![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
File: MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json)
Hash identifier: KAzierW9oWUhJcTH6RajUj+X3kSkf0fcQ4Uf7VfzZx4=
Subject key identifier: 27:93:31:84:F6:C9:EE:8E:D4:E2:EC:E2:CB:AE:62:4B:FE:DF:9F:5F
Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
Certificate issuer: /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Certificate serial: 0195116BFAF2D0FA0ACA23621B7AD50C3CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
Manifest number: 0333
Signing time: Mon 17 Feb 2025 01:00:44 +0000
Manifest this update: Mon 17 Feb 2025 01:00:44 +0000
Manifest next update: Tue 18 Feb 2025 01:00:44 +0000
Files and hashes: 1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: Plmvb6eMqLlPwGhbocL+bQRpKZjN1KpySuiFUpZv0i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:fa:f2:d0:fa:0a:ca:23:62:1b:7a:d5:0c:3c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Validity
Not Before: Feb 17 01:00:44 2025 GMT
Not After : Feb 18 01:00:44 2025 GMT
Subject: CN=27933184f6c9ee8ed4e2ece2cbae624bfedf9f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:1e:3e:84:0c:75:9c:39:36:e7:01:fa:17:
bd:0f:61:8b:83:12:2c:d7:50:d9:a3:fd:de:3f:bd:
b2:18:f6:f7:2c:7f:00:77:1f:81:25:34:91:f3:d8:
9e:13:86:75:c7:47:d7:a3:aa:bd:72:ec:c6:32:3d:
10:12:72:17:86:fe:3f:f7:9a:b7:a4:b3:0c:0c:76:
90:8f:59:0c:d9:2e:e0:35:9a:c4:fc:31:10:ee:33:
d3:05:d5:db:ab:88:92:1a:cd:27:13:57:5b:34:ed:
8a:16:64:6d:8d:42:18:af:7c:14:97:e3:53:1c:dc:
9b:71:ab:ae:7f:48:f8:17:86:4d:64:b5:4c:4a:7b:
b4:3b:da:7c:d3:f6:ed:4a:72:22:19:13:ba:e0:d8:
25:92:8e:a1:29:3e:57:35:5d:73:14:6a:bb:0c:3c:
b8:eb:a1:16:d3:6d:89:52:b7:c1:a8:e1:55:8a:89:
41:3d:7f:db:35:e8:34:ea:79:69:b5:b3:6c:dd:dc:
f1:ac:44:40:e1:bd:18:c5:4c:80:2d:bd:5e:94:f8:
60:14:4b:8e:d3:be:ac:a5:ed:8d:c2:34:99:c9:f4:
e7:06:54:b1:a3:10:da:04:3f:e1:2f:0f:6b:96:0e:
08:a3:61:3d:bf:3c:9a:65:dd:06:16:ca:d9:55:e5:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:93:31:84:F6:C9:EE:8E:D4:E2:EC:E2:CB:AE:62:4B:FE:DF:9F:5F
X509v3 Authority Key Identifier:
keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:cf:c4:60:ad:59:55:4f:15:dc:ca:11:17:bc:10:c3:5e:0e:
e4:58:1d:74:7c:45:f0:50:7e:f0:3f:e0:08:21:00:bf:b4:f3:
65:2e:87:86:1d:7b:38:61:d7:11:66:7f:dc:2b:d2:ed:49:6c:
0c:e7:db:50:25:87:c6:55:88:19:b5:81:8b:b2:42:22:65:3a:
1e:ff:a4:f9:3d:2e:48:e6:1c:2d:f4:10:93:90:af:06:34:ef:
e7:5a:cb:80:0d:ca:5d:58:52:9e:d4:b0:e9:14:87:fe:4a:8e:
83:6d:31:ff:2e:8b:d2:9a:d1:d9:a4:17:78:f2:3a:24:b7:48:
e2:14:6c:a1:98:2c:cc:af:03:2d:02:ca:04:b5:90:59:93:7e:
6c:7b:53:28:08:20:5e:b2:e3:7b:05:04:20:ff:c5:51:9b:8b:
e2:d5:a4:23:00:22:35:53:d8:86:5e:5f:1b:b5:64:63:b0:7f:
65:b3:e6:d5:91:d5:36:98:96:aa:20:0a:42:1d:4a:00:02:ad:
12:ca:60:4a:bc:10:0f:2a:70:eb:7e:78:74:39:8e:7b:e2:e7:
db:f8:11:5c:b7:b9:0c:5c:35:9e:77:fa:0d:81:bb:92:e4:c2:
4d:eb:c0:8b:5d:7d:a7:40:92:71:86:a7:f6:15:e0:d6:ca:85:
cd:fd:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:01 2025 by rpki-client