:ea:60:64:5f:ad:
eb:b3:c8:dc:4c:8c:a3:b6:3a:c5:8e:15:97:3f:e6:69:e7:2e:
ec:03:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:07 2025 by rpki-client