![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
File: qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json)
Hash identifier: iueKIrDbhc4Unaapm7c3sXqtdmT8foHfSE1J9a5XQiw=
Subject key identifier: 68:5B:4B:93:78:F9:51:08:57:96:C5:DF:28:03:64:DB:EA:65:D0:BC
Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
Certificate issuer: /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Certificate serial: 01951210AF219B65EA9EE67126C810534586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
Manifest number: 0342
Signing time: Mon 17 Feb 2025 04:00:37 +0000
Manifest this update: Mon 17 Feb 2025 04:00:37 +0000
Manifest next update: Tue 18 Feb 2025 04:00:37 +0000
Files and hashes: 1: EIr__RLMMt-7cOeUxPceAyVLfLA.roa (hash: I7nOwl/EmoWFHPn01B2Q9SwyfzZiNKdHb9+3iK0TA1M=)
2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: D95ljxZFPkoOzLi2EEFqnj8l93U/iKSf35OpfDh2S8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:af:21:9b:65:ea:9e:e6:71:26:c8:10:53:45:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Validity
Not Before: Feb 17 04:00:37 2025 GMT
Not After : Feb 18 04:00:37 2025 GMT
Subject: CN=685b4b9378f951085796c5df280364dbea65d0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:a4:dd:7c:c9:1b:ca:ef:41:b1:fe:ff:27:
b5:8e:40:fb:cc:6d:01:8d:53:f3:49:a6:3f:20:4b:
01:de:0a:85:85:a6:33:0f:4e:d0:f5:9c:69:04:a5:
e7:58:93:f5:1d:c8:a3:63:e8:a0:54:a1:6a:43:e9:
61:c6:b8:58:ae:37:64:67:3c:67:60:83:43:61:9f:
a8:37:03:a0:9e:e6:6d:49:d0:7e:2c:35:54:b9:69:
a2:37:86:c0:f7:33:91:09:47:77:e1:5e:93:94:b6:
73:82:12:e3:bf:d0:5d:2c:b0:52:e5:d3:3d:3e:22:
36:41:60:05:a5:f6:14:cb:2c:89:17:2f:3d:a1:f6:
d2:cf:0d:a7:e7:0d:68:6f:da:b0:7f:43:31:53:44:
f6:db:a2:b2:3b:a6:e0:9d:5a:e0:42:54:d5:45:8e:
b3:32:20:36:40:08:28:0f:fb:ac:52:ac:88:41:d8:
f0:63:33:bb:c2:dd:cd:95:e4:b9:ed:fc:a6:48:f5:
6a:83:0b:e1:00:f5:a3:85:21:68:1a:75:74:fe:75:
7b:a0:b0:91:4e:ec:c8:52:b5:00:e8:2d:7a:82:16:
03:34:f3:e8:f6:f0:6d:4f:a7:38:96:66:6f:c8:60:
3e:68:70:0c:e8:38:b8:de:2e:38:e9:bd:03:1d:58:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5B:4B:93:78:F9:51:08:57:96:C5:DF:28:03:64:DB:EA:65:D0:BC
X509v3 Authority Key Identifier:
keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:76:d9:3e:38:58:90:c5:c2:ea:fc:e6:ad:fa:b4:ea:c0:02:
3a:13:40:3b:0e:2e:ec:a0:7d:48:13:48:4c:47:07:9a:ae:7f:
9f:df:57:7c:33:99:4f:7e:ee:c7:30:dd:4f:41:67:7e:cd:c4:
29:93:3d:1e:10:3d:99:1e:99:4c:16:1e:38:ef:0d:7c:0c:8c:
85:ac:bb:2b:a3:a3:c4:ce:a7:52:84:8a:c9:94:02:90:bc:11:
eb:ce:ab:21:f6:68:af:d0:f0:3d:2b:47:dc:e5:53:d4:45:29:
fb:d7:19:a2:06:70:a3:fa:6c:33:cf:32:a3:da:db:67:39:ef:
0e:c1:98:5b:8a:91:62:00:ff:32:e6:5d:04:f1:26:6c:4d:22:
d3:e0:2f:e7:ca:82:80:10:21:4f:6b:1e:8c:b2:97:05:d7:5c:
1e:69:7a:2b:24:22:0a:d9:aa:3e:a6:99:ed:db:ed:bf:77:99:
22:2f:87:31:28:02:df:fc:52:60:8f:19:6c:4f:da:ec:cb:82:
b8:6a:c7:1c:76:cd:75:51:97:d8:a3:f7:ef:a7:4e:2b:91:86:
fc:4b:50:64:ed:6e:ee:f7:50:b7:1c:65:ce:c7:e5:da:00:74:
50:4b:fd:07:e1:27:c1:42:a5:fd:2c:5e:9d:af:6a:e9:db:d1:
73:0a:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:48 2025 by rpki-client