![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: dIB4qNB1hpp1Ip3wE3TjPPBc3Rw4CALBhZO/cAV58SY=
Subject key identifier: A2:59:47:01:DA:96:11:28:2B:3F:C4:C0:41:6C:FF:F2:16:10:06:C9
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 019510C700C3586964718D1A04A9DDD8FA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0986
Signing time: Sun 16 Feb 2025 22:00:32 +0000
Manifest this update: Sun 16 Feb 2025 22:00:32 +0000
Manifest next update: Mon 17 Feb 2025 22:00:32 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: NFi6CQFuvDmlTJJAmZKF1sRH/KaCAPx9I1xBQBvRwqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:00:c3:58:69:64:71:8d:1a:04:a9:dd:d8:fa:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: Feb 16 22:00:32 2025 GMT
Not After : Feb 17 22:00:32 2025 GMT
Subject: CN=a2594701da9611282b3fc4c0416cfff2161006c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:3f:7d:e0:24:71:ab:63:98:8e:40:86:24:
12:3f:0b:79:cb:62:17:09:98:59:36:32:99:16:29:
e2:19:81:01:13:f9:24:cc:4e:5a:98:00:5d:4e:be:
96:eb:8a:76:0a:b5:ed:d3:1e:12:ec:5e:22:9f:de:
27:57:04:7a:60:bd:1d:10:34:ff:d6:24:9e:16:ee:
b5:e0:af:3f:75:54:86:9b:a1:cf:6e:d8:c7:41:8e:
18:b3:c5:96:11:cb:6a:6e:90:7c:bd:4d:c2:e7:af:
aa:a1:3e:9a:49:7f:1b:78:fc:e5:21:22:d2:00:04:
2b:2a:13:1d:18:10:05:1c:7c:a7:d6:ed:53:6c:c7:
35:00:a0:2b:78:b8:c1:16:e6:5e:91:c4:c8:05:83:
6b:21:10:b7:70:5f:29:db:ed:b7:06:ef:cf:40:58:
f2:b7:08:89:9a:d6:ad:41:ea:f1:35:13:e7:b7:7c:
b3:2e:d9:7a:97:cb:c5:cc:2c:99:e8:e1:d9:56:ef:
07:ce:df:01:bc:ef:17:54:88:64:de:e7:a4:c9:b8:
98:a5:29:c3:a4:41:18:e5:e3:6e:43:fe:8b:89:18:
1e:92:7d:78:1a:a9:85:04:d4:c4:08:df:fe:dd:9e:
96:0c:c2:09:89:87:80:d5:a4:d7:68:c9:0b:10:b4:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:59:47:01:DA:96:11:28:2B:3F:C4:C0:41:6C:FF:F2:16:10:06:C9
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e0:a8:46:69:a4:5e:5f:e6:5d:73:9e:c1:a4:fe:9c:82:de:
ea:e8:a9:d9:99:c7:e4:14:82:38:12:3c:dd:68:e5:3c:df:89:
a4:97:bb:6a:80:0d:69:6a:cd:68:e8:1f:70:1b:01:e7:03:f9:
d6:21:dc:86:af:e5:34:2b:f9:c5:05:be:88:33:07:ab:f9:85:
fc:74:28:b3:c6:cb:31:b2:62:09:67:47:2e:f3:59:50:eb:88:
ae:ac:fc:c3:b4:f2:09:98:ab:66:11:3b:6e:8f:19:e4:b7:22:
db:da:de:5f:bd:e1:60:d8:33:e9:62:40:4f:cd:eb:46:d9:6c:
0e:8f:ae:8c:82:ff:9c:e9:e3:f5:0f:5e:9f:ac:92:a2:89:d2:
fc:fe:0a:cb:eb:97:b4:42:cb:20:d9:a4:c9:c4:8f:70:7a:20:
37:32:2a:35:67:4a:a5:7f:35:57:d1:a3:2d:43:70:f3:2d:75:
f5:b2:74:84:57:6f:2d:7e:87:aa:85:36:b1:22:57:a4:6b:63:
88:c6:a0:04:94:99:cb:f8:50:bb:55:e3:3a:e9:ec:36:fc:1c:
13:2b:fc:77:16:72:5f:37:81:da:e9:90:8b:fe:7f:f2:57:43:
b8:66:f6:a1:39:27:05:8f:68:f2:ac:3b:9c:6e:d1:d4:18:aa:
8b:93:5f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:56 2025 by rpki-client