![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier: aKcFp0TIP3cwPYWd+xl3Ljh9lI1Ak8Fe8KIZVUMipT4=
Subject key identifier: CB:08:07:5E:35:1C:52:10:93:2A:88:EE:95:98:9E:94:1C:33:60:78
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 019510C78606DAD113B708437EBA5C25681E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:01:06 +0000
Manifest this update: Sun 16 Feb 2025 22:01:06 +0000
Manifest next update: Mon 17 Feb 2025 22:01:06 +0000
Files and hashes: 1: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (hash: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=)
2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: KMbocZf4rcQHXjWsnfv4FKbtaaAZ2XFgTWVcQRUmohc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:86:06:da:d1:13:b7:08:43:7e:ba:5c:25:68:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Feb 16 22:01:06 2025 GMT
Not After : Feb 17 22:01:06 2025 GMT
Subject: CN=cb08075e351c5210932a88ee95989e941c336078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:34:45:61:28:3f:4f:e1:10:88:a6:d8:ac:
d0:cf:56:07:06:6c:7d:16:9b:5e:32:8b:55:04:1a:
ff:ec:5b:79:3d:56:1b:4a:99:c0:56:b6:7e:58:e9:
a3:c0:3f:94:b7:2d:ea:59:12:d4:8b:19:a1:74:fe:
c2:e0:bb:fc:28:54:d8:23:68:9c:0a:d0:4c:02:30:
ec:60:87:2a:e5:c4:78:26:c4:6a:6a:6d:19:21:57:
cb:e9:6f:a3:e4:94:4b:97:16:82:67:86:b2:c7:13:
9d:5b:f1:eb:a6:03:ec:54:a7:e3:94:ee:ca:7a:e7:
7e:1d:93:9a:fe:54:ec:78:6d:4b:37:df:46:95:34:
6c:6b:4e:39:c5:51:d9:c4:44:5f:6b:69:bf:7e:95:
68:52:a8:ed:65:aa:4a:3a:f1:04:c5:b4:a1:78:71:
39:dd:bb:91:db:ce:1e:45:e3:48:a4:80:c8:7e:e0:
55:b7:b7:35:80:a2:7c:64:54:e6:6f:55:c5:c1:65:
e8:71:ff:92:40:81:f5:3c:1c:3b:6c:df:f5:de:10:
d7:ce:1a:2a:42:74:b3:74:f2:47:48:55:79:d0:6c:
4c:0e:d0:44:3a:ac:f4:52:e0:73:5a:b4:80:f5:d8:
36:eb:ec:ca:8e:28:f4:f6:a7:45:a3:05:1b:3a:95:
55:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:07:5E:35:1C:52:10:93:2A:88:EE:95:98:9E:94:1C:33:60:78
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5f:c3:b2:af:c4:fa:62:6b:ba:9a:19:95:d1:3e:02:1a:90:
cc:13:c9:cb:16:14:7c:93:70:5f:4f:2e:2b:b7:86:cb:b2:25:
6e:4d:e9:58:e7:e5:11:ad:17:49:7a:7b:bf:74:86:ab:ef:03:
0d:e3:60:24:e9:d9:63:6c:6e:65:e9:96:8b:25:e4:2f:a9:32:
39:88:5a:71:15:65:64:b7:0b:a2:b1:a6:b2:39:ee:94:1f:22:
a9:37:c0:9c:26:4c:39:71:e5:ea:8f:45:13:44:3b:94:38:5d:
8c:7d:26:e1:a9:a8:7e:33:68:ae:a6:f5:28:d7:ed:cd:b9:72:
60:2a:13:e6:f0:4c:41:6e:94:fd:f4:71:ee:38:73:75:b6:e8:
94:74:b2:78:8e:41:16:33:a3:32:f1:c0:60:16:9a:f6:e1:f0:
25:a4:9b:fe:62:55:92:1a:ad:d4:13:42:80:b7:5e:ef:4a:fa:
2c:12:96:ca:36:cb:01:ff:0e:29:e1:bf:90:e4:32:76:85:e4:
75:b5:dc:51:2e:4e:c3:8c:05:e9:d0:dc:8a:aa:7c:85:e6:f4:
cd:42:66:24:48:89:28:59:a1:a0:5a:ab:5c:60:7f:bf:c7:91:
af:55:5d:b9:71:10:6f:15:dd:05:a1:24:0d:91:18:04:20:ad:
66:cc:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:08 2025 by rpki-client