![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
File: upyRALMvz2LV39ghy9BWq3PS5FU.mft (raw, json)
Hash identifier: sD3s0iEoVrIMZU4SoqbreOTi5mzuqJ5YUWaiUtWYG/w=
Subject key identifier: 45:7B:02:BE:6F:E2:5E:D4:32:85:DE:D4:28:1C:AC:80:9F:8B:AF:D3
Authority key identifier: BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
Certificate issuer: /CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Certificate serial: 019510C7580C74C2C62014790F1576433992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
Manifest number: 09C6
Signing time: Sun 16 Feb 2025 22:00:54 +0000
Manifest this update: Sun 16 Feb 2025 22:00:54 +0000
Manifest next update: Mon 17 Feb 2025 22:00:54 +0000
Files and hashes: 1: upyRALMvz2LV39ghy9BWq3PS5FU.crl (hash: Q9ugHmcRBmyq2Gs34L80Js6XSPY7lyvPBnBSKtB7+So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:58:0c:74:c2:c6:20:14:79:0f:15:76:43:39:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Validity
Not Before: Feb 16 22:00:54 2025 GMT
Not After : Feb 17 22:00:54 2025 GMT
Subject: CN=457b02be6fe25ed43285ded4281cac809f8bafd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:a2:2a:72:c1:16:36:95:42:fd:bb:2a:c6:
f9:bb:32:ad:f1:4f:5d:7c:e8:b5:c8:8d:75:69:a0:
20:d4:69:6f:8f:e8:51:e5:ee:13:0c:72:d7:be:cb:
5e:b0:f8:cf:39:5c:00:2a:4e:71:6b:a7:12:62:17:
21:86:9a:7d:dc:df:bd:05:c5:b8:d5:0c:4d:fd:fa:
30:cd:7c:a2:e5:6e:17:83:78:cb:e8:83:5a:2c:e6:
fe:6b:3a:ed:64:d2:bd:6d:88:fe:da:c4:cb:b3:22:
82:10:d8:33:f0:4c:ee:b4:fa:fc:75:78:d1:52:f6:
57:47:a9:5c:5c:3e:23:6d:77:f8:f9:1f:6f:7c:8d:
52:bd:04:4c:0d:40:a9:0f:68:cc:71:39:f6:33:38:
bd:be:98:d2:40:45:03:42:f4:c6:1e:94:43:0b:fa:
89:62:32:f0:5c:97:5a:eb:88:03:3d:0f:97:71:d0:
44:56:8e:0f:ce:02:74:3a:dc:3e:45:9e:ef:02:01:
96:40:a1:8d:35:55:82:c2:98:c0:4a:3c:c0:4e:db:
a0:94:87:ba:1c:1c:96:ac:e3:c1:44:3a:3c:18:51:
dd:ca:37:43:b0:23:32:7b:46:09:a7:d8:01:31:8b:
2b:0f:69:e5:41:77:09:5a:bb:50:36:c6:c5:2a:68:
1f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:02:BE:6F:E2:5E:D4:32:85:DE:D4:28:1C:AC:80:9F:8B:AF:D3
X509v3 Authority Key Identifier:
keyid:BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1a:e8:95:f3:a1:e2:21:7d:0c:d9:96:42:72:14:4a:f6:78:
dc:13:21:4a:05:0e:6e:e1:44:be:23:c9:3c:46:b7:20:19:dd:
ce:07:12:51:2a:c1:85:02:b5:6b:ea:82:33:50:aa:05:e0:3a:
00:df:89:b7:56:80:bb:6b:c7:8e:3f:a5:e0:1f:b6:d4:d6:fb:
e1:92:17:af:b7:a6:aa:ff:df:b7:f4:24:d1:4d:27:eb:73:56:
ce:73:90:ea:3f:87:fd:66:f1:0d:c0:34:25:e1:d5:0a:b1:28:
50:27:ea:87:87:31:c9:92:1e:90:62:f4:80:3a:56:6b:31:86:
6d:5c:5a:76:20:ef:f4:97:87:81:74:c1:68:8a:47:ff:26:f6:
9b:42:81:77:79:cc:90:44:82:4b:4f:73:c2:27:15:be:10:81:
a3:83:fe:7c:78:f3:e0:07:f8:e7:c3:71:14:91:c7:fc:e3:1f:
c6:a7:e1:65:09:3c:d4:7e:cf:bf:7f:72:eb:22:9b:6f:45:b2:
fe:00:b7:9a:d5:a0:ab:27:c7:26:6c:d3:64:a8:54:aa:03:6f:
b2:c5:92:78:24:eb:80:f2:7f:e5:c2:55:94:f6:0a:53:0c:1e:
00:c5:36:bc:c7:87:49:09:bc:3b:50:1a:71:58:5c:bb:24:2e:
5b:3a:7d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:24 2025 by rpki-client