![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
File: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft (raw, json)
Hash identifier: cuH6TjKjkX/Dltz4OHeAiclMryHv1WJ9tIbUxopsxvI=
Subject key identifier: 4E:F2:C6:3D:E6:38:F4:07:50:B4:58:D2:E0:A3:FF:A9:5F:19:81:0C
Authority key identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
Certificate issuer: /CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Certificate serial: 019510C6C728B6C93C4957AB565C1DB8B548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
Manifest number: 028F
Signing time: Sun 16 Feb 2025 22:00:17 +0000
Manifest this update: Sun 16 Feb 2025 22:00:17 +0000
Manifest next update: Mon 17 Feb 2025 22:00:17 +0000
Files and hashes: 1: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl (hash: hg9sIDgl060yEZq6u9f9yFEDSY/rrmfR5pI4tNE8M3w=)
2: tv6tClbvL3fe6dvTJo3FM5f_h3Y.roa (hash: A+tnxsTWmCeZid4USiunoHsPUSXZ+9POOmWlZ50vqKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:c7:28:b6:c9:3c:49:57:ab:56:5c:1d:b8:b5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Validity
Not Before: Feb 16 22:00:17 2025 GMT
Not After : Feb 17 22:00:17 2025 GMT
Subject: CN=4ef2c63de638f40750b458d2e0a3ffa95f19810c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8e:c4:b2:0d:4f:e5:37:97:e6:6b:8d:38:60:
81:52:b1:76:85:8b:ce:e3:f9:fb:91:49:bf:3c:2a:
80:a2:01:01:2c:f7:f7:fd:93:01:d7:c0:e6:c6:be:
dd:b5:b8:40:c7:30:e4:80:88:ea:cc:d4:19:c5:72:
63:59:d7:32:03:65:fa:69:09:58:df:12:cf:4b:b6:
3b:da:0f:13:c0:05:22:04:b6:ce:8e:f7:16:57:a2:
f6:4f:2b:ae:80:98:66:3f:26:93:44:3f:db:94:45:
41:08:85:76:af:db:3d:63:be:c2:ad:b2:f7:67:1b:
d1:36:e4:e0:5b:68:7e:66:5c:ae:fe:11:1d:8d:05:
4b:89:f2:1e:96:86:7e:9b:a5:8e:32:34:e8:2c:1b:
f0:eb:a1:5e:15:ac:cc:bb:90:0a:16:d0:dd:7c:df:
4d:8a:8f:50:d0:59:5f:50:7b:65:f8:0a:25:39:3e:
8b:c1:02:b0:82:c3:85:5b:1b:00:0a:da:9d:60:8c:
ab:47:ef:a2:62:ea:29:68:61:c9:af:15:0e:0b:e5:
c7:ab:53:00:a5:4c:98:c3:76:e4:42:ff:b5:8b:e1:
c2:e1:9f:d1:2e:4a:38:5d:3b:5a:a3:d7:10:7f:20:
9f:1a:40:5a:6d:68:17:fd:5b:1d:5e:99:61:2a:f0:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F2:C6:3D:E6:38:F4:07:50:B4:58:D2:E0:A3:FF:A9:5F:19:81:0C
X509v3 Authority Key Identifier:
keyid:ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e0:69:c4:df:49:31:0b:8f:fc:8a:65:24:f9:22:e9:75:f1:
65:4f:70:44:f4:d5:30:42:95:40:a1:71:d8:8b:10:d9:01:c7:
7c:d1:a4:29:fd:47:65:c8:2a:16:98:21:21:f7:6d:7a:13:b4:
86:d7:7d:e6:b4:09:dc:b8:16:4b:7c:db:a7:44:31:6d:0b:e6:
a5:2e:d9:27:0e:6e:ba:6f:23:c7:a5:68:d9:83:22:c1:5d:3b:
a6:37:7a:f3:71:b1:14:ce:33:ef:1e:86:dc:27:97:f2:56:52:
77:d1:d5:77:4a:74:69:a2:5e:3f:57:4b:23:07:dd:d7:11:f6:
42:b0:2d:eb:23:47:50:21:79:a9:81:3c:04:2b:6b:2f:cf:ab:
59:45:fb:b5:0f:cc:b6:0b:16:b8:94:83:bb:91:93:49:66:12:
7d:4a:af:7e:5a:62:59:31:84:19:fe:f1:87:56:dc:6b:6c:e5:
f0:3f:38:09:3c:4b:ed:e1:e1:47:04:71:39:c0:0f:6d:c8:e8:
96:a8:35:e3:f1:7d:d9:2b:b3:58:b6:f4:2e:04:dc:07:00:62:
11:90:23:de:dc:d7:3e:9a:a8:dd:b2:0a:03:70:c5:8d:17:19:
2a:a8:c2:16:b6:c7:0e:ac:3f:0d:59:00:83:8b:42:bd:92:db:
31:8e:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:26 2025 by rpki-client