![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File: B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier: 8Y+gPRXz6ylkJ2E0pZ7GpUXuNn2yCqQ89h8/7da61O0=
Subject key identifier: 15:D4:9C:19:95:74:B6:C5:D8:12:4B:A3:A0:85:96:B5:18:07:0A:B3
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer: /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial: 019510C79AFEC81BC62D25E9D6E0F0C9A88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:01:11 +0000
Manifest this update: Sun 16 Feb 2025 22:01:11 +0000
Manifest next update: Mon 17 Feb 2025 22:01:11 +0000
Files and hashes: 1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: du+Z/p6DfRR3P1s2OaRbUAWhPtNUXFVUYgqaWA17Ih0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:9a:fe:c8:1b:c6:2d:25:e9:d6:e0:f0:c9:a8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c610b2a06db1831854b6726c33090336287415
Validity
Not Before: Feb 16 22:01:11 2025 GMT
Not After : Feb 17 22:01:11 2025 GMT
Subject: CN=15d49c199574b6c5d8124ba3a08596b518070ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:b7:68:5d:94:d4:59:1c:e6:40:71:d8:27:
8f:fa:13:a0:08:a4:d9:0f:14:ef:8d:27:b0:b7:a9:
c7:d9:23:85:8a:9b:6c:6f:aa:d4:54:7b:eb:0a:c2:
d3:23:df:3b:71:96:5f:cc:d3:dd:a8:f7:85:e2:dd:
14:bb:df:dc:c1:59:d7:5f:12:41:2d:58:9c:41:bc:
fa:df:3b:cf:54:d4:ca:13:bd:d4:ec:46:44:fe:f6:
cc:50:1a:c4:ad:f7:d4:e3:ce:d7:8c:35:18:c7:f0:
e0:05:eb:04:2a:4b:10:31:14:bc:79:d0:fa:b8:62:
23:72:7c:1c:04:c8:94:dd:00:59:a7:9e:dc:08:81:
08:e1:49:77:97:c3:6c:5b:29:8b:ce:bc:8b:d1:65:
63:d8:62:98:91:64:63:c3:de:55:d3:3e:59:84:0c:
4c:4a:86:06:59:de:09:70:ee:e4:5a:b4:68:2f:33:
bc:b5:fa:ae:74:04:1b:47:a9:31:3b:2b:e3:06:f1:
c5:69:aa:c9:87:cc:37:61:28:ee:80:58:6d:11:3d:
9f:d0:29:3e:1c:e4:ec:b6:63:b6:75:c2:2c:ba:e3:
9e:3d:cd:d8:06:63:fc:e5:d9:92:07:32:2d:9a:60:
3c:dd:13:ff:20:a4:21:7e:f6:91:71:e2:e2:49:a4:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D4:9C:19:95:74:B6:C5:D8:12:4B:A3:A0:85:96:B5:18:07:0A:B3
X509v3 Authority Key Identifier:
keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:eb:2a:6e:e4:e5:22:d6:b2:72:10:ce:1c:80:0b:f6:86:bb:
45:5b:fb:10:72:20:93:43:1c:8e:1e:78:9b:c1:85:17:b0:ae:
c1:cf:05:63:c4:27:3c:0e:a5:dc:5b:5a:f9:8a:09:f4:b2:22:
50:81:c6:7f:82:97:e7:1a:a6:04:dc:35:41:a2:d0:d8:da:06:
9c:c5:d0:44:4d:ac:ed:fb:f7:b4:11:5f:3a:02:69:11:bc:63:
41:d7:1b:0d:75:fc:93:ec:a4:65:04:20:e5:f5:1d:dd:38:eb:
d5:b0:cf:59:f9:b3:65:7b:55:c7:c3:09:16:c7:41:f1:23:58:
78:51:09:e5:82:bd:a4:05:7e:bf:cb:92:e7:d6:9b:85:46:2c:
06:4b:f6:91:a7:55:f9:1c:c5:c7:1e:55:03:60:bb:18:14:a1:
5b:f7:11:a2:84:c5:16:a9:33:32:93:fa:e7:b1:21:71:a7:77:
e5:94:72:d9:5c:cb:c9:dc:d3:ba:50:c8:c1:5d:09:77:65:ad:
26:59:05:96:30:b1:e6:e6:2a:23:a8:70:e1:a5:df:09:cc:95:
90:d5:99:ba:ff:09:cc:b5:65:31:4c:35:44:3b:94:7a:bf:b0:
13:28:40:82:44:f0:d6:57:dc:21:38:1e:83:a7:4e:a7:4d:ae:
ed:9a:d2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:27 2025 by rpki-client