![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.mft
File: wLvyQZaLZbBZpMrf4jNEmVKWMTI.mft (raw, json)
Hash identifier: nlnq299PgK/aj2EkccKqi+Egs5TbmFTRh02CjzRWLPA=
Subject key identifier: 7C:B0:42:9B:89:14:DA:5B:9E:50:67:A8:A0:66:9F:EB:91:31:1B:28
Authority key identifier: C0:BB:F2:41:96:8B:65:B0:59:A4:CA:DF:E2:33:44:99:52:96:31:32
Certificate issuer: /CN=c0bbf241968b65b059a4cadfe233449952963132
Certificate serial: 0195127E75261E44AE35642762045E54E18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLvyQZaLZbBZpMrf4jNEmVKWMTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.mft
Manifest number: 0438
Signing time: Mon 17 Feb 2025 06:00:32 +0000
Manifest this update: Mon 17 Feb 2025 06:00:32 +0000
Manifest next update: Tue 18 Feb 2025 06:00:32 +0000
Files and hashes: 1: wLvyQZaLZbBZpMrf4jNEmVKWMTI.crl (hash: uH00iv0GZeXdy1Kfmxy3ntLNXbKjcybVlOAxvT/4l7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wLvyQZaLZbBZpMrf4jNEmVKWMTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:75:26:1e:44:ae:35:64:27:62:04:5e:54:e1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0bbf241968b65b059a4cadfe233449952963132
Validity
Not Before: Feb 17 06:00:32 2025 GMT
Not After : Feb 18 06:00:32 2025 GMT
Subject: CN=7cb0429b8914da5b9e5067a8a0669feb91311b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:99:f4:f5:67:c1:cf:72:a2:7e:51:6a:d2:
40:aa:ae:6c:a8:59:0b:62:ba:45:59:ae:88:00:9e:
9d:1c:90:a4:59:f9:09:83:21:7b:21:d0:69:db:8b:
b9:b2:46:a8:0b:44:b8:ca:b2:3d:32:d3:e4:53:4b:
5a:4c:11:10:35:9b:45:db:1e:9c:17:26:af:07:08:
0b:10:37:cd:fa:2c:9b:bc:26:bb:f0:71:32:3e:0b:
ee:94:2b:81:6b:d4:40:f4:19:a5:9b:a2:f9:a3:a5:
40:d3:f4:67:78:78:b6:dd:84:d9:aa:47:5e:56:de:
de:c9:1b:f6:f1:0a:1a:0a:31:7e:77:76:89:5b:38:
db:6e:87:b4:67:6e:7f:fd:81:2d:35:e3:2e:70:68:
b9:7f:2d:04:ca:94:83:43:13:31:4e:2e:d2:6e:b4:
b7:0a:b9:ac:56:9d:66:6b:c4:b9:12:d0:56:03:8f:
f7:5a:ad:0b:ce:9a:4b:2a:02:d8:2e:bb:5b:c6:cd:
f9:49:e6:4c:d3:62:7b:6d:c8:2c:4c:5f:cb:7d:6e:
57:b6:44:e8:73:3a:b8:bf:be:c1:09:56:17:29:83:
66:34:b2:8a:21:f0:86:97:9f:18:8b:17:82:e1:ad:
43:6a:64:19:0a:d0:4c:ff:50:02:a3:2f:df:39:36:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B0:42:9B:89:14:DA:5B:9E:50:67:A8:A0:66:9F:EB:91:31:1B:28
X509v3 Authority Key Identifier:
keyid:C0:BB:F2:41:96:8B:65:B0:59:A4:CA:DF:E2:33:44:99:52:96:31:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLvyQZaLZbBZpMrf4jNEmVKWMTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:99:b2:1d:26:90:37:6d:80:74:44:94:ee:3b:85:b7:31:75:
fc:08:d7:d9:1e:7a:c1:b1:dc:45:60:ca:df:61:91:de:44:9b:
5c:ce:05:b0:b9:0b:9d:36:ed:9e:cb:c5:55:01:24:f6:8d:31:
47:37:a1:66:8d:f5:c2:5d:5d:c6:73:86:b6:b9:d2:1f:86:0c:
c3:02:48:66:15:b2:de:ef:1e:54:1a:39:51:69:ce:fb:65:6e:
df:4b:a2:f5:75:f5:7a:12:19:2c:38:bb:2b:12:74:2d:a4:d4:
1f:8b:b3:50:e1:50:68:07:a5:17:7b:61:36:c6:15:a4:03:b0:
73:a2:66:d3:14:14:5a:4c:7e:bd:22:c8:d2:c2:45:ef:ac:ab:
1d:7f:b3:c3:20:59:88:7a:03:a0:76:81:72:e1:0f:4b:a5:3e:
2b:28:84:65:f5:e0:ed:f8:a5:e4:9f:19:43:e7:18:9e:02:a4:
ce:d1:a7:44:7e:77:99:32:8f:a0:89:ac:92:71:3d:f6:a0:40:
46:f5:13:4f:7b:13:4b:c1:c2:d8:08:ee:00:b1:bf:34:09:6a:
3c:b1:86:74:75:e9:ff:a3:f6:2d:64:e1:68:63:a6:62:ba:2e:
13:f6:81:b1:b8:f8:1e:ca:7a:7d:fa:3f:22:b8:09:5a:0c:68:
e0:66:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:58 2025 by rpki-client