![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
File: MjFs1IgVYto785JbSRi24R12UUw.mft (raw, json)
Hash identifier: DFNR/3K6+zEva+vlCxIi3qXSUk/7w0C6iNmqZx2mQhQ=
Subject key identifier: F3:72:A5:F9:0B:C6:2D:EC:5B:EC:6B:7A:BD:E6:47:1B:8D:57:95:46
Authority key identifier: 32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
Certificate issuer: /CN=32316cd4881562da3bf3925b4918b6e11d76514c
Certificate serial: 0195127E51448AA3DF3233556783EBD8F512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
Manifest number: 0BB3
Signing time: Mon 17 Feb 2025 06:00:23 +0000
Manifest this update: Mon 17 Feb 2025 06:00:23 +0000
Manifest next update: Tue 18 Feb 2025 06:00:23 +0000
Files and hashes: 1: MjFs1IgVYto785JbSRi24R12UUw.crl (hash: U1Nk8kX/UG8OfacMBL++gH4SdHfhlDhPMYYLMyVcpIU=)
2: O3osI0EMQ6lE3X_ye8aviCt4iTA.roa (hash: 9DOrDt/vfxy297yCahpwE4Xa/8MH6AlQc6vnFQ987B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:51:44:8a:a3:df:32:33:55:67:83:eb:d8:f5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32316cd4881562da3bf3925b4918b6e11d76514c
Validity
Not Before: Feb 17 06:00:23 2025 GMT
Not After : Feb 18 06:00:23 2025 GMT
Subject: CN=f372a5f90bc62dec5bec6b7abde6471b8d579546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:28:19:72:12:ea:2e:cb:eb:11:d0:8f:5d:
12:7f:ff:26:6f:bd:68:9a:d4:f0:50:17:d6:c9:3b:
b8:09:13:56:da:9b:0d:93:62:95:19:9b:0a:bb:ba:
3c:5b:b8:74:18:e6:1c:58:2e:8c:e0:a0:93:53:5a:
49:b2:dc:c9:53:d9:96:91:31:2a:60:cf:64:dd:7b:
8f:64:9e:b5:cd:fc:c0:9b:c6:67:3d:34:e1:39:4a:
1b:a6:0d:64:b0:d1:1f:17:24:9c:14:70:b7:0f:84:
66:f2:97:64:1c:58:0a:9f:2c:86:fc:61:f1:1d:2e:
ca:ea:25:1f:a8:78:e7:28:1a:b0:d4:b3:a5:15:04:
13:76:ce:5f:9a:a6:34:1e:6e:de:a5:35:ec:27:c7:
6c:f8:9d:73:23:0b:b6:2f:29:9d:6b:2b:59:14:13:
d4:f2:8f:7d:11:55:01:88:68:42:79:02:92:e6:32:
f5:4c:82:9e:ac:13:a8:f2:01:ed:6b:86:fd:91:37:
8d:00:d2:7a:8e:d6:9d:c2:b6:78:2b:73:48:aa:a0:
a4:a2:65:5a:9e:06:09:91:5f:47:7b:fa:f9:cd:bb:
b0:5d:93:a4:ff:5a:65:65:6c:ee:16:bc:93:fc:57:
b3:a0:2e:46:21:7a:59:d7:2f:d6:88:ff:99:0a:ec:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:72:A5:F9:0B:C6:2D:EC:5B:EC:6B:7A:BD:E6:47:1B:8D:57:95:46
X509v3 Authority Key Identifier:
keyid:32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:17:96:7f:c5:af:31:e1:4b:61:0d:2d:f7:d0:b1:8f:f4:e3:
2e:21:b8:0e:e1:2a:29:8f:a9:dd:bc:03:7b:4e:48:e8:5c:fb:
14:79:9d:80:5d:40:54:7f:a1:f6:a6:e1:98:3f:b9:23:20:d9:
c7:4a:88:55:92:a5:76:62:16:f5:39:dd:d0:f8:ad:21:30:21:
b1:bb:91:17:6d:95:da:6a:b7:ea:00:91:c2:88:6d:58:14:4d:
1c:1f:36:df:e5:67:85:93:46:b7:14:53:c3:e6:21:72:5b:ab:
30:11:5c:c4:f5:e1:86:20:f0:ff:3a:0f:9d:ae:ee:b0:7c:44:
be:22:c3:50:8b:30:9d:91:19:5f:ec:3f:36:f4:04:01:93:0d:
03:8c:fa:ca:09:bb:3b:be:b0:53:33:69:8c:53:ed:5c:11:98:
c3:e1:b9:1b:8e:38:52:ee:77:3e:c4:55:06:11:87:fd:2c:48:
e3:95:45:ff:6f:29:53:c8:81:b3:45:cf:75:58:e1:f5:56:64:
ab:38:c4:0f:a7:1c:f8:46:dc:a9:74:d6:d9:d2:66:2e:52:7f:
f4:3a:3a:6d:d1:f5:1b:5b:5e:3c:d2:cc:33:70:60:9d:97:90:
ee:ba:a4:4f:13:d2:9d:c7:0e:c9:f7:d9:1a:c7:40:50:ec:7e:
8a:fb:35:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:40 2025 by rpki-client