![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
File: _6vCNZX9gER9mPXsNRMWG9JHP8Y.mft (raw, json)
Hash identifier: NZDaLdHlm1FkJuLG107G3sRJvS6vMPWbFFL9FuyiTJY=
Subject key identifier: 25:E8:24:0E:CE:CC:62:1F:F5:03:B5:70:BD:75:4E:D4:30:05:06:65
Authority key identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
Certificate issuer: /CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Certificate serial: 01951134DD46919CF97D9B8DEF62C4C703EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 00:00:31 +0000
Manifest this update: Mon 17 Feb 2025 00:00:31 +0000
Manifest next update: Tue 18 Feb 2025 00:00:31 +0000
Files and hashes: 1: _6vCNZX9gER9mPXsNRMWG9JHP8Y.crl (hash: 4GrE8+DoulYKObZvwKV1dyAI/hhQyua7mqPnmYyuwkA=)
2: n0WE9rwocCHCYcBXCKZfpxQ3G2M.roa (hash: BVGoc++GdN0W0NrCtzzymI9R4sw/BZhgTYZXjkBBFbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:dd:46:91:9c:f9:7d:9b:8d:ef:62:c4:c7:03:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Validity
Not Before: Feb 17 00:00:31 2025 GMT
Not After : Feb 18 00:00:31 2025 GMT
Subject: CN=25e8240ececc621ff503b570bd754ed430050665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:bd:4e:44:49:ff:8b:04:d9:db:db:ec:3a:
31:55:ed:b6:88:48:66:8f:5b:6d:70:1d:96:dd:8d:
99:f3:4f:f0:5c:42:93:58:b4:6b:6a:9e:69:fd:e6:
3b:ee:34:57:75:73:63:c5:52:9f:8c:2a:81:7d:e8:
5b:f7:39:f8:67:3a:d3:70:af:6f:86:34:53:cb:b0:
e9:27:51:cf:bc:c1:d9:97:dc:ee:06:44:96:46:eb:
55:e1:6f:86:b1:82:af:4d:4f:d9:5e:a9:68:f7:2e:
6b:3f:3c:31:cb:a6:9f:56:94:f8:a0:8f:89:c7:42:
b5:74:77:bf:90:e1:dc:c8:c2:22:82:86:e8:fd:c5:
da:20:96:ee:54:12:e0:44:21:ac:3d:34:f1:ac:f6:
04:2b:c9:c5:c6:26:68:c0:61:9a:0b:6b:c9:9e:b6:
62:d3:3b:e2:7b:40:35:66:06:66:e3:9e:e8:57:be:
a1:7e:d0:16:10:eb:81:b7:4f:ae:db:dc:27:03:01:
2a:48:6e:9a:2b:01:ef:c1:eb:d0:60:39:09:75:8f:
5c:c6:b7:a4:93:1d:7f:ca:79:22:61:7b:8b:3a:ab:
dd:ea:15:6f:48:07:b0:94:0d:4a:b0:6a:5b:c8:42:
c6:26:d8:47:15:1d:d1:30:60:4c:be:22:a2:9f:55:
19:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E8:24:0E:CE:CC:62:1F:F5:03:B5:70:BD:75:4E:D4:30:05:06:65
X509v3 Authority Key Identifier:
keyid:FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d0:ab:91:5c:0d:b1:23:27:8c:f8:c4:77:bc:d7:49:ad:a3:
6c:6b:33:8b:14:aa:08:14:06:8c:49:30:72:3d:56:4c:fd:00:
4c:d7:5b:ce:7e:3a:dc:88:0c:97:b8:81:07:5d:33:2e:38:89:
97:4e:d8:cd:11:de:27:fe:5d:6a:45:dc:43:d9:2c:b0:a9:b1:
34:9a:c2:8f:94:94:fc:1d:a8:ea:2e:fd:47:7d:08:5f:df:48:
91:4a:b0:56:19:60:ce:7b:96:9e:ea:3e:da:43:0b:5e:87:1b:
03:ec:b6:96:02:98:d6:e5:1d:73:47:51:0c:2d:76:b8:c7:c8:
1c:d0:c6:7a:d6:09:9a:86:33:4d:6d:64:4c:81:af:e1:8f:6b:
37:da:fa:76:68:50:cc:76:bb:61:17:46:f0:7f:25:d6:de:94:
dd:5d:23:1a:dd:06:03:c2:ed:90:87:da:c6:43:37:b1:c0:e3:
8b:ca:05:24:21:00:b0:f6:c9:2f:59:40:64:ed:c9:3c:56:86:
f8:23:c5:af:19:d1:99:7f:3a:8e:9e:58:cd:0d:c5:3a:a2:03:
8e:21:9f:64:43:49:f4:4d:85:80:fa:7a:ff:e4:76:80:9b:ab:
07:89:28:75:db:0d:62:00:85:c5:d6:9d:46:b7:cf:19:38:fb:
b0:19:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:36 2025 by rpki-client