![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier: xwNVSYLwn5LLddf0tb7OQNXK6nhqPQ9j74Fj1jibfL8=
Subject key identifier: 97:D8:BB:CC:12:11:F0:E4:14:31:4C:4B:42:71:0D:79:06:E5:1C:0D
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial: 0195127E6E261A9AF4046E243F8677C964D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number: 02A2
Signing time: Mon 17 Feb 2025 06:00:30 +0000
Manifest this update: Mon 17 Feb 2025 06:00:30 +0000
Manifest next update: Tue 18 Feb 2025 06:00:30 +0000
Files and hashes: 1: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: daUb8isu/m9MEySwTn49unTlG64BDCUjoua2WYuqntU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:6e:26:1a:9a:f4:04:6e:24:3f:86:77:c9:64:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
Validity
Not Before: Feb 17 06:00:30 2025 GMT
Not After : Feb 18 06:00:30 2025 GMT
Subject: CN=97d8bbcc1211f0e414314c4b42710d7906e51c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:af:67:2e:30:8f:68:86:51:d1:63:f2:eb:
48:97:55:a4:c3:43:22:14:13:1b:17:e2:cf:c6:ab:
45:77:e4:e5:53:86:2a:1d:7b:f2:de:52:88:f0:8c:
47:51:9d:3a:da:14:44:2d:d1:3d:0a:03:6b:05:fc:
cb:90:61:fb:49:13:1d:79:c2:cd:de:df:f2:48:ff:
c2:8d:81:9e:38:41:3d:93:fd:7d:5c:1a:58:f1:6d:
61:bf:da:c4:45:93:d4:04:dc:be:4d:5b:a8:70:d9:
56:15:44:ab:e3:8d:c8:37:ee:62:f7:63:b0:79:6e:
33:4e:f5:40:07:28:61:a4:0c:4f:ef:2a:f9:bd:cf:
f2:bb:de:9d:2f:31:99:26:92:2a:bc:39:77:70:65:
8c:8f:f4:9d:90:5f:1f:27:45:90:d8:68:17:86:13:
f2:c0:d2:e2:d3:d8:06:86:2c:cc:ff:e5:85:9e:66:
83:5f:e6:77:cb:d4:76:00:d5:96:a9:ce:57:30:79:
39:3c:b3:58:3a:de:72:f0:a5:9e:20:84:89:89:0a:
20:c7:17:a2:d2:30:be:8b:b0:39:47:df:64:3f:ff:
a3:b5:23:e0:be:0e:40:07:0b:ff:25:32:e6:28:22:
59:38:74:82:3c:f0:da:39:c1:7c:38:db:51:e6:83:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D8:BB:CC:12:11:F0:E4:14:31:4C:4B:42:71:0D:79:06:E5:1C:0D
X509v3 Authority Key Identifier:
keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9f:cf:a2:eb:7a:63:f3:f0:4d:db:4c:f7:4a:5c:c2:8a:4b:
e4:6c:06:50:2f:fe:a2:e0:d9:e2:fe:99:ad:67:07:74:fb:99:
da:f4:f2:b3:9d:5f:e1:91:a9:36:d1:bf:88:8e:4c:af:5f:7a:
0b:1d:82:f3:37:77:55:fd:b3:14:09:6e:1c:25:5b:dd:da:b4:
75:4e:48:ed:68:bf:97:49:cf:9a:1b:77:cd:0d:b1:1f:85:6c:
49:95:e7:61:5b:2d:3f:de:fc:c9:f0:ae:c8:74:d0:f3:68:19:
44:8f:8a:eb:b7:79:f9:2c:e0:54:8b:89:7d:91:e8:c9:4d:be:
0b:a4:46:68:18:05:77:a2:04:dc:a6:35:2f:ff:59:fe:33:a3:
1a:74:4c:0b:16:1f:d2:61:d0:2b:37:f0:57:5b:43:c0:46:1f:
b3:74:a9:4a:11:75:34:08:f1:9c:9d:9f:5b:43:7a:a2:c9:19:
24:fe:ae:ec:c9:7b:14:d6:2e:f1:c9:18:a0:60:31:58:c6:2e:
69:89:5f:fb:f0:d1:aa:f9:a5:b2:c8:f8:cb:42:2d:94:b5:4b:
3c:db:87:be:51:66:20:1c:21:82:1c:5b:a1:13:4d:b8:ad:68:
a0:d6:89:a6:52:06:8f:10:3b:aa:6b:ea:80:ab:1f:5e:12:1d:
0b:48:ce:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:09 2025 by rpki-client