![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File: Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier: a+b29jowuJhQN/FiJW9I1ewFb+aucq3Q79rrWWHJWes=
Subject key identifier: 30:02:D3:D2:A5:37:51:16:3F:EB:46:03:8D:09:79:F1:31:5D:87:B6
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer: /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial: 01951134BE2F3F0EF356EC0366F8AA05C319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number: 0881
Signing time: Mon 17 Feb 2025 00:00:23 +0000
Manifest this update: Mon 17 Feb 2025 00:00:23 +0000
Manifest next update: Tue 18 Feb 2025 00:00:23 +0000
Files and hashes: 1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: FGMNCQqyN5Q1Gnh9uN6dpXZa7xlGlFEWXr6ovn5UJvc=)
2: R7UR19A8DA5u7WHUKAJI549nkdo.roa (hash: 4PQK0W7UKUZhH5u+a1D7FV7JRsd1931HwX1XToed8Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:be:2f:3f:0e:f3:56:ec:03:66:f8:aa:05:c3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233adc97f9826262007f46286591830df58fc55e
Validity
Not Before: Feb 17 00:00:23 2025 GMT
Not After : Feb 18 00:00:23 2025 GMT
Subject: CN=3002d3d2a53751163feb46038d0979f1315d87b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:28:b9:8c:47:ed:e5:b6:ee:63:4d:23:4a:f8:
42:33:55:e0:dc:a9:4f:67:da:17:36:68:8b:72:d1:
eb:15:91:7c:d0:33:0c:f6:5c:a2:7f:db:07:7d:16:
7a:cc:59:7e:d7:63:38:2a:e9:92:de:79:28:a8:e6:
16:d0:e1:62:29:57:07:05:15:3b:79:5a:99:82:bc:
c9:2c:f0:5a:8c:a6:3a:48:fe:69:14:62:76:73:95:
c3:e6:fa:d1:69:0c:91:6e:eb:6a:d9:dd:f4:b0:99:
20:8c:9e:21:66:be:f5:ac:f1:d9:ee:95:4a:37:1e:
13:37:f8:41:36:3b:f6:6c:1c:02:af:b2:4c:7c:3c:
ac:82:91:29:dc:32:aa:5a:4d:5b:09:17:8e:c8:42:
79:a7:e0:6f:17:12:2c:c6:fc:8d:38:8c:bc:d2:10:
37:c1:a5:1e:84:51:92:23:4e:d2:b1:42:38:e0:11:
dc:3f:b0:05:ba:11:0a:b9:cc:11:58:d7:38:32:2f:
df:13:63:c5:fb:ea:f2:dd:eb:60:85:89:63:47:ea:
a6:1d:12:0d:61:9b:8c:58:94:ac:d7:66:0f:10:f4:
5c:2c:96:02:ee:b4:e4:3c:db:e5:2a:97:c7:77:f0:
32:74:da:bb:e4:26:11:9c:87:26:ee:49:b8:66:e9:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:02:D3:D2:A5:37:51:16:3F:EB:46:03:8D:09:79:F1:31:5D:87:B6
X509v3 Authority Key Identifier:
keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:36:de:98:58:5a:bf:3e:d3:19:b3:a0:a7:40:41:09:ff:c3:
1b:f4:ad:a3:27:92:b1:ca:66:4b:97:31:a7:7c:37:43:64:29:
6f:36:d6:2c:65:7a:4a:d3:26:ca:c5:b5:87:f6:63:ad:cd:16:
9a:ff:79:57:46:f9:8f:02:c2:62:15:23:4d:8a:81:54:ff:2b:
a8:1b:30:f1:57:d6:fa:7d:a1:bd:78:0e:48:c5:41:94:dd:b7:
a5:e7:f8:28:cf:b7:80:8b:d5:dd:8c:d5:55:b7:26:cd:5a:3c:
34:36:15:a1:7d:74:52:ac:db:9c:78:b3:6c:bc:e2:36:03:ed:
17:ca:1f:ef:bb:82:8c:fd:b7:f9:15:9c:f3:d0:db:25:a7:6c:
53:a8:5f:67:d6:bd:6a:32:71:d9:1a:73:df:c4:2e:a2:1e:1e:
e5:51:93:d8:b7:d0:8d:ef:0b:ed:bd:08:ed:f7:40:c6:35:35:
0d:a0:1e:f2:70:52:b3:98:c6:26:a0:2f:74:f4:20:ad:7a:75:
ef:97:7d:37:04:3b:7b:e4:08:33:85:1c:39:9a:6a:2e:78:7f:
47:42:49:94:96:dd:9b:5a:a6:7d:88:76:cb:7a:7b:67:17:3c:
81:2f:da:a9:86:b6:79:07:96:3c:25:83:71:63:bf:73:9a:f8:
12:a0:64:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:45 2025 by rpki-client