![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
File: B1lFaGGImKn7cgrgm-0O0b5PhX4.mft (raw, json)
Hash identifier: yqbvJL+hcUgNmc6FWdvkSWhu3OzKvbgFchxUpu5ru9s=
Subject key identifier: 63:AC:06:CF:5E:FF:85:77:0A:82:A2:6D:0D:26:67:60:9E:1F:59:0F
Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
Certificate issuer: /CN=07594568618898a9fb720ae09bed0ed1be4f857e
Certificate serial: 0195121040C624CDACC4ACE1B706D3EE7704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
Manifest number: 0E3F
Signing time: Mon 17 Feb 2025 04:00:09 +0000
Manifest this update: Mon 17 Feb 2025 04:00:09 +0000
Manifest next update: Tue 18 Feb 2025 04:00:09 +0000
Files and hashes: 1: B1lFaGGImKn7cgrgm-0O0b5PhX4.crl (hash: Gwxp6oZFbhEkjhdS+c/L/K8zvU75YUpCAlfGCi4AIxs=)
2: wAhroXPNvLdteZoxcXWVyonpn3o.roa (hash: OBx51TGLI2Tyl8gKiqIk4oM/XlGHUTNQTSsRU8kwYpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:40:c6:24:cd:ac:c4:ac:e1:b7:06:d3:ee:77:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e
Validity
Not Before: Feb 17 04:00:09 2025 GMT
Not After : Feb 18 04:00:09 2025 GMT
Subject: CN=63ac06cf5eff85770a82a26d0d2667609e1f590f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:83:f2:31:df:e1:15:09:01:01:2c:2a:2b:
e2:52:95:0e:04:1f:dd:9a:96:8b:24:96:71:3e:56:
95:01:46:54:09:c6:3f:e1:d7:76:b8:64:7b:f6:90:
c4:c7:2b:4e:e7:b7:01:0a:8e:0b:73:38:5e:cf:0c:
a9:51:ba:49:8d:04:53:80:aa:a0:da:75:a5:65:c6:
a9:72:79:cf:55:e2:39:5f:fb:7e:ec:bf:94:6e:af:
47:b4:b3:6b:26:78:8c:e1:79:d3:f0:e2:c7:66:92:
41:0a:80:11:0a:ee:6c:40:a8:7c:8b:de:8f:34:0f:
57:7d:82:ac:2c:dd:b7:3f:8f:e4:9e:57:79:76:2b:
f8:57:71:45:4e:cf:48:02:6d:8c:3f:e6:1e:1b:b2:
f3:53:b5:81:65:2b:a0:cf:58:2e:01:22:d9:01:04:
9e:d4:1f:db:04:83:55:15:5d:08:ff:1e:1b:ec:04:
a9:5e:e3:61:3d:ab:ef:48:4b:75:39:f3:a7:3d:7e:
44:b0:14:13:93:f9:39:3d:6f:b0:8b:59:d2:f8:c9:
fa:54:96:85:6a:01:44:0d:7a:e2:0e:ab:e7:87:08:
c6:cf:ad:c4:a6:80:a9:cb:d2:0a:51:5d:f0:2a:77:
32:0f:f7:2e:07:26:5c:23:46:a2:95:6e:19:ea:68:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AC:06:CF:5E:FF:85:77:0A:82:A2:6D:0D:26:67:60:9E:1F:59:0F
X509v3 Authority Key Identifier:
keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6e:9e:9c:47:7a:b2:7a:c6:6a:b5:7c:b0:a5:d0:d6:66:af:
31:e7:f4:4b:f6:35:99:92:53:14:40:77:45:fe:e1:12:89:53:
0e:60:0b:e7:93:d9:16:5d:0f:44:50:af:b7:39:66:cc:3b:00:
3a:5f:60:fb:aa:25:26:c7:09:5a:0b:ed:aa:67:d5:45:56:91:
3e:3c:8b:8b:36:a1:ae:66:b2:bc:93:12:5f:06:2f:37:27:e3:
33:61:92:fc:4a:bd:e4:e9:fd:a1:e9:be:90:2c:d6:1f:96:ff:
97:f7:e3:27:cb:21:1f:96:d5:13:8f:87:63:6c:c0:cc:03:96:
83:18:fd:33:c8:f3:41:c9:e2:47:ff:f9:4d:c6:52:cf:aa:09:
46:0a:09:f9:c7:4b:60:70:39:94:d0:39:5a:ca:51:09:2a:82:
e0:f6:f7:c5:d9:49:69:f0:cf:b6:de:1f:35:ad:9b:d8:b4:9a:
81:94:d8:5c:ae:99:2a:92:5e:9e:08:7c:b7:4f:ae:67:ef:ea:
ce:35:38:a9:ca:09:80:9d:17:22:ff:87:04:24:cc:ba:a6:0a:
28:94:41:d4:d1:ae:d4:52:b0:b7:c0:8f:57:34:50:cb:03:88:
9a:84:09:7f:31:1b:be:39:73:4d:4a:d3:8c:07:f4:6b:92:7f:
b1:66:b1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:01 2025 by rpki-client