![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
File: 7uWTl_XWr-28jZFmr_67KAAJH5Q.mft (raw, json)
Hash identifier: agsehs/A1/v0LlRgQZQx6PcsBmA15vGXDFaPwKditw8=
Subject key identifier: 30:38:C1:47:2A:94:60:C2:31:AB:4C:85:42:59:D7:24:AB:2D:B7:9C
Authority key identifier: EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
Certificate issuer: /CN=eee59397f5d6afedbc8d9166affebb2800091f94
Certificate serial: 019510C73EBC941AD2B227A7638E4C3FAE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
Manifest number: 0E84
Signing time: Sun 16 Feb 2025 22:00:47 +0000
Manifest this update: Sun 16 Feb 2025 22:00:47 +0000
Manifest next update: Mon 17 Feb 2025 22:00:47 +0000
Files and hashes: 1: 7uWTl_XWr-28jZFmr_67KAAJH5Q.crl (hash: XZcny5ejx0hDBCDH3Brq/m0F2PK5E5fkAgQf2juJ3rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:3e:bc:94:1a:d2:b2:27:a7:63:8e:4c:3f:ae:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee59397f5d6afedbc8d9166affebb2800091f94
Validity
Not Before: Feb 16 22:00:47 2025 GMT
Not After : Feb 17 22:00:47 2025 GMT
Subject: CN=3038c1472a9460c231ab4c854259d724ab2db79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:41:ea:81:ce:1d:16:0c:16:25:58:28:2a:
39:eb:2f:ae:f1:54:68:80:38:c8:b2:20:36:58:8e:
01:bc:09:94:ca:f4:98:31:5a:8f:8f:a4:16:cd:40:
17:ea:33:e0:5c:5e:a7:fa:dc:f4:33:4a:a7:f2:79:
cd:7d:3b:89:e9:e3:ab:7e:2f:b5:80:82:b0:88:f9:
9a:34:60:65:70:f1:1c:07:ca:99:f2:3e:8e:64:22:
8d:81:64:78:8a:1a:2c:4b:33:48:c8:45:e4:32:dd:
cb:49:8a:aa:54:26:8c:2e:55:d1:1c:91:3b:61:97:
bb:69:94:ca:b8:9f:45:76:b5:44:38:99:c5:dd:fb:
0d:2e:b5:50:d2:a6:79:8f:62:4b:ae:d6:c3:66:3e:
ca:56:b0:5f:34:c0:4f:df:23:e8:c8:46:9d:cc:84:
41:c5:e8:0b:44:bc:79:9f:b3:3b:b8:06:48:bd:8f:
c9:88:1c:ee:da:ad:33:6d:97:73:4e:db:36:79:30:
30:3f:bb:b0:06:03:c9:ea:b1:3c:d4:be:bb:b3:55:
f8:0e:b0:6c:0f:40:42:f6:bb:55:21:6b:fb:f5:f9:
08:73:45:71:3f:91:a2:dc:d0:df:01:2c:93:cd:47:
a9:89:83:e0:0d:6f:0c:e5:5d:b0:3c:36:ba:88:99:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:38:C1:47:2A:94:60:C2:31:AB:4C:85:42:59:D7:24:AB:2D:B7:9C
X509v3 Authority Key Identifier:
keyid:EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:04:f3:59:9d:b8:ba:a6:77:1e:97:18:bf:ee:e1:64:bd:ee:
46:f7:d8:c0:28:fb:7c:93:69:a0:e4:a2:7d:f6:b8:8c:93:2e:
10:35:10:c3:b6:3f:96:de:15:55:b5:02:a7:73:2e:09:56:a1:
92:49:f7:16:d6:b2:50:cd:1e:99:2c:91:c3:3f:f6:78:94:64:
20:7e:c7:99:77:39:bd:82:9f:c1:fd:ce:9c:98:e3:47:d6:7a:
fb:6a:04:c8:90:a1:89:6c:ff:4d:40:b1:94:86:03:95:8c:c5:
67:2b:bc:7c:21:dd:40:d8:cd:c4:b8:03:11:b3:74:cb:ff:55:
58:f7:8e:46:38:33:4e:78:a0:44:95:68:61:67:f0:ec:2d:44:
25:d0:ca:27:71:85:0c:20:3a:6b:7d:94:ba:42:b9:95:ed:01:
20:76:6e:dd:b0:dd:67:6a:c1:b7:6c:70:dd:fa:9b:0d:91:e6:
f4:d6:2b:ac:d9:62:72:c6:4f:c3:bb:3e:e8:4f:ed:75:19:c6:
c8:f3:ee:fb:cd:26:3d:d0:f7:6a:eb:b1:80:97:85:f4:a8:45:
9a:e0:50:38:c5:75:8e:ba:2d:6a:b3:02:0e:38:81:10:e4:31:
0d:9b:11:bc:d7:e7:b5:19:22:3c:63:a1:3d:0c:ee:85:38:f7:
7a:6b:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:17 2025 by rpki-client