![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
File: 0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json)
Hash identifier: xwBJ5cfAitpAN9lFnP3QuHb1hJVvvDNpXHPBQw88Pfo=
Subject key identifier: 79:9B:F1:4E:D7:69:9E:38:38:62:E7:AB:74:92:10:D0:69:E1:41:B4
Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
Certificate issuer: /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Certificate serial: 0195116C1852496A3C72A4A39F2E4C64AAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
Manifest number: 0348
Signing time: Mon 17 Feb 2025 01:00:51 +0000
Manifest this update: Mon 17 Feb 2025 01:00:51 +0000
Manifest next update: Tue 18 Feb 2025 01:00:51 +0000
Files and hashes: 1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: XFTUf9aqQGgPeJB49UaUhBHpd/Z4wgg76EQRCLEPOuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:18:52:49:6a:3c:72:a4:a3:9f:2e:4c:64:aa:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Validity
Not Before: Feb 17 01:00:51 2025 GMT
Not After : Feb 18 01:00:51 2025 GMT
Subject: CN=799bf14ed7699e383862e7ab749210d069e141b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:10:e9:c1:8d:22:d9:fa:e4:b7:c5:08:0b:
11:57:cd:47:7a:22:9d:00:75:a5:3a:ca:22:ec:71:
76:b2:00:06:1d:28:78:b9:bb:0c:51:25:75:e2:51:
cb:e1:ab:37:e0:25:e7:58:b5:95:1c:f5:8e:c7:0a:
f8:03:e0:61:af:03:d0:4f:86:f1:f6:7f:aa:2a:90:
77:8f:8d:24:1b:b7:c3:a4:dd:03:de:e3:83:b2:53:
e3:ee:f7:06:df:02:9f:7f:59:e8:39:8c:cf:f0:5a:
6e:22:92:76:42:82:46:5e:9c:fd:a2:99:2e:68:e4:
7e:3b:ec:a7:5f:d6:25:a9:6e:3e:63:5a:8d:15:a1:
db:75:f2:c5:d6:32:86:e5:a6:0b:20:b5:30:13:ff:
15:e0:5e:64:0e:ed:c0:14:ea:f3:60:1e:31:b1:6c:
86:7d:ad:31:aa:7a:44:69:50:0c:71:d9:fc:5c:e6:
ed:69:a7:62:54:cf:13:f4:2e:9c:7c:7b:e7:63:e8:
40:16:70:d3:b0:a0:2e:55:22:37:31:7b:8e:84:e8:
52:2e:34:ce:2b:c7:69:24:c6:54:58:58:f8:a6:eb:
92:c6:c7:8b:ce:7a:a3:c9:3d:c8:26:d9:3e:ab:03:
ce:ef:c0:82:c6:14:32:23:1e:f8:0d:d6:b0:ef:42:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9B:F1:4E:D7:69:9E:38:38:62:E7:AB:74:92:10:D0:69:E1:41:B4
X509v3 Authority Key Identifier:
keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2c:ce:0d:14:1f:75:29:40:99:80:86:29:55:43:de:d5:5c:
30:1d:45:92:64:5c:27:8b:43:ed:3a:20:53:fe:e4:e5:11:0c:
c6:cb:72:cc:8f:2a:26:98:f0:18:d5:92:2e:ec:56:4c:27:db:
a5:9f:83:2f:fe:d5:04:b0:3f:8d:f1:35:2d:c0:7f:82:a4:09:
50:94:e3:7b:6d:4f:a1:53:b5:b6:55:67:3e:55:9c:cf:58:f9:
d9:a9:5d:c7:28:19:22:63:da:50:f1:5e:20:bf:6c:5d:49:61:
84:4d:11:c6:d7:b1:fc:3a:f3:68:69:d8:7e:46:64:18:ed:bf:
f5:35:43:b1:a6:2a:f0:25:41:8b:e2:04:fa:21:a6:0a:0f:c8:
2a:fa:06:53:97:a0:aa:cc:3c:4a:2d:75:a3:48:0f:3e:45:ff:
95:1e:3d:9e:9e:59:60:e2:9a:b4:a3:d4:9c:54:32:b4:3f:bb:
74:3c:f4:54:a2:73:5d:5f:b4:03:5e:e9:fd:6e:91:ef:41:ec:
c1:dd:f0:8b:ae:01:23:41:4f:d9:7a:2d:16:8d:20:ed:02:8a:
ea:ea:03:9c:f5:02:bb:29:f8:87:ed:ac:88:6f:f9:7f:66:97:
85:42:48:68:b1:ff:ab:db:3a:09:6e:c9:2a:67:c2:6b:54:3a:
96:ec:64:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:28 2025 by rpki-client