![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
File: yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft (raw, json)
Hash identifier: lRXwp6otKxqWvvKvSyhJM/lQ4uwENoy/hG4jhAd6vaM=
Subject key identifier: 88:60:E6:C6:F1:38:96:9E:9F:26:37:1E:AF:A7:BF:3B:EC:AA:CA:96
Authority key identifier: CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
Certificate issuer: /CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Certificate serial: 019511A2B9E79FDF308FB3CBEF021F4ED3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 02:00:31 +0000
Manifest this update: Mon 17 Feb 2025 02:00:31 +0000
Manifest next update: Tue 18 Feb 2025 02:00:31 +0000
Files and hashes: 1: rYX5OSjisXVBgIC77wXTzITcbqs.roa (hash: SPnPR9xhnE7+gAosfCHCqCDCEcNhjAT2MXJYL+lu5nM=)
2: yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl (hash: J6o4LYBl1YH6fxnNWQKIgF8tvPwK5s/Gv/LDrWJkdBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:b9:e7:9f:df:30:8f:b3:cb:ef:02:1f:4e:d3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Validity
Not Before: Feb 17 02:00:31 2025 GMT
Not After : Feb 18 02:00:31 2025 GMT
Subject: CN=8860e6c6f138969e9f26371eafa7bf3becaaca96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:27:0f:92:a8:9a:0b:52:47:75:f4:54:29:
86:b3:84:4a:08:c4:1e:60:ed:98:12:20:b7:ff:92:
c7:b7:03:de:10:8a:d7:3a:98:05:96:28:f7:da:f4:
08:9c:3f:bf:94:29:19:fa:aa:73:77:ff:a5:b2:a7:
f3:67:20:c9:e1:a1:2e:e8:c0:9f:f4:9e:6b:ad:b6:
2b:11:8a:1e:45:ba:89:a7:79:b8:9c:93:6f:3d:5c:
c3:6d:81:c8:84:dc:2c:9d:10:07:6b:99:5c:3e:2c:
09:c2:ad:b1:b4:88:ba:60:4b:74:9b:09:d5:01:cc:
66:07:e3:42:b9:4a:b9:f4:38:b8:6c:b5:44:c7:87:
62:57:3f:81:11:41:ef:c3:62:08:a3:c7:c8:20:58:
62:41:75:e2:20:10:68:b8:fe:e0:e1:87:71:92:d2:
1e:d8:6d:92:bf:c4:e0:66:dc:42:1b:e7:e2:6e:90:
f6:6c:11:09:39:01:17:35:6c:2c:c4:73:0a:3d:21:
d3:1c:a3:07:36:75:3b:24:11:ea:e7:1c:ad:59:cf:
e9:0e:c5:bb:fc:77:6d:26:69:04:55:1c:5d:f6:ad:
9a:16:e4:b8:a9:a8:38:29:97:d1:d7:ea:8f:58:c0:
d9:26:3c:31:40:ea:16:87:07:92:4f:85:0a:f1:3a:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:60:E6:C6:F1:38:96:9E:9F:26:37:1E:AF:A7:BF:3B:EC:AA:CA:96
X509v3 Authority Key Identifier:
keyid:CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:17:db:c5:1c:a3:de:14:85:5c:0d:fe:0e:d0:3f:c5:d9:4a:
5e:bc:0c:94:79:d5:a8:b1:7c:ff:c0:91:c7:e1:98:9f:8d:5b:
d3:2e:0b:10:3a:05:76:bc:b3:1d:c4:f4:53:bd:74:e4:6b:26:
be:c8:b9:d5:ab:2f:d9:29:1e:d1:f8:ce:5e:bf:fa:6d:47:f7:
a2:24:22:15:36:52:0e:8e:79:e8:8b:ea:62:e4:4c:a2:57:2b:
7c:03:a4:ce:e9:de:14:d0:06:a3:d6:04:51:8b:47:b1:51:21:
ec:a1:45:27:08:28:08:92:ef:68:f9:62:53:a5:49:d0:79:16:
32:7e:8b:1b:f3:ab:b2:b9:3c:e5:c4:30:dc:c9:ef:cf:ad:6a:
8e:de:0a:29:6c:33:ec:db:0b:1e:72:d4:79:ec:67:e9:a9:78:
a7:c8:22:ea:b5:67:88:18:27:4f:8f:ff:7d:c9:3b:5e:8c:9a:
8a:c0:62:89:74:a2:e7:c2:1c:0b:9a:bc:26:21:88:01:29:3e:
1f:41:1b:e8:ef:1e:0d:5f:4a:49:bf:fd:ab:9a:55:58:17:7d:
e2:94:fa:6b:be:82:1d:78:57:92:3d:7d:d1:00:ac:67:de:6d:
8e:e2:72:fd:fd:82:53:7b:67:7e:14:45:5b:f2:33:0b:3b:ba:
b4:20:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:29 2025 by rpki-client