![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
File: E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json)
Hash identifier: ZRzsuVF8KlMoHJJsS7ZqV6nar+3Xpv1wjPJ+U8MOu3Q=
Subject key identifier: 47:82:12:4C:99:82:05:AB:77:D2:C2:6E:27:1C:5D:68:6A:45:A4:4F
Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
Certificate issuer: /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Certificate serial: 019510FE19D3C6962DBF69871B6A83DA44F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
Manifest number: 0326
Signing time: Sun 16 Feb 2025 23:00:42 +0000
Manifest this update: Sun 16 Feb 2025 23:00:42 +0000
Manifest next update: Mon 17 Feb 2025 23:00:42 +0000
Files and hashes: 1: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: dnsSOKxh42tOGvn4ISof1S2d644IiUSWfocIvWxq7Ro=)
2: JAqvgN4KkkWNoe1vrMrVsDBqmfE.roa (hash: QG1yL1zcYsT8fBEaDP08SL61cVF4WfYEKH5BAPzFTBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:19:d3:c6:96:2d:bf:69:87:1b:6a:83:da:44:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Validity
Not Before: Feb 16 23:00:42 2025 GMT
Not After : Feb 17 23:00:42 2025 GMT
Subject: CN=4782124c998205ab77d2c26e271c5d686a45a44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:19:12:80:06:51:db:42:31:a2:db:be:41:
fe:1d:97:51:66:c1:c8:28:66:3d:83:c7:f0:9c:2b:
5a:67:ff:b2:03:1c:02:36:1e:68:d2:b7:6a:e6:11:
4d:37:4b:a4:22:42:5b:56:cc:50:74:03:07:7c:6e:
ac:10:0b:dc:04:d6:a9:47:01:e3:fa:d7:3c:22:de:
1f:2e:b5:6f:34:c3:c0:57:f3:0d:fa:e3:4f:c5:f5:
aa:77:c8:1b:75:89:f7:b2:c1:a2:97:48:8a:57:f5:
03:f6:46:d2:68:6d:4c:91:40:2d:d9:cf:a5:00:09:
6e:33:cf:cb:a8:37:99:db:f5:25:b0:89:da:c9:f1:
13:5a:24:bc:4d:e6:3e:b7:7a:3f:73:0b:3a:b8:8f:
24:c7:2d:86:5f:cc:ac:50:5d:6c:19:5d:30:91:03:
e0:59:ac:18:d5:a5:92:bf:cf:54:a7:c4:90:f0:d4:
86:b0:ce:5a:3a:30:69:e6:a3:d2:09:42:a6:ff:92:
5c:da:ff:c4:4a:cc:86:c7:cf:5a:50:a5:e4:0d:cb:
9c:84:e2:db:87:6b:9f:2a:44:40:23:7d:40:9e:ec:
2e:7f:e5:58:2e:f8:8e:82:eb:0f:d8:2b:26:02:ec:
5a:ae:70:e0:01:3a:42:5d:31:f4:b4:08:ca:4f:21:
91:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:82:12:4C:99:82:05:AB:77:D2:C2:6E:27:1C:5D:68:6A:45:A4:4F
X509v3 Authority Key Identifier:
keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c6:90:17:92:c7:e6:64:54:57:42:13:ce:0a:b9:f5:3d:ec:
16:7f:9c:f2:25:a3:49:f0:93:9d:d9:4c:05:32:94:a0:d0:72:
fa:1c:fc:2d:f7:cc:f9:98:49:49:60:f2:be:9b:69:50:df:65:
df:0c:bd:ac:9a:6c:3d:90:89:23:bb:57:54:53:2e:dd:84:cd:
0a:99:4e:1d:f1:9f:84:a7:81:c0:23:22:68:21:9f:53:16:b5:
47:1a:50:36:e3:82:7f:12:17:cd:4a:8a:1f:99:f4:88:c2:ef:
bb:99:f6:50:61:f9:59:a1:f8:64:aa:f8:d0:dd:3c:ab:be:15:
dd:f2:32:94:06:b8:84:4a:b4:91:3b:ae:40:4d:3b:26:15:d0:
5e:39:40:71:60:d9:68:e6:1d:43:13:2c:c6:eb:ee:6c:d3:72:
c3:6b:86:d9:f6:3a:b0:31:d2:4f:86:47:e0:9c:be:f5:9c:82:
2c:ad:d9:64:a2:90:36:86:67:a6:79:d5:0b:f0:81:85:47:97:
75:7d:42:48:73:92:dd:36:ed:91:10:3d:e7:08:fb:72:79:aa:
d5:2a:b5:ba:bf:18:0c:9c:75:0d:1d:f2:0d:bd:a5:36:a6:8e:
b8:3e:a9:9a:26:9e:b5:c9:2f:c0:a1:fa:6d:73:7e:fc:88:9d:
f3:e3:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:37 2025 by rpki-client