![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File: 1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier: NlE1p0KZM24CSdJt0mUYpc64CUefqBAoJqjtfB0bjn0=
Subject key identifier: 8B:05:A9:DF:4B:B7:04:D9:95:31:7C:88:31:F3:DF:06:13:C3:72:3C
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer: /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial: 01950FB49C43163E2D17C52AA35735F82E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number: 0BB5
Signing time: Sun 16 Feb 2025 17:00:49 +0000
Manifest this update: Sun 16 Feb 2025 17:00:49 +0000
Manifest next update: Mon 17 Feb 2025 17:00:49 +0000
Files and hashes: 1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: LuqBS1KA8RaJRyxGFQXxULAwNfdllsIIlAFJkAtO1EI=)
2: 6VURpuoGIEu-l_P4ZeBewDi5ITQ.roa (hash: 4B+IYvzd1z7mLmwV7sB69BtJr1xQnLEcg/11m55OmVA=)
3: SGD9M6mEugHCxM7uV2PsXdJ2hNI.roa (hash: LARKN5V/8dBxyk/X3NXKXQZvWRUhVkqxaNvzjumJGHs=)
4: sLZpvIMTgksZrvqormgvgok8KhA.roa (hash: F40TwnOKkG5HzR84w5cvXcd+kglYl0t+PxN2IvdlZDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:b4:9c:43:16:3e:2d:17:c5:2a:a3:57:35:f8:2e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Validity
Not Before: Feb 16 17:00:49 2025 GMT
Not After : Feb 17 17:00:49 2025 GMT
Subject: CN=8b05a9df4bb704d995317c8831f3df0613c3723c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:82:00:1a:d1:f7:75:51:17:7b:c7:2a:16:b9:
af:ce:76:07:a5:67:13:48:99:66:06:61:58:f1:af:
72:e2:ea:1a:d5:43:25:da:cd:b9:b7:fb:a8:b6:82:
cc:a5:fb:86:b8:c2:65:7a:f3:a9:85:ec:d8:c0:85:
f5:cd:1d:b8:18:e8:16:c9:94:1f:31:96:61:57:c5:
0d:9d:f8:7e:ab:aa:ed:18:3f:7a:33:2d:7d:07:49:
25:02:e8:0d:26:10:39:0f:35:a9:b0:6c:d6:7e:3c:
39:7b:20:a7:87:2d:96:2b:45:c3:1f:bf:21:e8:9b:
1b:6c:36:22:35:1b:09:e0:54:2f:05:28:f1:75:1a:
df:36:8d:22:a7:4c:38:8a:53:45:0b:a4:d7:70:c8:
7a:49:dc:26:91:b8:3e:f8:2a:50:a6:1f:1d:61:45:
25:18:6d:15:74:0a:00:bd:f7:6c:3e:93:bf:8b:de:
79:6c:0b:63:21:0a:fb:4b:c9:e3:07:e6:f4:cc:5c:
fc:ed:b8:ca:28:b1:86:07:fb:97:9a:c9:c1:16:97:
db:ab:47:95:f5:e1:35:2d:b8:fe:ff:7a:e7:47:0e:
c5:38:88:d0:8e:09:11:7f:b0:1f:f5:f9:65:5a:d4:
35:7b:21:a8:82:6a:7a:03:4d:a5:a9:76:20:5b:95:
a5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:05:A9:DF:4B:B7:04:D9:95:31:7C:88:31:F3:DF:06:13:C3:72:3C
X509v3 Authority Key Identifier:
keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ec:80:e9:bd:e7:d3:f7:b9:81:1f:69:97:68:3e:ec:0d:a3:
31:74:3f:c6:b5:88:d3:b0:c6:0a:8d:2b:c4:19:8c:3f:e0:7f:
ad:16:25:6b:f3:03:9b:99:68:30:2d:74:7a:79:e9:a7:bc:ef:
3e:78:e6:69:83:ab:c2:96:14:1e:9f:47:c2:1d:eb:d9:ee:02:
08:66:cb:56:25:49:1b:4a:3e:59:27:40:e8:03:f7:cf:d0:89:
04:dc:1e:17:df:5b:78:40:d4:c6:11:0b:64:05:5d:7d:13:fe:
13:b6:a8:03:64:13:d8:f0:e9:3a:bd:cd:5a:e9:5d:be:ff:11:
d4:11:12:9f:70:d9:1a:13:3c:2b:24:c6:46:9a:5e:a0:e1:81:
31:37:f9:af:88:13:80:76:9f:4e:dc:1d:45:75:be:21:e8:76:
4e:13:40:e9:c3:9f:6b:7e:11:e5:30:a1:6d:2d:42:af:0d:f1:
d3:e1:7d:5d:88:bf:bc:10:82:5e:79:c0:9e:af:47:88:f6:f0:
b0:c6:93:ab:4a:8a:67:8f:51:89:cc:91:c8:99:e6:4c:ff:76:
94:d2:55:05:a1:9d:12:88:18:88:4c:76:08:ed:98:6c:3f:d7:
9a:f0:ff:18:25:0e:63:07:f9:e9:88:d3:6d:06:dc:b2:ce:f0:
82:bb:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:39 2025 by rpki-client