![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
File: nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft (raw, json)
Hash identifier: hxBURFZNxR5bz0XiN6Eloo9If0HL4a93D4ZRkvERD6A=
Subject key identifier: B2:7B:B8:43:B7:DD:51:D7:D4:2C:3E:A5:09:ED:5E:50:0E:3B:1D:6D
Authority key identifier: 9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
Certificate issuer: /CN=9c375226fce627e322806c93a543e23f26f54916
Certificate serial: 019510C7D52370C9AEA6D0C9CADF5037098D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
Manifest number: 099E
Signing time: Sun 16 Feb 2025 22:01:26 +0000
Manifest this update: Sun 16 Feb 2025 22:01:26 +0000
Manifest next update: Mon 17 Feb 2025 22:01:26 +0000
Files and hashes: 1: nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl (hash: 6kwhRC1Ay0As6wuDQ1okFxmAFmQW6s3j36r0NuV9y5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:d5:23:70:c9:ae:a6:d0:c9:ca:df:50:37:09:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c375226fce627e322806c93a543e23f26f54916
Validity
Not Before: Feb 16 22:01:26 2025 GMT
Not After : Feb 17 22:01:26 2025 GMT
Subject: CN=b27bb843b7dd51d7d42c3ea509ed5e500e3b1d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:a4:44:bb:41:42:b4:15:17:07:ee:d9:90:
a9:03:86:93:b9:46:12:18:d5:60:c7:06:a1:d5:cf:
09:26:41:eb:df:01:11:f5:31:14:63:8c:f0:ec:83:
04:4b:75:62:35:41:0c:10:c7:19:a9:77:69:a1:96:
b8:06:47:e3:57:84:8e:d8:f6:33:0c:7c:cd:67:f1:
70:6f:db:9d:e5:31:23:d8:bb:d2:35:fc:33:d2:fc:
8f:b9:fd:47:aa:93:0f:c7:92:e9:a9:90:56:e0:ca:
a0:74:b4:72:db:88:22:10:d3:9d:cf:27:f8:c5:1e:
75:d0:c9:1e:0a:f3:00:36:9e:99:cb:60:a6:21:0e:
ab:a4:5d:13:7e:b6:c6:ce:65:29:1c:0f:c6:22:90:
b1:57:c5:2b:02:c2:42:13:c9:df:75:eb:21:82:d5:
8c:dd:36:29:b6:6c:97:5e:5d:d9:53:b5:df:0c:e2:
79:bf:73:4e:3a:7c:83:1d:29:78:6b:53:42:1f:72:
1c:3a:f6:07:bf:c9:54:cd:fc:90:f2:7c:45:f3:0c:
01:79:b9:7c:1c:11:f3:b9:db:85:51:80:1e:0f:dc:
09:e5:78:b6:2e:a3:f7:55:bf:94:0d:44:a6:95:09:
e7:9a:87:62:47:63:97:85:3c:76:ab:92:84:22:41:
cc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7B:B8:43:B7:DD:51:D7:D4:2C:3E:A5:09:ED:5E:50:0E:3B:1D:6D
X509v3 Authority Key Identifier:
keyid:9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1a:1a:be:62:48:09:74:ea:15:fe:74:9f:28:27:2b:3f:20:
6c:63:7f:ee:e6:3d:6c:be:44:b3:f2:e9:94:ca:f1:e5:e9:48:
03:cf:f1:f2:f5:20:c1:72:1a:a7:21:a9:84:e4:16:54:c3:a2:
01:81:24:45:a9:63:97:79:68:1a:0c:8d:b1:f9:97:c0:90:cc:
aa:89:fe:46:50:ff:4d:23:9e:30:bf:00:90:c3:81:e4:46:d7:
05:75:95:41:c8:47:db:85:7c:47:46:6a:d9:c9:c1:4b:c6:0a:
a0:eb:a2:79:20:78:40:56:f1:f8:61:7e:49:43:d8:b6:92:85:
24:88:22:a1:38:b5:e0:9b:c3:6b:4c:cd:2a:e6:06:8e:95:bb:
e5:00:74:31:65:02:f6:01:e6:22:99:a7:34:55:c6:c3:77:a7:
8b:61:a8:c0:6b:18:21:9f:42:b5:db:f0:e2:5f:f8:a0:19:79:
0e:a1:28:ff:db:8a:ed:1b:18:23:f2:95:74:58:68:49:75:b1:
0e:6b:1f:de:3e:bc:27:e7:3a:19:71:da:f8:4c:6a:aa:63:19:
75:c8:e2:fa:67:d2:07:52:60:76:09:03:b9:d4:0e:7b:b0:58:
3c:c5:0e:ec:d0:c1:e5:e7:0c:78:72:9f:ff:77:14:75:13:01:
35:15:a7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:34 2025 by rpki-client