![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.mft
File: 6LVvnuGP2_rzCg2leYLicnPby0I.mft (raw, json)
Hash identifier: Z4ZTPEb+K5FY/fy85rHtcvrX6RE60wU7+ff6Lt2ydqc=
Subject key identifier: 78:D4:E2:1A:87:79:05:11:94:08:E8:77:B0:CB:EE:76:D8:70:5E:86
Authority key identifier: E8:B5:6F:9E:E1:8F:DB:FA:F3:0A:0D:A5:79:82:E2:72:73:DB:CB:42
Certificate issuer: /CN=e8b56f9ee18fdbfaf30a0da57982e27273dbcb42
Certificate serial: 019510FE196F192D8D1D83E493874DCE240E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LVvnuGP2_rzCg2leYLicnPby0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.mft
Manifest number: 145A
Signing time: Sun 16 Feb 2025 23:00:42 +0000
Manifest this update: Sun 16 Feb 2025 23:00:42 +0000
Manifest next update: Mon 17 Feb 2025 23:00:42 +0000
Files and hashes: 1: 6LVvnuGP2_rzCg2leYLicnPby0I.crl (hash: U64Em9DD4h3Ni5wdnZ6eL88ONkgk0nnEKRqOatUQfYA=)
2: SUpll5U8ppta_w4aro5suC6r4wU.roa (hash: ZRvbjWizyvhZg7Bqt/yuk8GupOGwY3kED5A1cfchDJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LVvnuGP2_rzCg2leYLicnPby0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:19:6f:19:2d:8d:1d:83:e4:93:87:4d:ce:24:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b56f9ee18fdbfaf30a0da57982e27273dbcb42
Validity
Not Before: Feb 16 23:00:42 2025 GMT
Not After : Feb 17 23:00:42 2025 GMT
Subject: CN=78d4e21a877905119408e877b0cbee76d8705e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:11:da:a1:64:08:f8:d9:8a:8e:b2:84:18:
14:fa:4b:5d:4a:14:eb:83:af:29:3b:64:00:e8:8e:
d4:75:be:12:a8:64:27:7f:b4:8b:bd:19:17:09:9c:
c2:62:d7:95:43:ce:7f:1c:48:0c:8c:5a:8c:6f:7d:
34:ac:bf:94:0e:b6:a9:e4:7b:08:15:99:72:96:cf:
fc:21:24:86:fb:96:7d:b5:b9:2b:28:2a:e4:4c:5d:
8d:18:16:4f:e0:02:87:f5:2f:54:77:21:3e:d9:f5:
74:ae:70:d6:62:2b:c9:0e:cd:7c:38:dd:a2:f9:08:
aa:81:99:35:d5:cd:f7:47:1d:bc:a2:93:7b:66:4f:
6f:af:df:a5:06:90:8e:50:6f:2e:65:94:54:b1:9b:
68:37:e5:e1:75:77:0d:76:bc:46:2d:79:72:aa:e6:
7d:6d:5c:86:39:7b:8b:b8:3d:06:9d:94:f6:70:90:
6a:0f:d1:77:c4:05:0d:1e:73:6d:10:4b:a7:26:29:
eb:cd:bd:00:8e:b3:41:5e:5b:97:96:69:55:a5:5d:
bf:7b:5f:90:dd:17:a0:75:ae:54:22:8d:fb:41:66:
6f:9f:4a:3d:6d:90:10:94:fc:7c:ef:fd:a2:ee:a0:
f0:40:2b:de:fd:5a:5b:97:33:c7:fa:8a:7b:25:63:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D4:E2:1A:87:79:05:11:94:08:E8:77:B0:CB:EE:76:D8:70:5E:86
X509v3 Authority Key Identifier:
keyid:E8:B5:6F:9E:E1:8F:DB:FA:F3:0A:0D:A5:79:82:E2:72:73:DB:CB:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LVvnuGP2_rzCg2leYLicnPby0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a2:8d:22:81:79:9a:dc:89:40:48:8e:6b:36:f1:bf:d1:32:
fa:d6:d8:17:94:2f:bc:3c:47:0f:f3:74:40:85:00:60:f1:c7:
be:f5:58:61:d0:b5:b1:22:a1:bb:97:15:d5:6e:e1:e9:b0:fb:
88:ba:bc:85:f4:22:fe:d6:fc:c4:2e:27:4a:84:68:ca:89:28:
52:c5:06:43:b1:43:66:a5:44:e6:02:6a:b6:a7:ad:8a:f7:94:
6f:a1:7c:e0:eb:b6:3d:44:d1:55:62:9c:82:bc:a7:cb:80:7d:
65:99:c2:f5:d9:4a:b1:66:eb:02:fa:20:3e:f4:dc:14:9a:a0:
f6:a8:c5:2c:80:62:30:32:45:4b:81:25:84:49:d6:da:6e:28:
e9:95:e3:fc:c7:db:9b:65:f6:21:b6:99:69:27:4c:2d:01:c9:
b1:6a:75:05:37:0c:45:bb:c8:66:71:34:eb:20:b7:cf:b3:59:
35:80:4a:90:6d:12:71:66:14:14:71:0d:ef:0d:c9:c4:95:b5:
2c:07:6c:15:d9:20:be:8f:ff:71:13:2d:f0:48:b7:4a:e5:b2:
99:c1:0f:4a:e2:9f:6b:b4:26:62:ce:1f:27:80:d5:cf:ef:e3:
2a:2a:02:c3:c1:b5:6a:fb:3e:1a:f2:87:ec:91:f2:30:de:05:
5b:58:27:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:15 2025 by rpki-client