![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
File: JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft (raw, json)
Hash identifier: pPkvz5z9t/V4uwaJrM2R4rZtnGLl8lM4H8g8Oi/it7M=
Subject key identifier: 77:40:44:C1:D1:AE:D2:FF:A5:19:68:DC:FB:72:29:16:00:52:BC:FB
Authority key identifier: 25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
Certificate issuer: /CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Certificate serial: 01951210BA4CCF95B825D0B8A66F104E776D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
Manifest number: 054D
Signing time: Mon 17 Feb 2025 04:00:40 +0000
Manifest this update: Mon 17 Feb 2025 04:00:40 +0000
Manifest next update: Tue 18 Feb 2025 04:00:40 +0000
Files and hashes: 1: JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl (hash: 8ALB/Iumzf8fDvsiuL3ENH5worSC3kTVZABMsqGcEoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:ba:4c:cf:95:b8:25:d0:b8:a6:6f:10:4e:77:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Validity
Not Before: Feb 17 04:00:40 2025 GMT
Not After : Feb 18 04:00:40 2025 GMT
Subject: CN=774044c1d1aed2ffa51968dcfb7229160052bcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:b6:7b:36:76:9a:6f:27:4a:a0:e5:46:8c:
32:f0:ec:bd:aa:f8:38:aa:0d:03:1d:1c:85:7e:29:
63:69:6d:3e:25:25:59:d2:03:5a:39:51:27:fc:b4:
3f:e5:a0:7c:34:35:6a:5c:51:cf:c2:b6:de:55:d3:
70:1a:79:c9:1f:a7:d7:4c:13:12:06:cc:58:2c:65:
1e:08:03:f4:8a:53:e9:fe:bb:cd:47:ff:1e:ad:ac:
a5:a2:71:d0:8e:63:7e:dc:8c:ce:bc:38:ac:2b:69:
4b:09:f3:d1:33:99:25:c0:81:43:3a:d6:e0:04:c9:
95:9b:88:88:78:a9:51:a5:a9:a5:e4:55:b7:1b:64:
3c:d3:4e:15:9f:4a:a4:5e:c7:f2:3d:40:a0:bb:6d:
58:c4:49:b9:0f:76:75:f5:87:51:24:e7:c3:41:14:
df:7a:36:92:15:9c:7b:45:fd:b8:70:34:1b:b5:f3:
a2:43:67:be:98:ec:c9:75:ba:16:1f:4e:4e:77:09:
37:01:49:6c:5e:bb:3c:9f:02:f0:00:84:fe:9b:5b:
38:5c:ab:73:99:dd:80:ca:fa:a1:62:b2:5d:4c:99:
a9:18:a2:ff:ae:29:a2:69:da:97:30:d5:13:b3:69:
e5:f0:24:37:fc:1d:75:1d:57:82:89:98:c8:a5:6d:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:40:44:C1:D1:AE:D2:FF:A5:19:68:DC:FB:72:29:16:00:52:BC:FB
X509v3 Authority Key Identifier:
keyid:25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fe:45:cc:e9:53:ab:a1:36:41:d5:e1:ca:71:e3:b9:36:f8:
87:64:40:3f:6a:a9:e3:6b:9b:42:9e:5e:ba:c1:b9:58:3d:12:
02:c5:4e:1a:ef:3a:9e:82:4c:8b:55:d8:4f:e4:de:21:bb:7e:
12:92:a0:3d:87:06:4b:61:06:a3:c4:95:3c:94:a1:f5:2d:38:
67:29:97:6a:40:c2:3e:3f:a6:39:cc:47:e2:d7:04:78:84:1d:
f8:d3:fb:90:60:d8:e4:46:66:a1:e8:cf:f2:21:f2:3c:a9:2a:
9d:d0:6b:61:37:77:b1:da:9d:87:9c:08:62:6f:90:0c:cb:62:
80:9f:cb:2d:b4:b9:98:f8:01:63:75:b8:3b:a3:bb:d7:28:1a:
fa:1b:fd:98:74:32:db:b8:15:18:15:06:98:13:81:e5:f7:fa:
45:40:b8:c9:af:04:95:4c:ff:c7:7e:8a:44:b4:48:fc:b2:e9:
e7:88:38:12:04:6f:ec:23:7c:e1:66:a2:26:4b:57:dc:e2:1e:
2d:a6:d7:d0:99:1a:37:21:89:88:0c:b1:d8:d6:3d:6f:4e:ab:
ec:11:43:47:76:c1:ee:09:f7:e2:ca:39:5d:0a:cc:14:60:7e:
a0:23:99:6f:96:7f:99:3a:46:2b:a3:3b:01:9c:27:8c:32:08:
cd:e4:16:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:39 2025 by rpki-client