![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
File: ZnsrG--6F48w0qMhxFG27qVGYnQ.mft (raw, json)
Hash identifier: amrZ84bIzGOKt0FNUC8itN0B4zDmJO23+3skN1wzJHo=
Subject key identifier: 81:2B:62:E3:D0:9F:FE:5A:C2:12:18:CC:F1:8F:B9:99:62:C8:65:C3
Authority key identifier: 66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
Certificate issuer: /CN=667b2b1befba178f30d2a321c451b6eea5466274
Certificate serial: 019511A2BAE9D9ACBFE9A8533AE9C73A570C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
Manifest number: 0D69
Signing time: Mon 17 Feb 2025 02:00:32 +0000
Manifest this update: Mon 17 Feb 2025 02:00:32 +0000
Manifest next update: Tue 18 Feb 2025 02:00:32 +0000
Files and hashes: 1: ZnsrG--6F48w0qMhxFG27qVGYnQ.crl (hash: pwFKFJakyaaQbdP2s/rQbKbohQN55OkX4R2Llt0wNiU=)
2: mcf7JveA9sP5q1fzjwTXe1Y9B94.roa (hash: vxgrGFoktHB0oWvn12RjOAHTGS54BioUpfkDuJPEQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ba:e9:d9:ac:bf:e9:a8:53:3a:e9:c7:3a:57:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667b2b1befba178f30d2a321c451b6eea5466274
Validity
Not Before: Feb 17 02:00:32 2025 GMT
Not After : Feb 18 02:00:32 2025 GMT
Subject: CN=812b62e3d09ffe5ac21218ccf18fb99962c865c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:86:8f:2c:a6:6c:95:e3:58:b6:0e:0d:1c:
37:81:e5:fa:9d:4d:db:e0:16:31:0b:6f:41:81:85:
fd:83:ed:3c:fa:4b:37:cc:5e:e3:76:85:e4:75:06:
20:81:97:20:51:31:76:c1:64:a9:96:7b:09:ed:ef:
86:d2:31:29:9a:15:ce:65:0d:17:ca:ab:c7:cc:79:
d8:ac:eb:8d:1e:57:c5:f6:f9:ba:fb:52:aa:bf:0a:
5f:52:62:c1:91:66:c1:e2:75:b4:5f:28:3f:47:05:
63:c5:e4:00:45:55:1d:0f:c1:08:03:20:d0:8f:38:
7e:52:2f:a2:e8:ac:64:94:89:2e:33:e2:4a:c0:61:
31:ab:10:38:05:01:be:6c:dc:2a:6f:e3:9d:8b:2b:
01:66:4b:25:23:41:44:37:75:ab:e5:86:24:24:76:
53:2a:0e:32:7a:62:11:43:ac:99:43:2a:2b:ed:54:
49:73:24:9f:4b:ca:7e:7e:be:df:cb:55:87:2f:45:
d7:94:69:4d:48:25:12:34:91:e6:42:ea:87:26:d0:
b5:30:18:8d:c0:e1:da:35:b8:ca:ce:06:a0:40:7f:
15:08:eb:b6:f8:b9:b9:51:76:3a:6b:b3:f5:13:12:
b9:41:da:79:3e:af:6c:48:35:9e:dd:4e:ef:09:a1:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2B:62:E3:D0:9F:FE:5A:C2:12:18:CC:F1:8F:B9:99:62:C8:65:C3
X509v3 Authority Key Identifier:
keyid:66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2e:f3:5e:54:69:bc:1a:02:25:c0:88:64:94:bf:08:73:df:
ee:33:21:e9:04:5f:a8:67:60:46:9a:c8:c5:43:8a:5c:9d:1b:
11:27:ce:10:99:49:99:2f:51:38:5d:02:88:d6:07:5c:0a:a2:
c6:e1:67:00:27:a5:fc:22:2a:31:89:f8:b8:b1:e6:03:0a:52:
ea:4f:46:5a:64:be:5d:a9:66:02:7f:67:45:af:f9:59:57:e6:
28:a9:c6:37:ea:8b:7c:b7:c6:83:17:8c:e4:2d:61:87:86:17:
2d:64:26:97:24:c0:af:cd:27:9f:4a:30:86:9e:1d:f0:96:be:
0f:24:40:9e:af:45:27:23:a9:d4:fa:3f:c7:d1:11:13:f1:39:
ff:81:95:91:98:44:8d:70:97:5d:dd:18:68:0a:c9:74:35:c9:
1e:99:57:f2:0c:3d:c0:8a:46:18:7f:a0:68:e4:f0:b7:f0:b8:
6c:c2:1e:1e:4e:5c:fc:55:d2:23:3d:54:26:92:15:65:0f:24:
f1:0b:d1:58:c1:8c:a5:fd:f8:c3:64:54:d8:98:7d:dc:45:74:
da:a0:7e:d6:4f:dc:77:18:33:42:14:4a:5e:56:39:82:16:06:
55:56:c9:51:84:6a:14:5e:16:04:c3:e0:3d:16:79:b8:57:fe:
8b:9e:1b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:11 2025 by rpki-client