![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
File: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft (raw, json)
Hash identifier: S40dwfe03Sna6KS/NgL2KxnZbIw5eF/WIRcebF1xTeo=
Subject key identifier: 51:D7:D7:7B:40:64:C4:6A:76:FD:1C:41:FD:0E:30:BB:E0:0E:C8:3D
Authority key identifier: 30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
Certificate issuer: /CN=307a4415bad40b643e10bec4d282cd3072ba56da
Certificate serial: 019510C6AAD16927F50F4B1D896C8B7B1798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 22:00:10 +0000
Manifest this update: Sun 16 Feb 2025 22:00:10 +0000
Manifest next update: Mon 17 Feb 2025 22:00:10 +0000
Files and hashes: 1: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl (hash: 2gtMYrN3V7fMCQMddYVcTyDNEClUZr9/OoUpT69xSc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:aa:d1:69:27:f5:0f:4b:1d:89:6c:8b:7b:17:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a4415bad40b643e10bec4d282cd3072ba56da
Validity
Not Before: Feb 16 22:00:10 2025 GMT
Not After : Feb 17 22:00:10 2025 GMT
Subject: CN=51d7d77b4064c46a76fd1c41fd0e30bbe00ec83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:04:e4:fb:2a:e0:a6:1a:9e:f7:38:25:5b:
be:05:54:9d:a9:f1:c0:06:cd:9c:45:e9:a0:5c:d8:
77:9c:e4:85:01:6c:97:28:b9:8a:6e:bd:ea:53:45:
bb:0c:5b:75:3f:52:7a:0c:63:85:94:63:c8:70:4a:
eb:1a:d9:02:63:6f:22:f3:7a:dc:5f:87:a5:ae:d5:
66:f8:cc:e7:d5:4a:5f:6c:17:d4:e9:77:1f:20:86:
f7:cc:94:4f:69:ed:ef:cc:01:79:43:87:77:f5:fb:
47:dd:55:d0:03:af:16:b6:1f:38:ed:c0:f6:0e:86:
b7:fc:6c:53:de:97:fa:76:8f:ad:9e:00:a7:d7:94:
48:c5:26:c5:4b:86:4b:6f:79:b8:2a:d3:f6:1a:f9:
26:0e:c6:14:1d:93:b5:f8:e6:e1:ed:38:4a:3c:f4:
3e:ef:fd:52:7d:41:d3:1b:4f:dd:26:ce:ac:0d:0b:
bc:5c:e4:bf:91:ca:6f:6d:8b:e5:41:7e:43:02:6d:
ea:32:78:1d:8e:09:23:48:36:82:09:65:2e:af:87:
d9:57:24:fa:3e:85:07:a5:d1:b3:e9:0f:2f:02:95:
81:a0:90:e3:47:b7:16:f3:8e:5b:16:97:b4:c6:3b:
3d:f7:29:88:66:63:54:65:fe:35:4b:77:74:53:04:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D7:D7:7B:40:64:C4:6A:76:FD:1C:41:FD:0E:30:BB:E0:0E:C8:3D
X509v3 Authority Key Identifier:
keyid:30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1c:50:04:60:e9:a4:77:a3:09:44:b5:68:04:65:e1:46:ff:
ac:a3:a7:e9:ad:4e:d4:81:e1:ef:a3:b3:64:a8:41:bf:29:71:
10:84:4a:12:95:1e:22:e8:8a:ce:0c:cd:11:03:a7:40:fb:05:
52:3b:d3:16:c4:23:89:5a:6e:93:bd:f5:60:c6:9f:b5:8b:0c:
7a:44:9d:a6:eb:9d:c7:10:a2:00:7f:27:f4:6f:d4:3a:c8:f5:
85:7e:ed:3d:ae:98:5c:e6:87:07:5e:7d:c0:05:70:ba:fe:22:
77:2e:ae:2e:8a:cf:a4:2d:a5:30:97:8f:24:dc:e5:05:f8:de:
c4:25:bb:97:29:86:d2:63:03:b6:c2:d2:16:d6:07:5a:dc:86:
ce:62:37:ae:83:6c:6c:db:84:a6:dd:4a:bb:80:b4:70:7c:33:
ac:29:ab:60:71:3f:6c:f3:e0:25:f5:13:77:0a:cc:8c:9e:00:
3d:c2:24:60:aa:c9:e4:6d:96:b7:c7:ab:f3:f1:fd:68:d3:97:
91:6a:08:b8:b3:f7:fa:b9:84:3a:b6:82:d5:95:cd:53:f7:ea:
53:95:d9:cf:8d:ad:c7:fd:bb:5f:02:58:1f:b5:cd:0e:87:bf:
cc:cd:94:88:f3:41:58:1f:5d:21:0a:39:6b:45:5f:ed:06:a5:
96:8a:17:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:50 2025 by rpki-client