![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
File: Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft (raw, json)
Hash identifier: hLCAZbhYkUjqj6hBhRSPSbdQgn3hVlq5twZYeXs+ztE=
Subject key identifier: A1:B6:71:C3:A8:E5:20:B8:B4:AD:7E:3F:7D:6F:0A:6B:F6:9A:D5:2B
Authority key identifier: 56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4
Certificate issuer: /CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
Certificate serial: 019510FE24FCCF29BE5FEFA389A0AFE38097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
Manifest number: 137B
Signing time: Sun 16 Feb 2025 23:00:45 +0000
Manifest this update: Sun 16 Feb 2025 23:00:45 +0000
Manifest next update: Mon 17 Feb 2025 23:00:45 +0000
Files and hashes: 1: Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl (hash: LeKcoqbVvlB/V763C17laeZlcu96KKbmc4zlWuHvjn8=)
2: xE3UCINMnG0RCT_m2jFifz3YI_I.roa (hash: 4ag6h9vHiKl6oco6jDKbi/mumQRgQeuzaOi8WereNNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:24:fc:cf:29:be:5f:ef:a3:89:a0:af:e3:80:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
Validity
Not Before: Feb 16 23:00:45 2025 GMT
Not After : Feb 17 23:00:45 2025 GMT
Subject: CN=a1b671c3a8e520b8b4ad7e3f7d6f0a6bf69ad52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:53:9d:cc:82:da:f8:8f:f1:64:c7:28:e6:
82:3d:ea:2d:c8:82:d9:f2:43:4b:a5:ad:37:58:5a:
c0:82:78:5f:e3:1f:97:b6:c2:4a:b3:0b:56:ab:6f:
c9:62:1f:ae:dc:f8:0e:25:ed:0c:f4:8b:e9:67:22:
93:2c:26:e4:e5:12:fa:50:57:6c:d2:db:ff:f8:43:
ee:df:0a:0d:25:d5:a8:e5:e2:06:ed:7b:9b:6d:39:
59:5e:d6:a0:d5:91:4a:e1:c7:de:a3:77:6f:77:1c:
6e:f0:99:51:f5:c4:2e:9e:47:aa:7f:de:c5:24:f1:
d0:f8:5f:41:77:4c:6c:94:0b:02:7a:99:e7:a6:31:
5b:0b:e1:97:e8:04:ad:eb:a9:18:0a:a8:a0:9d:80:
50:86:9a:cc:8d:f4:5f:9d:2c:ca:b1:4c:e7:d2:e2:
68:b6:ba:a2:d4:f6:b4:0e:47:d0:11:b2:05:3e:43:
a1:bc:4e:ba:c6:54:8d:40:af:93:94:90:2d:66:5b:
27:a8:9e:68:9d:57:16:df:97:57:36:4d:d6:05:77:
54:5d:f0:95:9f:11:7b:a5:65:bd:3f:c6:3b:9b:13:
64:91:2b:90:ee:5e:c7:cf:20:58:af:25:db:4f:e5:
44:db:fc:7b:78:81:8c:b1:e7:58:8f:65:a7:36:90:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B6:71:C3:A8:E5:20:B8:B4:AD:7E:3F:7D:6F:0A:6B:F6:9A:D5:2B
X509v3 Authority Key Identifier:
keyid:56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5f:bf:65:53:7d:7a:9d:7d:9e:76:60:c0:5c:5b:8c:5e:e2:
0b:fd:26:cd:14:a0:ce:b7:6a:d2:7b:61:62:b4:16:bd:af:48:
67:cf:bb:da:5b:4c:de:38:3f:0c:80:8a:18:40:89:2b:e1:7f:
37:69:ae:18:06:a7:68:16:2b:6b:2a:bf:06:13:f8:2d:5b:be:
ef:98:ab:ad:81:f0:fd:4c:7d:c5:96:78:be:12:b1:b7:b1:5f:
0e:b0:be:f6:40:ec:e0:48:2e:d6:6c:b1:5b:78:52:cc:b2:7b:
4b:e4:fc:d2:a0:ed:bb:e4:90:d6:59:d5:ff:86:ca:83:58:9f:
a8:e9:40:e8:da:b5:61:15:90:24:36:b4:90:2d:c9:7a:ce:55:
b3:70:3f:c3:50:44:f0:37:c3:37:3a:02:5e:ed:21:e4:c8:2c:
3f:1e:b4:07:71:e6:19:49:1d:c6:1e:ae:34:e2:ba:f3:6d:24:
14:aa:9f:f9:d5:1d:f3:d7:63:b5:29:c4:7d:e0:50:09:07:ec:
75:92:5b:fc:e8:46:47:dc:ad:ef:a6:b5:86:df:63:45:90:95:
d7:68:73:87:af:02:52:0e:74:d5:23:ad:83:2b:d8:33:2d:66:
95:6a:52:ec:53:f1:a2:7e:a8:34:bf:ed:b6:fc:aa:3d:5c:12:
03:7c:76:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:11 2025 by rpki-client