![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
File: 0dyvv2n_2nKwgna9sRGTVkrtj5c.mft (raw, json)
Hash identifier: pBM8saio1b03tb747FQmFKv2aLUaJHzZzrPgOx11Drc=
Subject key identifier: 73:5B:88:9F:3F:60:A1:0E:D0:BD:34:9D:2A:BA:F0:12:F2:F4:AE:EB
Authority key identifier: D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97
Certificate issuer: /CN=d1dcafbf69ffda72b08276bdb11193564aed8f97
Certificate serial: 019510C6AEDF0D3D5FF195C43A6103E34D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 22:00:11 +0000
Manifest this update: Sun 16 Feb 2025 22:00:11 +0000
Manifest next update: Mon 17 Feb 2025 22:00:11 +0000
Files and hashes: 1: 0dyvv2n_2nKwgna9sRGTVkrtj5c.crl (hash: MUcQAlUDC7nZGwASLfC8h3GA8dtrZJ/jt2v8TR3srnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:ae:df:0d:3d:5f:f1:95:c4:3a:61:03:e3:4d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dcafbf69ffda72b08276bdb11193564aed8f97
Validity
Not Before: Feb 16 22:00:11 2025 GMT
Not After : Feb 17 22:00:11 2025 GMT
Subject: CN=735b889f3f60a10ed0bd349d2abaf012f2f4aeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:13:bb:52:19:0d:81:73:1a:c3:69:c0:76:
3a:d9:34:c9:b5:d9:6b:9f:c2:b5:fd:fa:1e:b7:e5:
c4:7f:aa:96:3e:b3:8d:4f:1a:d5:49:eb:be:34:06:
ce:fc:4c:61:f5:a0:fb:93:57:a9:10:5f:31:68:fb:
92:14:58:c9:45:ca:bc:b4:f3:5c:27:7a:16:a4:84:
64:25:fb:50:38:93:2b:a0:f1:d7:45:06:fa:61:66:
9d:b1:23:8b:a7:d2:02:5a:65:d1:15:d2:62:94:18:
22:21:90:d1:d5:07:91:77:e7:91:63:d2:09:50:62:
86:75:de:e6:d8:12:ca:61:4e:89:1d:58:05:86:52:
e6:35:1c:5c:a5:33:92:17:a5:40:f2:0f:4c:39:af:
72:46:c7:bc:eb:9e:9d:21:f8:2b:3c:81:b8:e6:52:
c4:6c:6c:22:e0:31:dd:9e:87:e8:77:36:f5:d2:a7:
a6:73:1d:02:52:15:f7:a3:65:fb:3d:05:e7:13:7a:
75:56:e2:a8:fe:e8:b7:a0:fe:82:05:1e:53:f6:14:
1f:63:94:aa:58:cb:fa:ba:06:8d:a7:0e:de:f5:97:
f9:d6:2e:de:64:ca:d4:0c:da:b8:2b:4c:48:4e:67:
a7:92:fb:e6:9f:91:d1:52:3a:33:03:80:ab:c7:83:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5B:88:9F:3F:60:A1:0E:D0:BD:34:9D:2A:BA:F0:12:F2:F4:AE:EB
X509v3 Authority Key Identifier:
keyid:D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c9:e5:46:6b:ac:61:99:a2:8a:27:89:7f:3f:72:52:c5:14:
12:01:ad:8c:16:03:e6:f7:fc:57:b7:a4:43:37:cc:24:8d:72:
c4:60:72:c0:97:33:f6:bd:14:59:a3:85:f1:28:d2:55:1a:5c:
0c:9b:b6:ad:15:38:4b:a1:a9:ef:97:66:df:bf:df:df:e4:f5:
b2:3c:ea:9e:d0:f4:04:70:7f:8d:50:8f:fd:05:ff:7d:ad:a3:
c9:bd:cd:a6:76:09:20:f7:7b:aa:31:bf:c3:41:14:29:ee:7a:
97:13:59:77:3a:8f:67:7f:c7:c0:c4:83:db:2c:8c:b4:87:83:
c7:46:aa:c3:f4:e0:79:2f:ae:92:2b:d7:b3:44:db:ba:94:de:
0d:08:f7:f2:6c:4e:d5:4f:6f:a2:17:95:e1:97:f3:d9:54:8b:
0f:b5:9f:97:68:3c:32:5f:79:95:d4:76:af:1c:40:7d:7f:7c:
e0:7a:48:5a:e2:a1:e5:eb:e4:97:73:5c:bf:ff:4d:96:51:08:
cc:df:40:c9:12:75:2a:a5:28:b6:00:31:0b:f8:66:8a:39:91:
a2:6a:96:b1:e9:c6:b7:d0:2c:e3:c5:7c:f4:02:57:d4:e9:b0:
9b:bb:8b:27:75:fc:74:fb:7e:41:2d:98:1e:ff:7c:34:23:d6:
16:1b:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:41 2025 by rpki-client