![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
File: Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json)
Hash identifier: ZLQ4805Z3OUC3dbyhaqWBjwiHxAODypF0PYXAgOfRhE=
Subject key identifier: 53:29:B6:24:81:EE:F7:50:64:B5:D4:D6:E3:F6:FB:54:4F:87:81:74
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Certificate issuer: /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial: 019511A266D7DE08E11772C79A92FAB7D9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
Manifest number: 112A
Signing time: Mon 17 Feb 2025 02:00:10 +0000
Manifest this update: Mon 17 Feb 2025 02:00:10 +0000
Manifest next update: Tue 18 Feb 2025 02:00:10 +0000
Files and hashes: 1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: DkhFOAYoIUJsKplAMNRcahKvXiZyc9URCaVLWkxo3SU=)
2: awEUUsb69K1CqabOYZXpO61MCTg.roa (hash: 9PPvHVQ3Mjg4T1Rer/rBY6hN8ex1RSBq3SwkRV1OUrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:66:d7:de:08:e1:17:72:c7:9a:92:fa:b7:d9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Validity
Not Before: Feb 17 02:00:10 2025 GMT
Not After : Feb 18 02:00:10 2025 GMT
Subject: CN=5329b62481eef75064b5d4d6e3f6fb544f878174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:d3:5a:0b:d9:bb:2a:ac:89:55:74:56:b8:
e2:d1:9e:d4:4a:ad:7e:b8:71:9c:08:bc:f6:b9:c3:
5d:f0:0f:82:92:f6:00:11:9b:07:22:3c:0e:48:b2:
95:a8:67:64:7e:fe:f2:87:d9:5c:58:21:9d:22:2c:
1e:4f:c8:45:ac:a4:39:fc:1a:26:2b:7c:2e:32:b7:
8f:b2:49:cd:36:36:d4:33:32:05:48:ed:37:59:e4:
b4:00:e1:04:5a:19:f6:fb:7c:9d:46:e1:55:5e:8a:
48:1c:d7:b3:b9:e1:ac:85:e2:5a:c7:80:ea:d0:5f:
3e:bd:df:55:a3:dc:eb:8e:81:1a:66:e9:cf:b9:4b:
ee:4a:8c:6e:3c:de:6e:c8:2a:52:81:6b:4a:b7:ac:
59:be:ec:bc:f9:69:7f:41:9f:67:ee:97:a8:f0:69:
0f:50:25:84:2a:c4:22:27:1a:69:17:5b:fa:62:e2:
11:ee:fd:7f:96:93:26:83:da:e3:55:48:1f:34:f3:
70:20:1f:cc:43:12:12:c5:cf:b7:a8:4e:8b:70:6a:
7a:b8:a6:d9:74:29:04:47:29:1d:7e:0c:f5:45:47:
97:55:d3:b7:87:8a:ee:f6:b7:7d:c6:75:1e:70:9a:
04:db:af:bd:f4:c1:5d:b6:b0:69:54:33:f3:b3:eb:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:29:B6:24:81:EE:F7:50:64:B5:D4:D6:E3:F6:FB:54:4F:87:81:74
X509v3 Authority Key Identifier:
keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0f:d6:f6:59:77:d6:58:dd:f2:d5:71:f4:80:13:06:52:86:
56:5e:b2:dc:0a:24:8e:67:e5:e4:2c:ba:a7:02:af:89:4f:03:
af:db:ab:5f:9d:b3:4b:e5:15:eb:04:a1:67:5d:48:bf:ee:7b:
f9:f6:16:70:6f:e3:ca:21:37:2c:63:3c:20:0e:64:cd:c4:de:
31:75:f2:5f:42:14:0a:89:36:16:a3:64:24:09:e9:05:b3:b2:
e3:8d:f8:c9:73:ac:e0:49:22:6d:2a:16:66:03:80:9b:9f:a1:
b7:16:9a:fe:39:a4:27:5e:83:93:e2:84:0d:b8:dd:5f:d6:7d:
6e:5f:da:4e:f5:d8:1c:da:d2:ce:e0:f4:ec:f3:70:bb:d9:c2:
3e:d1:8a:a4:e7:13:e4:d5:5b:01:1b:99:08:1b:fd:7b:a4:81:
b2:2e:87:c3:0f:4b:1c:16:e0:c6:5a:a4:d7:55:9e:26:e1:94:
65:fa:be:79:20:44:c9:e0:79:d0:ba:fd:38:df:94:5d:ee:fb:
87:b4:6a:11:dd:33:99:c1:32:ca:cb:72:13:86:b2:b7:5d:90:
3a:de:b9:1f:6d:ad:08:18:25:c3:8e:2b:6b:4a:89:35:e1:e8:
7c:cc:47:89:5b:15:76:ab:24:37:b2:a3:21:ef:b8:a0:b2:bf:
39:c6:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:32 2025 by rpki-client