![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
File: 80Q_W1x41o5znU-m_q_dJDsFKks.mft (raw, json)
Hash identifier: KbOnVPyl+q3g0h4J4au6XBOjQtXQQlnktBkDBwm9iRI=
Subject key identifier: 9D:51:01:B2:CA:6F:61:C2:80:DB:E4:60:D3:74:2F:D0:F2:01:33:E9
Authority key identifier: F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B
Certificate issuer: /CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b
Certificate serial: 019511D9A418F12726880DFAA661828C25C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
Manifest number: 083F
Signing time: Mon 17 Feb 2025 03:00:30 +0000
Manifest this update: Mon 17 Feb 2025 03:00:30 +0000
Manifest next update: Tue 18 Feb 2025 03:00:30 +0000
Files and hashes: 1: 80Q_W1x41o5znU-m_q_dJDsFKks.crl (hash: DhF7MkzexBphlrtuisg4j5TwFt4Hbj8IORNTHlAU7T4=)
2: k43rjk9OXsHM4eUp9ryidMIYrpg.roa (hash: nZ1oPuvx4yZUz9X/0NNanuY6VfbmWETyxMR7qm4VS+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:a4:18:f1:27:26:88:0d:fa:a6:61:82:8c:25:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b
Validity
Not Before: Feb 17 03:00:30 2025 GMT
Not After : Feb 18 03:00:30 2025 GMT
Subject: CN=9d5101b2ca6f61c280dbe460d3742fd0f20133e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:35:9b:3b:6a:bc:2a:18:11:ed:6d:46:8e:1f:
30:eb:2a:e2:bf:72:6e:dc:0e:f3:fa:f9:c1:6b:48:
dc:6d:6f:fb:1a:1d:06:b1:1c:f6:be:e3:96:dd:30:
ec:16:7e:b0:b6:c6:18:20:0b:84:94:56:55:d3:19:
7c:50:24:32:ac:10:b6:6b:60:4e:e3:b9:48:2d:61:
33:3a:32:6d:02:4b:c2:79:18:cb:14:94:ba:2a:28:
29:7c:57:1c:4d:66:dc:58:a2:1a:63:77:b6:ef:65:
ea:42:c4:c1:89:53:2c:f7:6d:4f:93:f8:58:1d:ad:
87:65:e4:d0:8c:82:32:96:1e:80:ec:47:95:14:cb:
96:b6:da:7e:db:3b:0c:b5:78:77:d6:c7:1b:0b:12:
58:e3:52:05:70:ff:bc:2b:b1:d4:a9:1d:66:f4:b4:
80:7a:52:cc:c6:6d:28:f2:2a:88:fd:eb:93:ca:c1:
46:5b:cb:fc:b6:e0:03:d3:09:4c:d8:7b:53:d8:17:
18:31:2e:c9:3a:68:e1:30:27:20:26:57:8e:bd:e4:
2e:a5:3e:38:73:ef:20:cc:cc:65:cc:96:46:b3:51:
4c:55:24:21:77:93:f1:e1:97:09:4d:7e:75:b3:4f:
bc:d7:5a:d1:d0:c8:53:73:15:87:5c:fc:c2:63:b4:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:51:01:B2:CA:6F:61:C2:80:DB:E4:60:D3:74:2F:D0:F2:01:33:E9
X509v3 Authority Key Identifier:
keyid:F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b9:4c:7b:17:0a:dc:c1:66:31:41:9c:2f:00:21:be:3a:56:
f6:da:e5:22:4f:95:c3:66:60:2d:2c:ba:7a:76:f5:16:51:44:
f8:f8:7a:b4:fa:8d:75:0c:21:b8:bf:25:35:c1:2f:b9:1c:0f:
fd:aa:a7:1b:cb:2c:5b:05:b5:ff:d5:72:84:c1:70:af:99:d0:
60:76:72:04:ad:d9:00:76:e0:93:27:60:35:7d:80:77:fd:b4:
bd:81:df:2f:c7:2e:95:ca:e3:dc:ae:19:30:df:63:d1:1d:1b:
7c:7c:ed:43:e9:56:a4:84:44:1c:95:d2:55:de:5e:8c:69:91:
22:d5:4d:8c:4e:c6:7d:cd:d1:af:85:35:fd:a9:47:bb:13:75:
5c:c2:05:bd:ea:aa:e5:08:54:09:1f:4b:21:6d:5b:20:ab:1c:
cd:d4:9e:72:9c:2a:b7:e7:75:f8:13:76:29:b3:43:6a:3b:2b:
58:a9:e9:6d:ca:e3:32:92:b0:5a:77:58:fe:dc:af:db:5d:fc:
12:c3:9a:6e:68:80:8f:65:59:33:1b:92:1e:b6:44:8d:89:aa:
71:4f:79:a6:e5:48:71:0d:49:20:2d:b8:25:7f:62:5f:d5:7a:
60:d7:5a:25:51:da:21:65:69:df:7f:f1:45:ca:47:48:35:1a:
c4:d7:08:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:00 2025 by rpki-client